I0407 12:59:57.705274 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 12:59:57.705385 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 12:59:57.705453 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 12:59:57.712576 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 12:59:57.713101 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 12:59:57.713163 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 12:59:57.713215 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 12:59:57.715918 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 12:59:57.728783 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 12:59:57.732032 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 12:59:57.735378 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 12:59:57.735411 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 12:59:57.735502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 12:59:57.740160 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 12:59:57.743822 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 12:59:57.746301 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 12:59:57.748739 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 12:59:57.751411 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 12:59:57.753878 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 12:59:57.755631 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 12:59:57.755706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 12:59:57.757692 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 12:59:57.761325 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 12:59:57.764944 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 12:59:57.765040 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 12:59:57.765039 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 12:59:57.768782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 12:59:57.772167 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 12:59:57.772269 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 12:59:57.775389 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 12:59:57.777695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 12:59:57.780171 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 12:59:57.783484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 12:59:57.785446 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:57.791058 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:57.790891 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:57.791425 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:57.791773 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:57.791864 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:57.792695 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:57.792842 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:57.792991 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:57.880612 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 13:00:09.252553 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 13:00:09.252541479 +0000 UTC m=+11.578330747 I0407 13:00:09.938670 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:00:09.938754 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 13:00:09.938735367 +0000 UTC m=+12.264524655 I0407 13:00:09.938787 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 13:00:09.938772138 +0000 UTC m=+12.264561426 I0407 13:00:09.952420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:09.952487 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 13:00:09.952481104 +0000 UTC m=+12.278270372 E0407 13:00:09.953337 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:00:09.953415 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 13:00:09.95340858 +0000 UTC m=+12.279197848 E0407 13:00:09.953447 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:00:09.965274 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 13:00:09.965520 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:00:09.965588 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:00:09.965638 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 13:00:09.967275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:09.990016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vghwp" condition "Approved" to 2026-04-07 13:00:09.990005294 +0000 UTC m=+12.315794552 I0407 13:00:10.001352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vghwp" condition "Ready" to 2026-04-07 13:00:10.001336465 +0000 UTC m=+12.327125783 I0407 13:00:10.028342 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:10.028324616 +0000 UTC m=+12.354113924 I0407 13:00:10.044215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:10.044698 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:10.044691854 +0000 UTC m=+12.370481122 I0407 13:00:10.056411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:10.056671 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:10.056656883 +0000 UTC m=+12.382446151 I0407 13:00:10.062944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:14.965743 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:14.965729777 +0000 UTC m=+17.291519075 I0407 13:00:34.889811 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:00:34.889812 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 13:00:34.889779636 +0000 UTC m=+37.215568964 I0407 13:00:34.889944 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 13:00:34.88993302 +0000 UTC m=+37.215722318 I0407 13:00:34.899082 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 13:00:34.899068296 +0000 UTC m=+37.224857564 I0407 13:00:34.914789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:34.914868 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 13:00:34.914860503 +0000 UTC m=+37.240649771 I0407 13:00:35.075033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:35.113151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cc2bm" condition "Approved" to 2026-04-07 13:00:35.113133298 +0000 UTC m=+37.438922596 I0407 13:00:35.141793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cc2bm" condition "Ready" to 2026-04-07 13:00:35.141778602 +0000 UTC m=+37.467567900 I0407 13:00:35.173379 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:35.173362616 +0000 UTC m=+37.499151884 I0407 13:00:35.194533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:07.934298 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 13:02:07.934241959 +0000 UTC m=+130.260031257 I0407 13:02:07.934313 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:02:07.934370 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 13:02:07.934358442 +0000 UTC m=+130.260147740 E0407 13:02:07.950045 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 13:02:07.950111 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-07 13:02:07.950100725 +0000 UTC m=+130.275890023 I0407 13:02:07.950172 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 13:02:07.953340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:07.953424 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 13:02:07.953416594 +0000 UTC m=+130.279205892 E0407 13:02:07.961202 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0407 13:02:07.961298 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 13:02:07.961330 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 13:02:07.961368 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0407 13:02:07.966344 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 13:02:07.966328051 +0000 UTC m=+130.292117319 I0407 13:02:07.966384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:02:07.966423 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 13:02:07.966410093 +0000 UTC m=+130.292199361 I0407 13:02:07.982104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:07.982292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:02:07.982387 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 13:02:07.982376013 +0000 UTC m=+130.308165341 I0407 13:02:08.170256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:08.201629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-swd5j" condition "Approved" to 2026-04-07 13:02:08.201617817 +0000 UTC m=+130.527407085 I0407 13:02:08.227675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-swd5j" condition "Ready" to 2026-04-07 13:02:08.227660877 +0000 UTC m=+130.553450175 I0407 13:02:08.253355 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:08.253342977 +0000 UTC m=+130.579132235 I0407 13:02:08.272986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:08.295397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bskt9" condition "Approved" to 2026-04-07 13:02:08.295381507 +0000 UTC m=+130.621170795 I0407 13:02:08.311925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bskt9" condition "Ready" to 2026-04-07 13:02:08.311911732 +0000 UTC m=+130.637701020 I0407 13:02:12.962001 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:12.961987373 +0000 UTC m=+135.287776661 I0407 13:02:12.978803 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-bskt9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:12.978784803 +0000 UTC m=+135.304574091 I0407 13:02:13.002985 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:13.002970523 +0000 UTC m=+135.328759801 I0407 13:02:13.021082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:13.021420 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:13.021414229 +0000 UTC m=+135.347203477 I0407 13:02:13.027612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:13.035332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:13.035658 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:13.035648822 +0000 UTC m=+135.361438090 I0407 13:02:13.037470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:04:39.362468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-168.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:04:39.362502 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-168.nip.io-tls" condition "Issuing" to 2026-04-07 13:04:39.362495542 +0000 UTC m=+281.688284820 I0407 13:04:39.362879 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-168.nip.io-tls" condition "Ready" to 2026-04-07 13:04:39.362873703 +0000 UTC m=+281.688662971 I0407 13:04:39.377666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-168.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-168.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:04:39.377759 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-168.nip.io-tls" condition "Ready" to 2026-04-07 13:04:39.377748052 +0000 UTC m=+281.703537320 I0407 13:04:39.516224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-168.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-168.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:04:39.546517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-168.nip.io-tls-vpgf6" condition "Approved" to 2026-04-07 13:04:39.546498982 +0000 UTC m=+281.872288300 I0407 13:04:39.564709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-168.nip.io-tls-vpgf6" condition "Ready" to 2026-04-07 13:04:39.564693415 +0000 UTC m=+281.890482703 I0407 13:04:39.590187 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-168.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:04:39.590167394 +0000 UTC m=+281.915956662 I0407 13:04:39.612289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-168.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-168.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:49.725051 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:05:49.725119 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 13:05:49.725102771 +0000 UTC m=+352.050892039 I0407 13:05:49.725094 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 13:05:49.725084031 +0000 UTC m=+352.050873329 E0407 13:05:49.736767 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:05:49.736804 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 13:05:49.736796708 +0000 UTC m=+352.062585976 E0407 13:05:49.736856 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:05:49.738556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:49.738637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:05:49.738666 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 13:05:49.73865823 +0000 UTC m=+352.064447528 E0407 13:05:49.744278 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 13:05:49.744636 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:05:49.744765 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:05:49.745030 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 13:05:49.775820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:49.776031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2lb9x" condition "Approved" to 2026-04-07 13:05:49.776017624 +0000 UTC m=+352.101806892 I0407 13:05:49.787709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2lb9x" condition "Ready" to 2026-04-07 13:05:49.7876968 +0000 UTC m=+352.113486068 I0407 13:05:49.808940 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:49.808927703 +0000 UTC m=+352.134716971 I0407 13:05:49.825475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:49.825930 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:49.825919138 +0000 UTC m=+352.151708436 I0407 13:05:49.838496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:49.841273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:54.745121 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:54.745107257 +0000 UTC m=+357.070896545 I0407 13:06:31.343510 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 13:06:31.343477718 +0000 UTC m=+393.669266976 I0407 13:06:31.343573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:06:31.343620 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 13:06:31.343613201 +0000 UTC m=+393.669402459 I0407 13:06:31.346863 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 13:06:31.346847471 +0000 UTC m=+393.672636729 I0407 13:06:31.347304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:06:31.347327 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 13:06:31.347323654 +0000 UTC m=+393.673112912 I0407 13:06:31.352142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:06:31.352183 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 13:06:31.352172837 +0000 UTC m=+393.677962115 I0407 13:06:31.352948 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 13:06:31.352937298 +0000 UTC m=+393.678726566 I0407 13:06:31.379785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:31.379872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:06:31.379918 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 13:06:31.379910402 +0000 UTC m=+393.705699670 I0407 13:06:31.384708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:31.384774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:06:31.384801 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 13:06:31.384796577 +0000 UTC m=+393.710585835 I0407 13:06:31.388945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:31.389102 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:06:31.389142 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 13:06:31.389137007 +0000 UTC m=+393.714926265 I0407 13:06:31.663642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:31.677536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jfcg2" condition "Approved" to 2026-04-07 13:06:31.677524337 +0000 UTC m=+394.003313595 I0407 13:06:31.685152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-chswl" condition "Approved" to 2026-04-07 13:06:31.685137087 +0000 UTC m=+394.010926355 I0407 13:06:31.702595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-chswl" condition "Ready" to 2026-04-07 13:06:31.702582348 +0000 UTC m=+394.028371616 I0407 13:06:31.702823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jfcg2" condition "Ready" to 2026-04-07 13:06:31.702812544 +0000 UTC m=+394.028601832 I0407 13:06:31.728420 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:31.72840813 +0000 UTC m=+394.054197428 I0407 13:06:31.733060 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:31.733050168 +0000 UTC m=+394.058839486 I0407 13:06:31.753719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:31.754748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:31.755284 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:31.755273801 +0000 UTC m=+394.081063099 I0407 13:06:31.761555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:31.834917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:31.835323 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:31.835313047 +0000 UTC m=+394.161102315 I0407 13:06:32.284629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:32.341586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-czq9q" condition "Approved" to 2026-04-07 13:06:32.341546563 +0000 UTC m=+394.667335831 I0407 13:06:32.496464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-czq9q" condition "Ready" to 2026-04-07 13:06:32.496452844 +0000 UTC m=+394.822242102 I0407 13:06:32.886968 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:32.88695234 +0000 UTC m=+395.212741608 I0407 13:06:32.986735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:45.990453 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls" condition "Ready" to 2026-04-07 13:06:45.990436063 +0000 UTC m=+408.316225341 I0407 13:06:45.990801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:06:45.990862 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls" condition "Issuing" to 2026-04-07 13:06:45.990849254 +0000 UTC m=+408.316638552 I0407 13:06:46.005139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:46.005209 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:06:46.005226 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls" condition "Issuing" to 2026-04-07 13:06:46.0052202 +0000 UTC m=+408.331009468 I0407 13:06:46.567567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qj9wn-hbkj8" condition "Approved" to 2026-04-07 13:06:46.567556283 +0000 UTC m=+408.893345541 I0407 13:06:46.584048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qj9wn-hbkj8" condition "Ready" to 2026-04-07 13:06:46.584035557 +0000 UTC m=+408.909824825 I0407 13:06:46.613495 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:46.613481919 +0000 UTC m=+408.939271177 I0407 13:06:46.631813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:46.632219 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:46.632210746 +0000 UTC m=+408.958000014 I0407 13:06:46.653649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qj9wn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:05.982878 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 13:07:05.982862365 +0000 UTC m=+428.308651623 I0407 13:07:05.982946 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:05.983097 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 13:07:05.983079841 +0000 UTC m=+428.308869119 I0407 13:07:06.000383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:06.000472 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:06.000495 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 13:07:06.000487094 +0000 UTC m=+428.326276392 I0407 13:07:06.316736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:06.323983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tjmvh" condition "Approved" to 2026-04-07 13:07:06.323962537 +0000 UTC m=+428.649751825 I0407 13:07:06.346017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tjmvh" condition "Ready" to 2026-04-07 13:07:06.346003138 +0000 UTC m=+428.671792426 I0407 13:07:06.380124 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:06.380103494 +0000 UTC m=+428.705892802 I0407 13:07:06.406929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:06.407390 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:06.40737768 +0000 UTC m=+428.733166948 I0407 13:07:06.409840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:06.423137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:06.423412 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:06.423401945 +0000 UTC m=+428.749191213 I0407 13:10:22.547054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:10:22.547105 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 13:10:22.547095547 +0000 UTC m=+624.872884835 I0407 13:10:22.547616 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 13:10:22.54690389 +0000 UTC m=+624.872693178 I0407 13:10:22.564954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:10:22.565094 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 13:10:22.565085272 +0000 UTC m=+624.890874540 I0407 13:10:22.704183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:10:22.737315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rb4hz" condition "Approved" to 2026-04-07 13:10:22.737296347 +0000 UTC m=+625.063085635 I0407 13:10:22.757053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rb4hz" condition "Ready" to 2026-04-07 13:10:22.75703849 +0000 UTC m=+625.082827788 I0407 13:10:22.783260 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:10:22.783247377 +0000 UTC m=+625.109036645 I0407 13:10:22.804657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:10:22.805026 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:10:22.805019297 +0000 UTC m=+625.130808565 I0407 13:10:22.822998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:12:55.677465 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 13:12:55.677428818 +0000 UTC m=+778.003218106 I0407 13:12:55.677494 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:12:55.677740 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 13:12:55.677728527 +0000 UTC m=+778.003517845 I0407 13:12:55.690866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:12:55.690964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:12:55.690992 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 13:12:55.690984353 +0000 UTC m=+778.016773641 I0407 13:12:55.845112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:12:55.853731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8jpm7" condition "Approved" to 2026-04-07 13:12:55.853711372 +0000 UTC m=+778.179500660 I0407 13:12:55.874886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8jpm7" condition "Ready" to 2026-04-07 13:12:55.874874307 +0000 UTC m=+778.200663575 I0407 13:12:55.904094 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:12:55.904078504 +0000 UTC m=+778.229867802 I0407 13:12:55.926380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:12:55.927299 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:12:55.927290246 +0000 UTC m=+778.253079514 I0407 13:12:55.939929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:12:55.946841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:14:01.849364 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 13:14:01.849335859 +0000 UTC m=+844.175125127 I0407 13:14:01.849725 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:14:01.849746 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 13:14:01.84974284 +0000 UTC m=+844.175532108 I0407 13:14:01.867161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:14:01.867350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:14:01.867378 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 13:14:01.867371267 +0000 UTC m=+844.193160535 I0407 13:14:02.248101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-twrfv" condition "Approved" to 2026-04-07 13:14:02.248082593 +0000 UTC m=+844.573871881 I0407 13:14:02.273108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-twrfv" condition "Ready" to 2026-04-07 13:14:02.273098324 +0000 UTC m=+844.598887592 I0407 13:14:02.299169 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:14:02.299158695 +0000 UTC m=+844.624947963 I0407 13:14:02.325494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:14:02.325844 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:14:02.325837482 +0000 UTC m=+844.651626750 I0407 13:14:02.329127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:14:02.346408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:14:02.347034 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:14:02.347022388 +0000 UTC m=+844.672811676 I0407 13:17:02.976575 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 13:17:02.976534416 +0000 UTC m=+1025.302323714 I0407 13:17:02.977000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:17:02.977066 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 13:17:02.97705652 +0000 UTC m=+1025.302845808 I0407 13:17:02.993048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:17:02.993110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:17:02.993123 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 13:17:02.993118604 +0000 UTC m=+1025.318907862 I0407 13:17:03.183719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gnkk5" condition "Approved" to 2026-04-07 13:17:03.183705566 +0000 UTC m=+1025.509494834 I0407 13:17:03.202436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gnkk5" condition "Ready" to 2026-04-07 13:17:03.202426074 +0000 UTC m=+1025.528215342 I0407 13:17:03.229548 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:17:03.229537182 +0000 UTC m=+1025.555326440 I0407 13:17:03.252422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"