I0408 00:36:13.401029 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 00:36:13.401162 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 00:36:13.401407 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 00:36:13.405261 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 00:36:13.405697 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 00:36:13.405792 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 00:36:13.405907 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 00:36:13.408392 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 00:36:13.422332 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 00:36:13.428502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 00:36:13.433174 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 00:36:13.433260 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 00:36:13.435531 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 00:36:13.437237 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 00:36:13.438960 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 00:36:13.439032 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 00:36:13.440933 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 00:36:13.442792 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 00:36:13.446575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 00:36:13.448369 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 00:36:13.450030 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 00:36:13.451835 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 00:36:13.453554 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 00:36:13.455148 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 00:36:13.457114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 00:36:13.458775 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 00:36:13.464429 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 00:36:13.464456 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 00:36:13.464496 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 00:36:13.464518 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 00:36:13.464589 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 00:36:13.467003 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 00:36:13.469601 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 00:36:13.472787 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:36:13.472821 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:36:13.472936 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:36:13.473047 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:36:13.511677 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:36:13.511807 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:36:13.528753 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:36:13.541278 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:36:13.560937 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:36:13.566463 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 00:36:23.241221 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 00:36:23.241203916 +0000 UTC m=+9.871489857 I0408 00:36:23.914846 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:36:23.914889 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 00:36:23.914879386 +0000 UTC m=+10.545165337 I0408 00:36:23.915939 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 00:36:23.915916827 +0000 UTC m=+10.546202778 E0408 00:36:23.934381 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 00:36:23.934488 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 00:36:23.934476672 +0000 UTC m=+10.564762623 E0408 00:36:23.934536 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 00:36:23.935697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:36:23.935890 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:36:23.935920 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 00:36:23.93591115 +0000 UTC m=+10.566197101 E0408 00:36:23.949911 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 00:36:23.950373 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 00:36:23.950450 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 00:36:23.950491 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 00:36:23.977368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-v28dz" condition "Approved" to 2026-04-08 00:36:23.977352018 +0000 UTC m=+10.607637949 I0408 00:36:23.993280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-v28dz" condition "Ready" to 2026-04-08 00:36:23.99326589 +0000 UTC m=+10.623551821 I0408 00:36:24.018490 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:36:24.018474689 +0000 UTC m=+10.648760610 I0408 00:36:24.036148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:36:28.951823 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:36:28.951812456 +0000 UTC m=+15.582098387 I0408 00:36:50.136481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:36:50.136534 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 00:36:50.136516618 +0000 UTC m=+36.766802549 I0408 00:36:50.136570 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 00:36:50.136560099 +0000 UTC m=+36.766846060 I0408 00:36:50.144392 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 00:36:50.144382356 +0000 UTC m=+36.774668277 I0408 00:36:50.157148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:36:50.157251 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 00:36:50.157243843 +0000 UTC m=+36.787529764 I0408 00:36:50.477869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:36:50.516326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w45mr" condition "Approved" to 2026-04-08 00:36:50.516311405 +0000 UTC m=+37.146597356 I0408 00:36:50.557265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w45mr" condition "Ready" to 2026-04-08 00:36:50.557251245 +0000 UTC m=+37.187537166 I0408 00:36:50.585876 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:36:50.585854238 +0000 UTC m=+37.216140199 I0408 00:36:50.605985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:38:23.134184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:38:23.134218 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 00:38:23.134213575 +0000 UTC m=+129.764499496 I0408 00:38:23.134178 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-08 00:38:23.134158353 +0000 UTC m=+129.764444344 E0408 00:38:23.147830 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 00:38:23.147982 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-08 00:38:23.147971187 +0000 UTC m=+129.778257118 I0408 00:38:23.148067 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 00:38:23.151784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:38:23.151881 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-08 00:38:23.151856434 +0000 UTC m=+129.782142365 E0408 00:38:23.160028 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0408 00:38:23.160188 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 00:38:23.160245 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0408 00:38:23.160299 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0408 00:38:23.163949 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-08 00:38:23.163938025 +0000 UTC m=+129.794223946 I0408 00:38:23.164084 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:38:23.164137 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 00:38:23.164119578 +0000 UTC m=+129.794405509 I0408 00:38:23.177965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:38:23.178034 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:38:23.178059 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 00:38:23.178050444 +0000 UTC m=+129.808336375 I0408 00:38:23.330185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-p6jpt" condition "Approved" to 2026-04-08 00:38:23.330175241 +0000 UTC m=+129.960461172 I0408 00:38:23.350415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-p6jpt" condition "Ready" to 2026-04-08 00:38:23.350407801 +0000 UTC m=+129.980693732 I0408 00:38:23.372653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:38:23.401031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-p5msw" condition "Approved" to 2026-04-08 00:38:23.401008425 +0000 UTC m=+130.031294416 I0408 00:38:23.431099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-p5msw" condition "Ready" to 2026-04-08 00:38:23.431082042 +0000 UTC m=+130.061367973 I0408 00:38:23.461262 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:38:23.46124281 +0000 UTC m=+130.091528771 I0408 00:38:23.479636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:38:23.525031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:38:28.161496 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:38:28.161481257 +0000 UTC m=+134.791767208 I0408 00:38:28.177192 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-p6jpt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:38:28.177177498 +0000 UTC m=+134.807463419 I0408 00:38:28.210969 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:38:28.210955338 +0000 UTC m=+134.841241259 I0408 00:38:28.233397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:38:28.233740 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:38:28.23373201 +0000 UTC m=+134.864017941 I0408 00:38:28.242574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:38:28.299143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:40:54.706850 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-04-08 00:40:54.706831618 +0000 UTC m=+281.337117619 I0408 00:40:54.707000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:40:54.707075 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-04-08 00:40:54.707062283 +0000 UTC m=+281.337348234 I0408 00:40:54.721024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:40:54.721137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:40:54.721174 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-04-08 00:40:54.721162292 +0000 UTC m=+281.351448263 I0408 00:40:54.923439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-njzxp" condition "Approved" to 2026-04-08 00:40:54.923426836 +0000 UTC m=+281.553712767 I0408 00:40:54.942786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-njzxp" condition "Ready" to 2026-04-08 00:40:54.942774699 +0000 UTC m=+281.573060630 I0408 00:40:54.972528 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:40:54.972509968 +0000 UTC m=+281.602795899 I0408 00:40:54.997525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:04.205079 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 00:42:04.205035727 +0000 UTC m=+350.835321688 I0408 00:42:04.205117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:42:04.205189 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 00:42:04.20517784 +0000 UTC m=+350.835463791 E0408 00:42:04.217139 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 00:42:04.217214 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 00:42:04.217205117 +0000 UTC m=+350.847491048 E0408 00:42:04.217270 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 00:42:04.219896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:04.219999 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 00:42:04.219990002 +0000 UTC m=+350.850275933 E0408 00:42:04.228177 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 00:42:04.228267 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 00:42:04.228293 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 00:42:04.228335 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 00:42:04.233486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:04.253228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-t98sr" condition "Approved" to 2026-04-08 00:42:04.253219267 +0000 UTC m=+350.883505198 I0408 00:42:04.266662 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-t98sr" condition "Ready" to 2026-04-08 00:42:04.266650462 +0000 UTC m=+350.896936393 I0408 00:42:04.287327 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:42:04.28731474 +0000 UTC m=+350.917600661 I0408 00:42:04.300814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:04.301168 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:42:04.301157813 +0000 UTC m=+350.931443774 I0408 00:42:04.314925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:09.229459 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:42:09.22944847 +0000 UTC m=+355.859734391 I0408 00:42:45.333629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:42:45.333677 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 00:42:45.333672201 +0000 UTC m=+391.963958112 I0408 00:42:45.333902 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 00:42:45.333899105 +0000 UTC m=+391.964185026 I0408 00:42:45.337511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:42:45.337536 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 00:42:45.337532178 +0000 UTC m=+391.967818109 I0408 00:42:45.337683 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 00:42:45.337680151 +0000 UTC m=+391.967966072 I0408 00:42:45.342519 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 00:42:45.342515205 +0000 UTC m=+391.972801126 I0408 00:42:45.342758 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:42:45.342779 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 00:42:45.34277548 +0000 UTC m=+391.973061411 I0408 00:42:45.360244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:45.360305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:42:45.360327 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 00:42:45.360322147 +0000 UTC m=+391.990608068 I0408 00:42:45.368341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:45.368388 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 00:42:45.368383316 +0000 UTC m=+391.998669237 I0408 00:42:45.370682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:45.370798 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:42:45.370831 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 00:42:45.370823914 +0000 UTC m=+392.001109845 I0408 00:42:45.571933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:45.604551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lt8kc" condition "Approved" to 2026-04-08 00:42:45.604539924 +0000 UTC m=+392.234825845 I0408 00:42:45.630450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:45.635244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lt8kc" condition "Ready" to 2026-04-08 00:42:45.635232719 +0000 UTC m=+392.265518640 I0408 00:42:45.670601 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:42:45.670582346 +0000 UTC m=+392.300868277 I0408 00:42:45.744326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:45.744588 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:42:45.744582986 +0000 UTC m=+392.374868907 I0408 00:42:45.762885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:45.767755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8t8fj" condition "Approved" to 2026-04-08 00:42:45.767744683 +0000 UTC m=+392.398030604 I0408 00:42:45.773495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:45.781546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8t8fj" condition "Ready" to 2026-04-08 00:42:45.781540325 +0000 UTC m=+392.411826246 I0408 00:42:45.894400 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:42:45.894386991 +0000 UTC m=+392.524672912 I0408 00:42:46.029139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:46.029476 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:42:46.029469556 +0000 UTC m=+392.659755487 I0408 00:42:46.433720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4fb25" condition "Approved" to 2026-04-08 00:42:46.433700339 +0000 UTC m=+393.063986300 I0408 00:42:46.481653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:46.529352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:46.890801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4fb25" condition "Ready" to 2026-04-08 00:42:46.890787054 +0000 UTC m=+393.521073015 I0408 00:42:47.176624 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-4fb25" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-d6rdd" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0408 00:42:47.334415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qz6rp" condition "Approved" to 2026-04-08 00:42:47.33367303 +0000 UTC m=+393.963958981 I0408 00:42:47.686375 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qz6rp" condition "Ready" to 2026-04-08 00:42:47.686355846 +0000 UTC m=+394.316641817 I0408 00:42:47.880231 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:42:47.88021204 +0000 UTC m=+394.510498001 I0408 00:42:47.981813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:47.982204 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:42:47.982196992 +0000 UTC m=+394.612482923 I0408 00:42:48.179523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:52.855160 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g9d8w-tls" condition "Ready" to 2026-04-08 00:42:52.855119407 +0000 UTC m=+399.485405368 I0408 00:42:52.855251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g9d8w-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:42:52.855396 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g9d8w-tls" condition "Issuing" to 2026-04-08 00:42:52.85527749 +0000 UTC m=+399.485563421 I0408 00:42:52.869322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g9d8w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g9d8w-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:52.869400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g9d8w-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:42:52.869449 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-g9d8w-tls" condition "Issuing" to 2026-04-08 00:42:52.869442729 +0000 UTC m=+399.499728660 I0408 00:42:53.027400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g9d8w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g9d8w-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:42:53.032768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-g9d8w-fkg2p" condition "Approved" to 2026-04-08 00:42:53.032758211 +0000 UTC m=+399.663044132 I0408 00:42:53.054582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-g9d8w-fkg2p" condition "Ready" to 2026-04-08 00:42:53.054571321 +0000 UTC m=+399.684857262 I0408 00:42:53.079269 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-g9d8w-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:42:53.079249258 +0000 UTC m=+399.709535199 I0408 00:42:53.112950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-g9d8w-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-g9d8w-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:43:11.832772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:43:11.832810 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 00:43:11.832803472 +0000 UTC m=+418.463089393 I0408 00:43:11.832828 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 00:43:11.832811662 +0000 UTC m=+418.463097583 I0408 00:43:11.847973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:43:11.848053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:43:11.848072 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 00:43:11.848065427 +0000 UTC m=+418.478351358 I0408 00:43:12.048574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:43:12.059599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-75fc6" condition "Approved" to 2026-04-08 00:43:12.059583778 +0000 UTC m=+418.689869699 I0408 00:43:12.085831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-75fc6" condition "Ready" to 2026-04-08 00:43:12.085818162 +0000 UTC m=+418.716104093 I0408 00:43:12.118778 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:43:12.118764791 +0000 UTC m=+418.749050732 I0408 00:43:12.140254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:43:12.140523 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:43:12.140515665 +0000 UTC m=+418.770801596 I0408 00:43:12.144533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:43:12.161355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:43:12.161610 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:43:12.161602538 +0000 UTC m=+418.791888459 I0408 00:43:12.163612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:46:35.512571 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 00:46:35.512552494 +0000 UTC m=+622.142838425 I0408 00:46:35.512998 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:46:35.513076 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 00:46:35.513059044 +0000 UTC m=+622.143345005 I0408 00:46:35.529229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:46:35.529299 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 00:46:35.529290529 +0000 UTC m=+622.159576450 I0408 00:46:35.747400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:46:35.779650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hh6zc" condition "Approved" to 2026-04-08 00:46:35.779630608 +0000 UTC m=+622.409916569 I0408 00:46:35.800326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hh6zc" condition "Ready" to 2026-04-08 00:46:35.800313753 +0000 UTC m=+622.430599684 I0408 00:46:35.832288 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:46:35.832279472 +0000 UTC m=+622.462565393 I0408 00:46:35.856935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:46:35.857215 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:46:35.857210721 +0000 UTC m=+622.487496652 I0408 00:46:35.870491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:46:35.878985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:46:35.879120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:46:35.879420 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:46:35.879411025 +0000 UTC m=+622.509696956 I0408 00:48:58.695275 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:48:58.695359 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-08 00:48:58.695349345 +0000 UTC m=+765.325635306 I0408 00:48:58.695467 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-08 00:48:58.695452527 +0000 UTC m=+765.325738478 I0408 00:48:58.710636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:48:58.710709 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-08 00:48:58.710701632 +0000 UTC m=+765.340987563 I0408 00:48:58.894061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:48:58.923409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-shmgb" condition "Approved" to 2026-04-08 00:48:58.923393061 +0000 UTC m=+765.553678992 I0408 00:48:58.950253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-shmgb" condition "Ready" to 2026-04-08 00:48:58.950243269 +0000 UTC m=+765.580529190 I0408 00:48:58.972687 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:48:58.972675958 +0000 UTC m=+765.602961889 I0408 00:48:58.994012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:50:03.268715 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:50:03.268751 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 00:50:03.268744082 +0000 UTC m=+829.899030013 I0408 00:50:03.268925 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-08 00:50:03.268917965 +0000 UTC m=+829.899203896 I0408 00:50:03.290073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:50:03.290201 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:50:03.290227 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 00:50:03.290218223 +0000 UTC m=+829.920504174 I0408 00:50:03.477383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9zbrm" condition "Approved" to 2026-04-08 00:50:03.477366347 +0000 UTC m=+830.107652268 I0408 00:50:03.502305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9zbrm" condition "Ready" to 2026-04-08 00:50:03.502290817 +0000 UTC m=+830.132576768 I0408 00:50:03.538008 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:50:03.537993213 +0000 UTC m=+830.168279164 I0408 00:50:03.559438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:50:03.605766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:53:02.110769 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:53:02.110829 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 00:53:02.110822037 +0000 UTC m=+1008.741107968 I0408 00:53:02.110850 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-08 00:53:02.110830687 +0000 UTC m=+1008.741116648 I0408 00:53:02.131290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:53:02.131434 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 00:53:02.131470 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 00:53:02.13146199 +0000 UTC m=+1008.761747921 I0408 00:53:02.272128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 00:53:02.279620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-9pqs4" condition "Approved" to 2026-04-08 00:53:02.279611541 +0000 UTC m=+1008.909897472 I0408 00:53:02.304062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-9pqs4" condition "Ready" to 2026-04-08 00:53:02.304049579 +0000 UTC m=+1008.934335510 I0408 00:53:02.332268 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 00:53:02.332243292 +0000 UTC m=+1008.962529253 I0408 00:53:02.356179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"