I0420 20:57:03.538836 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 20:57:03.538977 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 20:57:03.539067 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 20:57:03.544092 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 20:57:03.544437 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 20:57:03.544479 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 20:57:03.544565 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 20:57:03.546860 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 20:57:03.561219 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 20:57:03.564102 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 20:57:03.569769 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 20:57:03.573345 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 20:57:03.573368 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 20:57:03.573419 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 20:57:03.576248 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 20:57:03.576272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 20:57:03.580223 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 20:57:03.582940 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 20:57:03.585390 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 20:57:03.590236 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 20:57:03.594163 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 20:57:03.597238 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 20:57:03.599632 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 20:57:03.599665 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 20:57:03.599675 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 20:57:03.599722 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 20:57:03.602200 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 20:57:03.605092 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 20:57:03.607385 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 20:57:03.609387 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 20:57:03.615111 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 20:57:03.618815 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 20:57:03.621532 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 20:57:03.623560 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:57:03.623602 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:57:03.623918 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:57:03.624025 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:57:03.624335 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:57:03.624453 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:57:03.624609 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:57:03.625272 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:57:03.625641 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:57:03.704876 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:57:18.300818 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 20:57:18.300801784 +0000 UTC m=+14.797127256 I0420 20:57:19.002421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:57:19.002403 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 20:57:19.002382509 +0000 UTC m=+15.498707991 I0420 20:57:19.002471 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 20:57:19.002461001 +0000 UTC m=+15.498786483 E0420 20:57:19.017064 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 20:57:19.017132 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 20:57:19.017125761 +0000 UTC m=+15.513451223 E0420 20:57:19.017155 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 20:57:19.020364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:57:19.020447 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:57:19.020473 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 20:57:19.020460239 +0000 UTC m=+15.516785691 E0420 20:57:19.030276 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 20:57:19.030657 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 20:57:19.030690 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 20:57:19.030748 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 20:57:19.061222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-p86dz" condition "Approved" to 2026-04-20 20:57:19.061210002 +0000 UTC m=+15.557535464 I0420 20:57:19.062853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:57:19.071377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-p86dz" condition "Ready" to 2026-04-20 20:57:19.071367222 +0000 UTC m=+15.567692684 I0420 20:57:19.092657 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:57:19.092642248 +0000 UTC m=+15.588967740 I0420 20:57:19.110559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:57:19.110875 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:57:19.110868072 +0000 UTC m=+15.607193544 I0420 20:57:19.126775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:57:19.127005 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:57:19.12699662 +0000 UTC m=+15.623322072 I0420 20:57:19.129775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:57:24.031434 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:57:24.03141946 +0000 UTC m=+20.527744942 I0420 20:57:42.420479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:57:42.420459 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 20:57:42.420422701 +0000 UTC m=+38.916748183 I0420 20:57:42.420533 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 20:57:42.420526304 +0000 UTC m=+38.916851766 I0420 20:57:42.437220 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 20:57:42.437203951 +0000 UTC m=+38.933529403 I0420 20:57:42.443874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:57:42.443938 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 20:57:42.443931356 +0000 UTC m=+38.940256818 I0420 20:57:42.575844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:57:42.607792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9q8xw" condition "Approved" to 2026-04-20 20:57:42.607782291 +0000 UTC m=+39.104107743 I0420 20:57:42.641078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9q8xw" condition "Ready" to 2026-04-20 20:57:42.641061374 +0000 UTC m=+39.137386906 I0420 20:57:42.674797 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:57:42.674780078 +0000 UTC m=+39.171105560 I0420 20:57:42.696277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:25.790058 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 20:59:25.790011017 +0000 UTC m=+142.286336499 I0420 20:59:25.790250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:59:25.790301 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 20:59:25.790288165 +0000 UTC m=+142.286613657 E0420 20:59:25.806419 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 20:59:25.806483 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 20:59:25.806477149 +0000 UTC m=+142.302802601 I0420 20:59:25.806500 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 20:59:25.808347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:25.808435 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:59:25.808471 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 20:59:25.808459292 +0000 UTC m=+142.304784784 E0420 20:59:25.815632 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 20:59:25.815892 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 20:59:25.815976 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 20:59:25.816022 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 20:59:25.818519 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:59:25.818549 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 20:59:25.818541953 +0000 UTC m=+142.314867415 I0420 20:59:25.818784 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 20:59:25.818767799 +0000 UTC m=+142.315093291 I0420 20:59:25.836942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:25.837119 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 20:59:25.83711272 +0000 UTC m=+142.333438182 I0420 20:59:26.007433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:26.017704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:26.018492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gqw5l" condition "Approved" to 2026-04-20 20:59:26.018470372 +0000 UTC m=+142.514795844 I0420 20:59:26.043404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gqw5l" condition "Ready" to 2026-04-20 20:59:26.04339564 +0000 UTC m=+142.539721092 I0420 20:59:26.047670 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bw44j" condition "Approved" to 2026-04-20 20:59:26.047646354 +0000 UTC m=+142.543971826 I0420 20:59:26.068781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bw44j" condition "Ready" to 2026-04-20 20:59:26.06876138 +0000 UTC m=+142.565086872 I0420 20:59:26.075235 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:59:26.075219943 +0000 UTC m=+142.571545405 I0420 20:59:26.093456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:26.137787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:30.817143 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:59:30.817129609 +0000 UTC m=+147.313455111 I0420 20:59:30.833075 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-bw44j" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:59:30.833058186 +0000 UTC m=+147.329383658 I0420 20:59:30.865889 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:59:30.865871135 +0000 UTC m=+147.362196607 I0420 20:59:30.889031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:30.946993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:07.997855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:02:07.997988 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-04-20 21:02:07.997972123 +0000 UTC m=+304.494297605 I0420 21:02:07.997978 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-04-20 21:02:07.997932262 +0000 UTC m=+304.494257744 I0420 21:02:08.015467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:08.015531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:02:08.015658 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-04-20 21:02:08.015648456 +0000 UTC m=+304.511973918 I0420 21:02:08.264976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:08.273084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-r7bhz" condition "Approved" to 2026-04-20 21:02:08.272227413 +0000 UTC m=+304.768552895 I0420 21:02:08.289727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-r7bhz" condition "Ready" to 2026-04-20 21:02:08.289720911 +0000 UTC m=+304.786046373 I0420 21:02:08.314745 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:08.314737694 +0000 UTC m=+304.811063156 I0420 21:02:08.338948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:08.339489 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:08.33947985 +0000 UTC m=+304.835805312 I0420 21:02:08.354259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:08.354644 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:08.354630984 +0000 UTC m=+304.850956476 I0420 21:02:08.358374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:03:21.132928 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 21:03:21.132879915 +0000 UTC m=+377.629205407 I0420 21:03:21.133073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:03:21.133151 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 21:03:21.133141782 +0000 UTC m=+377.629467234 E0420 21:03:21.145132 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 21:03:21.145192 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 21:03:21.145183043 +0000 UTC m=+377.641508535 E0420 21:03:21.145258 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 21:03:21.150534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:03:21.150626 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:03:21.150653 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 21:03:21.150646452 +0000 UTC m=+377.646971914 E0420 21:03:21.158538 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 21:03:21.158686 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 21:03:21.158727 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 21:03:21.158778 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 21:03:21.184462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4kwbg" condition "Approved" to 2026-04-20 21:03:21.184441371 +0000 UTC m=+377.680766863 I0420 21:03:21.196415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4kwbg" condition "Ready" to 2026-04-20 21:03:21.1964013 +0000 UTC m=+377.692726762 I0420 21:03:21.221229 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:03:21.221214741 +0000 UTC m=+377.717540203 I0420 21:03:21.236531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:03:21.237007 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:03:21.236999295 +0000 UTC m=+377.733324777 I0420 21:03:21.254517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:03:21.254879 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:03:21.254853946 +0000 UTC m=+377.751179428 I0420 21:03:21.258270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:03:26.159312 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:03:26.159297406 +0000 UTC m=+382.655622868 I0420 21:04:05.705203 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 21:04:05.705189926 +0000 UTC m=+422.201515368 I0420 21:04:05.705680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:04:05.705718 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 21:04:05.70571508 +0000 UTC m=+422.202040532 I0420 21:04:05.709258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:04:05.709383 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 21:04:05.70937836 +0000 UTC m=+422.205703812 I0420 21:04:05.710186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:04:05.710231 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 21:04:05.710224244 +0000 UTC m=+422.206549686 I0420 21:04:05.709977 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 21:04:05.709957716 +0000 UTC m=+422.206283168 I0420 21:04:05.710003 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 21:04:05.710002068 +0000 UTC m=+422.206327520 I0420 21:04:05.743298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:05.743399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:04:05.743420 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 21:04:05.743415096 +0000 UTC m=+422.239740548 I0420 21:04:05.748538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:05.748682 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 21:04:05.74867432 +0000 UTC m=+422.244999782 I0420 21:04:05.762396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:05.762544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:04:05.762624 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 21:04:05.762617123 +0000 UTC m=+422.258942585 I0420 21:04:05.923614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:05.956253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9dtjk" condition "Approved" to 2026-04-20 21:04:05.956235993 +0000 UTC m=+422.452561445 I0420 21:04:05.972627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9dtjk" condition "Ready" to 2026-04-20 21:04:05.972612552 +0000 UTC m=+422.468938004 I0420 21:04:05.983026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:06.005170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rxdr5" condition "Approved" to 2026-04-20 21:04:06.005153027 +0000 UTC m=+422.501478519 I0420 21:04:06.013599 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:04:06.013581288 +0000 UTC m=+422.509906750 I0420 21:04:06.024263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rxdr5" condition "Ready" to 2026-04-20 21:04:06.024250371 +0000 UTC m=+422.520575823 I0420 21:04:06.037534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-68kv4" condition "Approved" to 2026-04-20 21:04:06.037519096 +0000 UTC m=+422.533844548 I0420 21:04:06.051322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:06.051634 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:04:06.051627673 +0000 UTC m=+422.547953125 I0420 21:04:06.454728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-68kv4" condition "Ready" to 2026-04-20 21:04:06.454706647 +0000 UTC m=+422.951032139 I0420 21:04:06.484572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:06.589360 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:04:06.589343126 +0000 UTC m=+423.085668588 I0420 21:04:06.639820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:06.886282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:06.886758 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:04:06.88675159 +0000 UTC m=+423.383077062 I0420 21:04:07.038331 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:04:07.038314408 +0000 UTC m=+423.534639890 I0420 21:04:07.235578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:07.235949 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:04:07.235943709 +0000 UTC m=+423.732269171 I0420 21:04:07.285598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:07.535865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:13.391865 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls" condition "Ready" to 2026-04-20 21:04:13.391849701 +0000 UTC m=+429.888175163 I0420 21:04:13.392348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:04:13.392368 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls" condition "Issuing" to 2026-04-20 21:04:13.392364185 +0000 UTC m=+429.888689647 I0420 21:04:13.405375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:13.405637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:04:13.405667 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls" condition "Issuing" to 2026-04-20 21:04:13.405659763 +0000 UTC m=+429.901985225 I0420 21:04:13.631882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pbcf7-p8l9x" condition "Approved" to 2026-04-20 21:04:13.631861763 +0000 UTC m=+430.128187225 I0420 21:04:13.723563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pbcf7-p8l9x" condition "Ready" to 2026-04-20 21:04:13.723552607 +0000 UTC m=+430.219878059 I0420 21:04:13.880060 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:04:13.880042531 +0000 UTC m=+430.376367993 I0420 21:04:14.030349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:14.030731 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:04:14.030720164 +0000 UTC m=+430.527045656 I0420 21:04:14.091296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pbcf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:34.451255 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:04:34.451320 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 21:04:34.451290442 +0000 UTC m=+450.947615914 I0420 21:04:34.451934 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 21:04:34.451912229 +0000 UTC m=+450.948237721 I0420 21:04:34.467714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:34.467900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:04:34.467952 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 21:04:34.467938062 +0000 UTC m=+450.964263554 I0420 21:04:34.696548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hbfl7" condition "Approved" to 2026-04-20 21:04:34.696520498 +0000 UTC m=+451.192845970 I0420 21:04:34.766436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hbfl7" condition "Ready" to 2026-04-20 21:04:34.766390419 +0000 UTC m=+451.262715871 I0420 21:04:34.796266 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:04:34.796246084 +0000 UTC m=+451.292571556 I0420 21:04:34.816376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:34.872828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:49.176409 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:07:49.176520 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 21:07:49.176486481 +0000 UTC m=+645.672811973 I0420 21:07:49.176520 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 21:07:49.176484041 +0000 UTC m=+645.672809503 I0420 21:07:49.195074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:49.195161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:07:49.195190 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 21:07:49.195183434 +0000 UTC m=+645.691508896 I0420 21:07:49.363952 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tzbb9" condition "Approved" to 2026-04-20 21:07:49.363940247 +0000 UTC m=+645.860265709 I0420 21:07:49.383776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tzbb9" condition "Ready" to 2026-04-20 21:07:49.38376162 +0000 UTC m=+645.880087082 I0420 21:07:49.409793 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:49.409782093 +0000 UTC m=+645.906107545 I0420 21:07:49.434571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:49.436412 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:49.436400272 +0000 UTC m=+645.932725754 I0420 21:07:49.440393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:49.453341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:10:16.478274 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 21:10:16.47824036 +0000 UTC m=+792.974565822 I0420 21:10:16.478383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:10:16.478431 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 21:10:16.478427276 +0000 UTC m=+792.974752738 I0420 21:10:16.496568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:10:16.496669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:10:16.496701 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 21:10:16.496692305 +0000 UTC m=+792.993017787 I0420 21:10:16.708008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:10:16.715044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zlrt4" condition "Approved" to 2026-04-20 21:10:16.715030459 +0000 UTC m=+793.211355921 I0420 21:10:16.731743 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zlrt4" condition "Ready" to 2026-04-20 21:10:16.731732175 +0000 UTC m=+793.228057637 I0420 21:10:16.760372 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:10:16.760358057 +0000 UTC m=+793.256683509 I0420 21:10:16.782390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:10:16.846343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:11:17.381270 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 21:11:17.381249048 +0000 UTC m=+853.877574580 I0420 21:11:17.382012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:11:17.382115 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 21:11:17.382105431 +0000 UTC m=+853.878430923 I0420 21:11:17.405726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:11:17.405809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:11:17.405823 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 21:11:17.40581868 +0000 UTC m=+853.902144132 I0420 21:11:17.724710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:11:17.736852 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vnts4" condition "Approved" to 2026-04-20 21:11:17.736836308 +0000 UTC m=+854.233161800 I0420 21:11:17.760668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vnts4" condition "Ready" to 2026-04-20 21:11:17.760653789 +0000 UTC m=+854.256979241 I0420 21:11:17.790345 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:11:17.79032377 +0000 UTC m=+854.286649232 I0420 21:11:17.808378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:14:15.957318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:14:15.957403 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 21:14:15.957384313 +0000 UTC m=+1032.453709775 I0420 21:14:15.957624 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 21:14:15.957597899 +0000 UTC m=+1032.453923391 I0420 21:14:15.975051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:14:15.975150 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:14:15.975183 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 21:14:15.97517558 +0000 UTC m=+1032.471501042 I0420 21:14:16.216073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xthnz" condition "Approved" to 2026-04-20 21:14:16.216053807 +0000 UTC m=+1032.712379299 I0420 21:14:16.242232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xthnz" condition "Ready" to 2026-04-20 21:14:16.242219163 +0000 UTC m=+1032.738544635 I0420 21:14:16.271421 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:14:16.271400621 +0000 UTC m=+1032.767726093 I0420 21:14:16.296408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:14:16.296974 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:14:16.29696504 +0000 UTC m=+1032.793290522 I0420 21:14:16.316116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:14:16.316583 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:14:16.316570016 +0000 UTC m=+1032.812895478 I0420 21:14:16.319016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"