I0324 14:55:31.089847 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0324 14:55:31.090620 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0324 14:55:31.090730 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0324 14:55:31.094364 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0324 14:55:31.094705 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0324 14:55:31.094803 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0324 14:55:31.094857 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0324 14:55:31.097079 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0324 14:55:31.110552 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0324 14:55:31.117098 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0324 14:55:31.121830 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0324 14:55:31.125231 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0324 14:55:31.127895 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0324 14:55:31.130295 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0324 14:55:31.133028 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0324 14:55:31.135368 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0324 14:55:31.137052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0324 14:55:31.140840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0324 14:55:31.144636 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0324 14:55:31.144673 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0324 14:55:31.144691 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0324 14:55:31.144793 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0324 14:55:31.148341 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0324 14:55:31.148420 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0324 14:55:31.152137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0324 14:55:31.153854 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0324 14:55:31.155691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0324 14:55:31.157448 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0324 14:55:31.162501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0324 14:55:31.165637 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0324 14:55:31.167837 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0324 14:55:31.167903 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0324 14:55:31.167959 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0324 14:55:31.172805 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:55:31.173157 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:55:31.173161 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:55:31.173449 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:55:31.174265 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:55:31.174487 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:55:31.174580 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:55:31.175042 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:55:31.175793 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:55:31.209244 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:55:46.340656 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-24 14:55:46.340639567 +0000 UTC m=+15.283758999 I0324 14:55:47.082560 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-24 14:55:47.082544694 +0000 UTC m=+16.025664136 I0324 14:55:47.082861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:55:47.082993 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-24 14:55:47.082975513 +0000 UTC m=+16.026094945 E0324 14:55:47.116117 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0324 14:55:47.116206 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-24 14:55:47.116197214 +0000 UTC m=+16.059316626 E0324 14:55:47.116229 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0324 14:55:47.120974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:55:47.121077 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:55:47.121103 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-24 14:55:47.121094596 +0000 UTC m=+16.064214038 E0324 14:55:47.140357 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0324 14:55:47.140562 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 14:55:47.140692 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 14:55:47.140811 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0324 14:55:47.169035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:55:47.171823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cxcdh" condition "Approved" to 2026-03-24 14:55:47.171809825 +0000 UTC m=+16.114929237 I0324 14:55:47.184974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cxcdh" condition "Ready" to 2026-03-24 14:55:47.184964452 +0000 UTC m=+16.128083864 I0324 14:55:47.213065 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:55:47.213053168 +0000 UTC m=+16.156172580 I0324 14:55:47.231282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:55:47.277502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:55:52.140835 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:55:52.140820994 +0000 UTC m=+21.083940406 I0324 14:56:11.395192 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-24 14:56:11.395171821 +0000 UTC m=+40.338291253 I0324 14:56:11.395379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:56:11.395904 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-24 14:56:11.395885114 +0000 UTC m=+40.339004636 I0324 14:56:11.409949 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-24 14:56:11.409935307 +0000 UTC m=+40.353054719 I0324 14:56:11.421712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:56:11.421809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:56:11.421842 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-24 14:56:11.42183555 +0000 UTC m=+40.364954962 I0324 14:56:11.599308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:56:11.611678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s46tg" condition "Approved" to 2026-03-24 14:56:11.611668613 +0000 UTC m=+40.554788015 I0324 14:56:11.644359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s46tg" condition "Ready" to 2026-03-24 14:56:11.644346365 +0000 UTC m=+40.587465777 I0324 14:56:11.672843 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:56:11.672830768 +0000 UTC m=+40.615950180 I0324 14:56:11.692126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:56:11.744346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:57:56.502887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:57:56.502948 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-24 14:57:56.502936819 +0000 UTC m=+145.446056251 I0324 14:57:56.502996 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-24 14:57:56.50297347 +0000 UTC m=+145.446092902 E0324 14:57:56.517086 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0324 14:57:56.517150 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-24 14:57:56.517140141 +0000 UTC m=+145.460259583 I0324 14:57:56.517211 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0324 14:57:56.519209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:57:56.519297 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:57:56.519324 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-24 14:57:56.51931761 +0000 UTC m=+145.462437052 E0324 14:57:56.530210 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0324 14:57:56.530442 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0324 14:57:56.530559 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0324 14:57:56.530670 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0324 14:57:56.533206 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:57:56.533239 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-24 14:57:56.533230966 +0000 UTC m=+145.476350378 I0324 14:57:56.533283 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-24 14:57:56.533262877 +0000 UTC m=+145.476382319 I0324 14:57:56.548636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:57:56.548698 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-24 14:57:56.54869032 +0000 UTC m=+145.491809732 I0324 14:57:56.771938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:57:56.772528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-dv97p" condition "Approved" to 2026-03-24 14:57:56.772513553 +0000 UTC m=+145.715632965 I0324 14:57:56.802822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-57xfp" condition "Approved" to 2026-03-24 14:57:56.802808299 +0000 UTC m=+145.745927711 I0324 14:57:56.804088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-dv97p" condition "Ready" to 2026-03-24 14:57:56.804074352 +0000 UTC m=+145.747193794 I0324 14:57:56.821698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-57xfp" condition "Ready" to 2026-03-24 14:57:56.821690505 +0000 UTC m=+145.764809917 I0324 14:57:56.833226 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:57:56.833218157 +0000 UTC m=+145.776337569 I0324 14:57:56.851714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:57:56.852200 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:57:56.852196006 +0000 UTC m=+145.795315418 I0324 14:57:56.860660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:57:56.868679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:58:01.531465 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:58:01.531447369 +0000 UTC m=+150.474566801 I0324 14:58:01.549760 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-57xfp" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:58:01.549735486 +0000 UTC m=+150.492854928 I0324 14:58:01.582811 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:58:01.582791513 +0000 UTC m=+150.525910945 I0324 14:58:01.602231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:58:01.602598 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:58:01.602588167 +0000 UTC m=+150.545707589 I0324 14:58:01.618393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:58:01.618643 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:58:01.618635442 +0000 UTC m=+150.561754854 I0324 14:58:01.623569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:00:28.120956 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-100.nip.io-tls" condition "Ready" to 2026-03-24 15:00:28.120925519 +0000 UTC m=+297.064044941 I0324 15:00:28.123259 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-100.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:00:28.123303 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-100.nip.io-tls" condition "Issuing" to 2026-03-24 15:00:28.123279566 +0000 UTC m=+297.066398988 I0324 15:00:28.142493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-100.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-100.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:00:28.142720 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-100.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:00:28.142792 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-100.nip.io-tls" condition "Issuing" to 2026-03-24 15:00:28.142742315 +0000 UTC m=+297.085861727 I0324 15:00:28.385202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-100.nip.io-tls-ggpvg" condition "Approved" to 2026-03-24 15:00:28.385180532 +0000 UTC m=+297.328299974 I0324 15:00:28.403404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-100.nip.io-tls-ggpvg" condition "Ready" to 2026-03-24 15:00:28.403390915 +0000 UTC m=+297.346510357 I0324 15:00:28.426544 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-100.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:00:28.426529556 +0000 UTC m=+297.369648988 I0324 15:00:28.447558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-100.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-100.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:00:28.448001 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-100.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:00:28.447991035 +0000 UTC m=+297.391110467 I0324 15:00:28.469224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-100.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-100.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:00:28.476381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-100.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-100.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:51.942202 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-24 15:01:51.942178787 +0000 UTC m=+380.885298199 I0324 15:01:51.942682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:51.943137 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-24 15:01:51.943118815 +0000 UTC m=+380.886238297 E0324 15:01:51.955067 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0324 15:01:51.955135 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-24 15:01:51.955121706 +0000 UTC m=+380.898241118 E0324 15:01:51.955265 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0324 15:01:51.957090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:51.957226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:51.957268 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-24 15:01:51.957254497 +0000 UTC m=+380.900373929 E0324 15:01:51.965964 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0324 15:01:51.966282 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 15:01:51.966325 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 15:01:51.966384 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0324 15:01:51.993622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bnjq4" condition "Approved" to 2026-03-24 15:01:51.993607382 +0000 UTC m=+380.936726794 I0324 15:01:52.005736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bnjq4" condition "Ready" to 2026-03-24 15:01:52.005728085 +0000 UTC m=+380.948847497 I0324 15:01:52.029431 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:52.029405807 +0000 UTC m=+380.972525249 I0324 15:01:52.046472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:52.046828 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:52.046814454 +0000 UTC m=+380.989933866 I0324 15:01:52.065835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:56.966688 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:56.966674328 +0000 UTC m=+385.909793760 I0324 15:02:33.485374 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-24 15:02:33.485361368 +0000 UTC m=+422.428480780 I0324 15:02:33.485491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:02:33.485523 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-24 15:02:33.485516951 +0000 UTC m=+422.428636353 I0324 15:02:33.489417 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:02:33.489454 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-24 15:02:33.489446608 +0000 UTC m=+422.432566010 I0324 15:02:33.489857 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-24 15:02:33.489840596 +0000 UTC m=+422.432960008 I0324 15:02:33.489882 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-24 15:02:33.489876057 +0000 UTC m=+422.432995459 I0324 15:02:33.490236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:02:33.490262 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-24 15:02:33.490258844 +0000 UTC m=+422.433378256 I0324 15:02:33.511859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:33.511924 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-24 15:02:33.511916877 +0000 UTC m=+422.455036279 I0324 15:02:33.515538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:33.515728 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-24 15:02:33.515712892 +0000 UTC m=+422.458832304 I0324 15:02:33.522609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:33.522728 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:02:33.522769 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-24 15:02:33.522760193 +0000 UTC m=+422.465879605 I0324 15:02:33.640542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:33.641516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:33.670263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6smsk" condition "Approved" to 2026-03-24 15:02:33.670249995 +0000 UTC m=+422.613369407 I0324 15:02:33.672001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hrpc8" condition "Approved" to 2026-03-24 15:02:33.671995339 +0000 UTC m=+422.615114751 I0324 15:02:33.704424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hrpc8" condition "Ready" to 2026-03-24 15:02:33.704414766 +0000 UTC m=+422.647534168 I0324 15:02:33.706695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6smsk" condition "Ready" to 2026-03-24 15:02:33.706680531 +0000 UTC m=+422.649799933 I0324 15:02:33.748538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-94gmg" condition "Approved" to 2026-03-24 15:02:33.748527126 +0000 UTC m=+422.691646538 I0324 15:02:33.775008 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:33.774989793 +0000 UTC m=+422.718109205 I0324 15:02:33.972597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-94gmg" condition "Ready" to 2026-03-24 15:02:33.972579083 +0000 UTC m=+422.915698525 I0324 15:02:34.020353 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:34.020337886 +0000 UTC m=+422.963457288 I0324 15:02:34.119726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:34.120071 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:34.120061314 +0000 UTC m=+423.063180726 I0324 15:02:34.370935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:34.371273 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:34.371267525 +0000 UTC m=+423.314386937 I0324 15:02:34.625205 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:34.625180968 +0000 UTC m=+423.568300380 I0324 15:02:34.728100 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:34.72808017 +0000 UTC m=+423.671199612 I0324 15:02:34.817483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:34.870864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:34.967638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:34.968167 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:34.968160118 +0000 UTC m=+423.911279530 I0324 15:02:35.020811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:35.071219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:35.418473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:35.471004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:41.868000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:02:41.868104 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls" condition "Issuing" to 2026-03-24 15:02:41.868087099 +0000 UTC m=+430.811206551 I0324 15:02:41.868301 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls" condition "Ready" to 2026-03-24 15:02:41.868273102 +0000 UTC m=+430.811392534 I0324 15:02:41.886800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:41.887144 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls" condition "Ready" to 2026-03-24 15:02:41.887123559 +0000 UTC m=+430.830243001 I0324 15:02:42.041549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:42.075400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jgsrf-9g9df" condition "Approved" to 2026-03-24 15:02:42.075385333 +0000 UTC m=+431.018504735 I0324 15:02:42.098949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jgsrf-9g9df" condition "Ready" to 2026-03-24 15:02:42.098935752 +0000 UTC m=+431.042055164 I0324 15:02:42.131305 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:42.131193446 +0000 UTC m=+431.074312858 I0324 15:02:42.153292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:42.153727 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:42.153718725 +0000 UTC m=+431.096838137 I0324 15:02:42.176840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jgsrf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:03:04.500236 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-24 15:03:04.500212059 +0000 UTC m=+453.443331471 I0324 15:03:04.501010 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:03:04.501139 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-24 15:03:04.501123807 +0000 UTC m=+453.444243219 I0324 15:03:04.517995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:03:04.518314 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:03:04.518814 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-24 15:03:04.51879808 +0000 UTC m=+453.461917502 I0324 15:03:04.731939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d9vgc" condition "Approved" to 2026-03-24 15:03:04.731918863 +0000 UTC m=+453.675038305 I0324 15:03:04.755822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d9vgc" condition "Ready" to 2026-03-24 15:03:04.755807379 +0000 UTC m=+453.698926791 I0324 15:03:04.787590 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:03:04.787571363 +0000 UTC m=+453.730690815 I0324 15:03:04.808678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:03:04.809115 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:03:04.809106483 +0000 UTC m=+453.752225895 I0324 15:03:04.829183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:06:21.726565 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-24 15:06:21.726542368 +0000 UTC m=+650.669661810 I0324 15:06:21.726924 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:06:21.727073 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-24 15:06:21.727013117 +0000 UTC m=+650.670132549 I0324 15:06:21.745845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:06:21.745918 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:06:21.745935 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-24 15:06:21.745929584 +0000 UTC m=+650.689048996 I0324 15:06:21.998885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:06:22.012199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xqzmk" condition "Approved" to 2026-03-24 15:06:22.012183509 +0000 UTC m=+650.955302941 I0324 15:06:22.030187 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xqzmk" condition "Ready" to 2026-03-24 15:06:22.030173357 +0000 UTC m=+650.973292809 I0324 15:06:22.058076 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:06:22.058064664 +0000 UTC m=+651.001184076 I0324 15:06:22.076787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:08:47.938835 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:08:47.938925 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-24 15:08:47.938908634 +0000 UTC m=+796.882028066 I0324 15:08:47.939103 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-24 15:08:47.939078607 +0000 UTC m=+796.882198039 I0324 15:08:47.955401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:08:47.955482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:08:47.955563 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-24 15:08:47.955554216 +0000 UTC m=+796.898673648 I0324 15:08:48.192078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-fsmv5" condition "Approved" to 2026-03-24 15:08:48.192066636 +0000 UTC m=+797.135186048 I0324 15:08:48.208474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-fsmv5" condition "Ready" to 2026-03-24 15:08:48.208463653 +0000 UTC m=+797.151583055 I0324 15:08:48.242212 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:08:48.242193316 +0000 UTC m=+797.185312758 I0324 15:08:48.271686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:08:48.271989 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:08:48.271982501 +0000 UTC m=+797.215101913 I0324 15:08:48.286044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:08:48.287881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:08:48.288277 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:08:48.288249986 +0000 UTC m=+797.231369418 I0324 15:09:52.922600 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-24 15:09:52.922583947 +0000 UTC m=+861.865703349 I0324 15:09:52.922677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:09:52.922772 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-24 15:09:52.92276135 +0000 UTC m=+861.865880792 I0324 15:09:52.941494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:09:52.941613 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-24 15:09:52.941601756 +0000 UTC m=+861.884721198 I0324 15:09:53.266920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:09:53.309518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-gzmb5" condition "Approved" to 2026-03-24 15:09:53.309496778 +0000 UTC m=+862.252616210 I0324 15:09:53.346892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-gzmb5" condition "Ready" to 2026-03-24 15:09:53.346881884 +0000 UTC m=+862.290001286 I0324 15:09:53.404390 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:09:53.404374891 +0000 UTC m=+862.347494303 I0324 15:09:53.431815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:09:53.432269 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:09:53.432258828 +0000 UTC m=+862.375378240 I0324 15:09:53.448597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:09:53.449021 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:09:53.449009802 +0000 UTC m=+862.392129214 I0324 15:12:54.188298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:12:54.188383 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-24 15:12:54.188373123 +0000 UTC m=+1043.131492565 I0324 15:12:54.188665 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-24 15:12:54.188644198 +0000 UTC m=+1043.131763640 I0324 15:12:54.206941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:54.207067 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-24 15:12:54.207057466 +0000 UTC m=+1043.150176878 I0324 15:12:54.283285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:54.321080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-spzn8" condition "Approved" to 2026-03-24 15:12:54.321068592 +0000 UTC m=+1043.264188004 I0324 15:12:54.340083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-spzn8" condition "Ready" to 2026-03-24 15:12:54.34007222 +0000 UTC m=+1043.283191632 I0324 15:12:54.368261 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:12:54.368249872 +0000 UTC m=+1043.311369284 I0324 15:12:54.389862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:54.390291 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:12:54.390284552 +0000 UTC m=+1043.333403954 I0324 15:12:54.397516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:54.404690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:54.404976 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:12:54.404969446 +0000 UTC m=+1043.348088858