I0407 01:27:17.401499 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 01:27:17.401705 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 01:27:17.401825 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 01:27:17.407511 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 01:27:17.408160 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 01:27:17.408317 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 01:27:17.408428 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 01:27:17.411368 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 01:27:17.428303 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 01:27:17.435381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 01:27:17.439532 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 01:27:17.442719 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 01:27:17.442849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 01:27:17.445780 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 01:27:17.448492 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 01:27:17.450903 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 01:27:17.452808 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 01:27:17.452956 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 01:27:17.457518 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 01:27:17.462255 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 01:27:17.464888 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 01:27:17.467877 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 01:27:17.467931 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 01:27:17.470685 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 01:27:17.470711 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 01:27:17.470741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 01:27:17.472971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 01:27:17.475140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 01:27:17.476774 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 01:27:17.483221 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 01:27:17.486325 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 01:27:17.486501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 01:27:17.489752 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 01:27:17.492478 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:27:17.492802 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:27:17.493347 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:27:17.494223 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:27:17.509456 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:27:17.533067 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:27:17.545046 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:27:17.567925 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:27:17.584833 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:27:17.587940 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 01:27:28.274821 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 01:27:28.274802678 +0000 UTC m=+10.908020407 I0407 01:27:29.046889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:29.046945 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 01:27:29.04693841 +0000 UTC m=+11.680156149 I0407 01:27:29.047489 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 01:27:29.047467425 +0000 UTC m=+11.680685164 E0407 01:27:29.062171 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:27:29.062900 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 01:27:29.062862792 +0000 UTC m=+11.696080531 E0407 01:27:29.063000 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:27:29.065282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:29.065354 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 01:27:29.065344823 +0000 UTC m=+11.698562562 E0407 01:27:29.072943 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 01:27:29.073105 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:27:29.073153 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:27:29.073197 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 01:27:29.080111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:29.080192 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 01:27:29.080183864 +0000 UTC m=+11.713401613 I0407 01:27:29.093320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hmqfh" condition "Approved" to 2026-04-07 01:27:29.093285867 +0000 UTC m=+11.726503606 I0407 01:27:29.128463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hmqfh" condition "Ready" to 2026-04-07 01:27:29.128446517 +0000 UTC m=+11.761664246 I0407 01:27:29.160613 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:29.16059739 +0000 UTC m=+11.793815139 I0407 01:27:29.180362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:34.074095 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:34.074080987 +0000 UTC m=+16.707298746 I0407 01:27:55.541988 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 01:27:55.541961231 +0000 UTC m=+38.175178990 I0407 01:27:55.541998 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:55.542088 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 01:27:55.542077224 +0000 UTC m=+38.175294993 I0407 01:27:55.550539 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 01:27:55.550527995 +0000 UTC m=+38.183745734 I0407 01:27:55.598488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:55.598540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:27:55.598557 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 01:27:55.598551587 +0000 UTC m=+38.231769306 I0407 01:27:56.008357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6l5v5" condition "Approved" to 2026-04-07 01:27:56.008334121 +0000 UTC m=+38.641551880 I0407 01:27:56.042368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6l5v5" condition "Ready" to 2026-04-07 01:27:56.042345741 +0000 UTC m=+38.675563480 I0407 01:27:56.074374 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:56.074356455 +0000 UTC m=+38.707574204 I0407 01:27:56.099860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:27:56.100158 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:27:56.100150681 +0000 UTC m=+38.733368410 I0407 01:27:56.124044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:29:42.095773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:29:42.095793 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 01:29:42.09577234 +0000 UTC m=+144.728990099 I0407 01:29:42.095811 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 01:29:42.095801801 +0000 UTC m=+144.729019550 E0407 01:29:42.111643 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 01:29:42.111827 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-07 01:29:42.111815737 +0000 UTC m=+144.745033496 I0407 01:29:42.111928 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 01:29:42.114634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:29:42.114705 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 01:29:42.114698319 +0000 UTC m=+144.747916048 E0407 01:29:42.122019 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0407 01:29:42.122143 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 01:29:42.122179 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 01:29:42.122224 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0407 01:29:42.124175 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 01:29:42.124165929 +0000 UTC m=+144.757383668 I0407 01:29:42.124197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:29:42.124415 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 01:29:42.124402246 +0000 UTC m=+144.757619985 I0407 01:29:42.138380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:29:42.138492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:29:42.138565 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 01:29:42.138553599 +0000 UTC m=+144.771771358 I0407 01:29:42.284753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:29:42.297822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-qt455" condition "Approved" to 2026-04-07 01:29:42.297802041 +0000 UTC m=+144.931019810 I0407 01:29:42.315238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-qt455" condition "Ready" to 2026-04-07 01:29:42.315223577 +0000 UTC m=+144.948441316 I0407 01:29:42.446456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:29:42.476526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-7vn82" condition "Approved" to 2026-04-07 01:29:42.476511907 +0000 UTC m=+145.109729676 I0407 01:29:42.501232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-7vn82" condition "Ready" to 2026-04-07 01:29:42.501219541 +0000 UTC m=+145.134437280 I0407 01:29:42.531519 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:29:42.53138419 +0000 UTC m=+145.164601929 I0407 01:29:42.550667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:29:42.551000 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:29:42.550992598 +0000 UTC m=+145.184210337 I0407 01:29:42.569028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:29:42.569335 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:29:42.569325859 +0000 UTC m=+145.202543598 I0407 01:29:42.574410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:29:47.122720 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:29:47.12270901 +0000 UTC m=+149.755926739 I0407 01:29:47.146370 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-qt455" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:29:47.146354062 +0000 UTC m=+149.779571831 I0407 01:29:47.180753 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:29:47.180746832 +0000 UTC m=+149.813964571 I0407 01:29:47.202585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:29:47.202964 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:29:47.202958134 +0000 UTC m=+149.836175873 I0407 01:29:47.219736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:19.396816 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready" to 2026-04-07 01:32:19.396784462 +0000 UTC m=+302.030002201 I0407 01:32:19.396970 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-141.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:32:19.397188 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Issuing" to 2026-04-07 01:32:19.397176714 +0000 UTC m=+302.030394483 I0407 01:32:19.413168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:19.413298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-141.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:32:19.413325 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Issuing" to 2026-04-07 01:32:19.41331722 +0000 UTC m=+302.046534989 I0407 01:32:19.606752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:19.619431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-141.nip.io-tls-brd5k" condition "Approved" to 2026-04-07 01:32:19.619413295 +0000 UTC m=+302.252631034 I0407 01:32:19.637229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-141.nip.io-tls-brd5k" condition "Ready" to 2026-04-07 01:32:19.637218 +0000 UTC m=+302.270435729 I0407 01:32:19.668418 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:32:19.66839641 +0000 UTC m=+302.301614139 I0407 01:32:19.692755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:19.693329 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:32:19.693316476 +0000 UTC m=+302.326534225 I0407 01:32:19.694616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:19.708851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:32:19.709252 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:32:19.709239936 +0000 UTC m=+302.342457706 I0407 01:33:29.472608 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 01:33:29.472574343 +0000 UTC m=+372.105792102 I0407 01:33:29.472629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:33:29.472686 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 01:33:29.472671736 +0000 UTC m=+372.105889495 E0407 01:33:29.491488 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:33:29.491523 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 01:33:29.491517434 +0000 UTC m=+372.124735173 E0407 01:33:29.491564 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 01:33:29.492382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:33:29.492483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:33:29.492514 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 01:33:29.492504911 +0000 UTC m=+372.125722680 E0407 01:33:29.501283 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 01:33:29.501404 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:33:29.501471 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 01:33:29.501523 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 01:33:29.528803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pvwpn" condition "Approved" to 2026-04-07 01:33:29.528787977 +0000 UTC m=+372.162005716 I0407 01:33:29.530030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:33:29.542331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pvwpn" condition "Ready" to 2026-04-07 01:33:29.542309612 +0000 UTC m=+372.175527341 I0407 01:33:29.564447 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:33:29.564432494 +0000 UTC m=+372.197650253 I0407 01:33:29.580938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:33:29.581617 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:33:29.581601113 +0000 UTC m=+372.214818892 I0407 01:33:29.596771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:33:29.597136 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:33:29.597124927 +0000 UTC m=+372.230342666 I0407 01:33:29.601193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:33:34.501897 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:33:34.501880523 +0000 UTC m=+377.135098282 I0407 01:34:11.462520 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 01:34:11.462504293 +0000 UTC m=+414.095722022 I0407 01:34:11.462952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:34:11.462978 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 01:34:11.462971486 +0000 UTC m=+414.096189225 I0407 01:34:11.463154 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:34:11.463173 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 01:34:11.463170101 +0000 UTC m=+414.096387840 I0407 01:34:11.463374 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 01:34:11.463369487 +0000 UTC m=+414.096587236 I0407 01:34:11.465433 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:34:11.465458 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 01:34:11.465453536 +0000 UTC m=+414.098671265 I0407 01:34:11.465697 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 01:34:11.465692643 +0000 UTC m=+414.098910372 I0407 01:34:11.489155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:11.489230 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:34:11.489255 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 01:34:11.489247701 +0000 UTC m=+414.122465440 I0407 01:34:11.491822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:11.491882 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 01:34:11.491874695 +0000 UTC m=+414.125092434 I0407 01:34:11.499336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:11.499425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:34:11.499468 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 01:34:11.499443009 +0000 UTC m=+414.132660748 I0407 01:34:11.680374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:11.688555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4kr6d" condition "Approved" to 2026-04-07 01:34:11.688542022 +0000 UTC m=+414.321759761 I0407 01:34:11.718703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4kr6d" condition "Ready" to 2026-04-07 01:34:11.718694976 +0000 UTC m=+414.351912705 I0407 01:34:11.769137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:34:11.769175 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 01:34:11.769167275 +0000 UTC m=+414.402385014 I0407 01:34:11.773252 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:34:11.77324215 +0000 UTC m=+414.406459879 I0407 01:34:11.791635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:11.791901 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:34:11.791895208 +0000 UTC m=+414.425112937 I0407 01:34:11.799761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:11.819444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8lxt9" condition "Approved" to 2026-04-07 01:34:11.819427428 +0000 UTC m=+414.452645187 I0407 01:34:11.838497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8lxt9" condition "Ready" to 2026-04-07 01:34:11.838484236 +0000 UTC m=+414.471701975 I0407 01:34:11.841838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:12.003197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5z2zj" condition "Approved" to 2026-04-07 01:34:12.003184989 +0000 UTC m=+414.636402728 I0407 01:34:12.156201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5z2zj" condition "Ready" to 2026-04-07 01:34:12.156189281 +0000 UTC m=+414.789407020 I0407 01:34:12.796525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:12.899823 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:34:12.899797561 +0000 UTC m=+415.533015330 I0407 01:34:13.046040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:13.144690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:13.200020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s5j4k" condition "Approved" to 2026-04-07 01:34:13.200001529 +0000 UTC m=+415.833219288 I0407 01:34:13.404774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s5j4k" condition "Ready" to 2026-04-07 01:34:13.404758665 +0000 UTC m=+416.037976434 I0407 01:34:13.944202 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:34:13.944186996 +0000 UTC m=+416.577404735 I0407 01:34:14.092821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:14.093172 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:34:14.093163813 +0000 UTC m=+416.726381552 I0407 01:34:14.143610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:14.390158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:14.449854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:18.709276 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:34:18.709276 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls" condition "Ready" to 2026-04-07 01:34:18.709258908 +0000 UTC m=+421.342476677 I0407 01:34:18.709311 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls" condition "Issuing" to 2026-04-07 01:34:18.709305009 +0000 UTC m=+421.342522748 I0407 01:34:18.731885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:18.731938 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls" condition "Ready" to 2026-04-07 01:34:18.73193224 +0000 UTC m=+421.365149969 I0407 01:34:18.893326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:18.925915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8xdg7-qdzlm" condition "Approved" to 2026-04-07 01:34:18.92590065 +0000 UTC m=+421.559118409 I0407 01:34:18.957258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8xdg7-qdzlm" condition "Ready" to 2026-04-07 01:34:18.957242357 +0000 UTC m=+421.590460116 I0407 01:34:18.984336 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:34:18.984320234 +0000 UTC m=+421.617537963 I0407 01:34:19.007561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:19.007905 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:34:19.007897602 +0000 UTC m=+421.641115331 I0407 01:34:19.022401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:19.028643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:19.029097 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8xdg7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:34:19.029087282 +0000 UTC m=+421.662305021 I0407 01:34:39.846719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:34:39.846759 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 01:34:39.846749547 +0000 UTC m=+442.479967306 I0407 01:34:39.846897 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 01:34:39.84687603 +0000 UTC m=+442.480093769 I0407 01:34:39.860768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:39.860857 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 01:34:39.860850246 +0000 UTC m=+442.494067985 I0407 01:34:40.123378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:40.154485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-q6h4b" condition "Approved" to 2026-04-07 01:34:40.154460988 +0000 UTC m=+442.787678727 I0407 01:34:40.175197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-q6h4b" condition "Ready" to 2026-04-07 01:34:40.175175565 +0000 UTC m=+442.808393314 I0407 01:34:40.204523 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:34:40.204500874 +0000 UTC m=+442.837718623 I0407 01:34:40.222575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:40.222906 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:34:40.222897186 +0000 UTC m=+442.856114925 I0407 01:34:40.230467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:34:40.243287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:38:02.892742 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 01:38:02.892707377 +0000 UTC m=+645.525925136 I0407 01:38:02.892771 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:38:02.892847 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 01:38:02.89283649 +0000 UTC m=+645.526054249 I0407 01:38:02.908543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:38:02.908674 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:38:02.908707 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 01:38:02.90869978 +0000 UTC m=+645.541917539 I0407 01:38:03.138473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vxj25" condition "Approved" to 2026-04-07 01:38:03.138459817 +0000 UTC m=+645.771677576 I0407 01:38:03.161610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vxj25" condition "Ready" to 2026-04-07 01:38:03.16159537 +0000 UTC m=+645.794813129 I0407 01:38:03.188715 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:38:03.188698383 +0000 UTC m=+645.821916162 I0407 01:38:03.204494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:38:03.204766 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:38:03.204760329 +0000 UTC m=+645.837978068 I0407 01:38:03.221963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:38:03.228117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:40:31.314180 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:40:31.314263 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 01:40:31.31425378 +0000 UTC m=+793.947471519 I0407 01:40:31.314177 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 01:40:31.314135106 +0000 UTC m=+793.947352875 I0407 01:40:31.330851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:40:31.331101 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 01:40:31.331087589 +0000 UTC m=+793.964305328 I0407 01:40:31.530501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:40:31.573309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-dv8h8" condition "Approved" to 2026-04-07 01:40:31.57329182 +0000 UTC m=+794.206509559 I0407 01:40:31.596273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-dv8h8" condition "Ready" to 2026-04-07 01:40:31.596257361 +0000 UTC m=+794.229475120 I0407 01:40:31.628015 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:40:31.627993887 +0000 UTC m=+794.261211616 I0407 01:40:31.651530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:40:31.651985 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:40:31.651977756 +0000 UTC m=+794.285195495 I0407 01:40:31.673657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:40:31.679111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:41:38.537788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:41:38.537849 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 01:41:38.537838612 +0000 UTC m=+861.171056341 I0407 01:41:38.538108 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 01:41:38.538085419 +0000 UTC m=+861.171303148 I0407 01:41:38.560946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:41:38.561120 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 01:41:38.561097501 +0000 UTC m=+861.194315270 I0407 01:41:38.664592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:41:38.695503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-l6276" condition "Approved" to 2026-04-07 01:41:38.695487332 +0000 UTC m=+861.328705061 I0407 01:41:38.727167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-l6276" condition "Ready" to 2026-04-07 01:41:38.727152765 +0000 UTC m=+861.360370504 I0407 01:41:38.764903 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:41:38.764883979 +0000 UTC m=+861.398101718 I0407 01:41:38.798791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:41:38.867456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:44:44.040479 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 01:44:44.040441395 +0000 UTC m=+1046.673659154 I0407 01:44:44.040999 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 01:44:44.041103 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 01:44:44.041090853 +0000 UTC m=+1046.674308622 I0407 01:44:44.062143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:44:44.062229 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 01:44:44.062222599 +0000 UTC m=+1046.695440338 I0407 01:44:44.270941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:44:44.312705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-z9rbb" condition "Approved" to 2026-04-07 01:44:44.312688769 +0000 UTC m=+1046.945906518 I0407 01:44:44.334702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-z9rbb" condition "Ready" to 2026-04-07 01:44:44.334685989 +0000 UTC m=+1046.967903728 I0407 01:44:44.364813 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:44:44.364797574 +0000 UTC m=+1046.998015293 I0407 01:44:44.394184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 01:44:44.394587 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 01:44:44.394580108 +0000 UTC m=+1047.027797837 I0407 01:44:44.421022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"