I0417 18:45:33.423642 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 18:45:33.423777 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 18:45:33.423884 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 18:45:33.430031 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 18:45:33.430437 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 18:45:33.430510 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 18:45:33.430578 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 18:45:33.432622 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 18:45:33.448929 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 18:45:33.453930 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 18:45:33.459312 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 18:45:33.463008 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 18:45:33.465337 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 18:45:33.467791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 18:45:33.470162 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 18:45:33.471813 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 18:45:33.471843 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 18:45:33.471857 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 18:45:33.473774 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 18:45:33.479677 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 18:45:33.483292 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 18:45:33.485207 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 18:45:33.487140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 18:45:33.488934 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 18:45:33.490693 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 18:45:33.490722 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 18:45:33.490729 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 18:45:33.490794 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 18:45:33.492533 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 18:45:33.492576 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 18:45:33.494689 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 18:45:33.497282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 18:45:33.501758 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 18:45:33.505014 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:45:33.505050 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:45:33.505498 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:45:33.506185 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:45:33.525062 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:45:33.541234 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:45:33.561479 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:45:33.581142 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:45:33.584861 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:45:33.594198 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 18:45:54.534836 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 18:45:54.534818095 +0000 UTC m=+21.139564200 I0417 18:45:55.217709 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 18:45:55.217693042 +0000 UTC m=+21.822439137 I0417 18:45:55.217960 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:45:55.218026 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 18:45:55.218017591 +0000 UTC m=+21.822763656 E0417 18:45:55.233131 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 18:45:55.233236 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 18:45:55.233227984 +0000 UTC m=+21.837974059 E0417 18:45:55.233261 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 18:45:55.236222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:45:55.236299 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:45:55.236321 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 18:45:55.236314466 +0000 UTC m=+21.841060541 E0417 18:45:55.245479 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 18:45:55.245991 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 18:45:55.246047 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 18:45:55.246131 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 18:45:55.271071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:45:55.275573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nvnr4" condition "Approved" to 2026-04-17 18:45:55.275555555 +0000 UTC m=+21.880301650 I0417 18:45:55.289242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nvnr4" condition "Ready" to 2026-04-17 18:45:55.289232227 +0000 UTC m=+21.893978292 I0417 18:45:55.311357 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:55.311347414 +0000 UTC m=+21.916093489 I0417 18:45:55.325365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:45:55.325638 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:55.325630551 +0000 UTC m=+21.930376626 I0417 18:45:55.330628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:45:55.345008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:45:55.345204 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:45:55.34519688 +0000 UTC m=+21.949942955 I0417 18:46:00.246960 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:00.246938221 +0000 UTC m=+26.851684326 I0417 18:46:21.454795 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 18:46:21.454781432 +0000 UTC m=+48.059527507 I0417 18:46:21.455197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:46:21.455220 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 18:46:21.455215924 +0000 UTC m=+48.059961999 I0417 18:46:21.465873 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 18:46:21.465859426 +0000 UTC m=+48.070605501 I0417 18:46:21.476545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:46:21.476624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:46:21.476650 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 18:46:21.476643802 +0000 UTC m=+48.081389877 I0417 18:46:21.659444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5w9vk" condition "Approved" to 2026-04-17 18:46:21.659428854 +0000 UTC m=+48.264174949 I0417 18:46:21.693665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5w9vk" condition "Ready" to 2026-04-17 18:46:21.69364633 +0000 UTC m=+48.298392435 I0417 18:46:21.726434 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:46:21.726416817 +0000 UTC m=+48.331162892 I0417 18:46:21.749656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:04.808604 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:48:04.808652 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-17 18:48:04.808643569 +0000 UTC m=+151.413389644 I0417 18:48:04.808610 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 18:48:04.808589767 +0000 UTC m=+151.413335862 E0417 18:48:04.822743 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 18:48:04.822809 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-17 18:48:04.822797741 +0000 UTC m=+151.427543846 I0417 18:48:04.822870 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 18:48:04.826032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:04.826129 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 18:48:04.826119308 +0000 UTC m=+151.430865383 E0417 18:48:04.835411 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0417 18:48:04.835530 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 18:48:04.835569 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 18:48:04.835617 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0417 18:48:04.839145 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-17 18:48:04.83913519 +0000 UTC m=+151.443881265 I0417 18:48:04.839194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:48:04.839252 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 18:48:04.839244824 +0000 UTC m=+151.443990889 I0417 18:48:04.855898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:04.855996 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:48:04.856013 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 18:48:04.856007085 +0000 UTC m=+151.460753160 I0417 18:48:04.985591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:05.014318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-75hnv" condition "Approved" to 2026-04-17 18:48:05.014291557 +0000 UTC m=+151.619037662 I0417 18:48:05.040152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-75hnv" condition "Ready" to 2026-04-17 18:48:05.040136407 +0000 UTC m=+151.644882502 I0417 18:48:05.068150 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:05.068138854 +0000 UTC m=+151.672884919 I0417 18:48:05.095372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:05.321673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:05.326361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-s25h6" condition "Approved" to 2026-04-17 18:48:05.326352154 +0000 UTC m=+151.931098229 I0417 18:48:05.344357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-s25h6" condition "Ready" to 2026-04-17 18:48:05.344342497 +0000 UTC m=+151.949088582 I0417 18:48:09.836442 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:09.836429707 +0000 UTC m=+156.441175802 I0417 18:48:09.853951 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-s25h6" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:09.853939737 +0000 UTC m=+156.458685802 I0417 18:48:09.891270 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:09.891257889 +0000 UTC m=+156.496003954 I0417 18:48:09.912481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:48:09.912865 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:48:09.912856738 +0000 UTC m=+156.517602843 I0417 18:48:09.928844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:50:36.537372 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Ready" to 2026-04-17 18:50:36.537359987 +0000 UTC m=+303.142106062 I0417 18:50:36.537972 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:50:36.537993 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Issuing" to 2026-04-17 18:50:36.537989913 +0000 UTC m=+303.142735988 I0417 18:50:36.558770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:50:36.558828 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Ready" to 2026-04-17 18:50:36.558822481 +0000 UTC m=+303.163568556 I0417 18:50:36.661083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:50:36.692192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-25.nip.io-tls-z52qr" condition "Approved" to 2026-04-17 18:50:36.692175434 +0000 UTC m=+303.296921689 I0417 18:50:36.710959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-25.nip.io-tls-z52qr" condition "Ready" to 2026-04-17 18:50:36.710944478 +0000 UTC m=+303.315690583 I0417 18:50:36.743212 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:50:36.743201415 +0000 UTC m=+303.347947490 I0417 18:50:36.761600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:50:36.762096 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:50:36.762085621 +0000 UTC m=+303.366831726 I0417 18:50:36.775350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:50:36.783860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:51:49.039743 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 18:51:49.039724367 +0000 UTC m=+375.644470462 I0417 18:51:49.040543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:51:49.040574 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 18:51:49.040567479 +0000 UTC m=+375.645313584 I0417 18:51:49.055238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:51:49.055323 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" E0417 18:51:49.055384 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 18:51:49.055418 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 18:51:49.055412106 +0000 UTC m=+375.660158181 E0417 18:51:49.055463 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 18:51:49.055557 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 18:51:49.055550979 +0000 UTC m=+375.660297054 E0417 18:51:49.066548 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 18:51:49.066631 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 18:51:49.066653 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 18:51:49.066685 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 18:51:49.095325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n47tg" condition "Approved" to 2026-04-17 18:51:49.095304437 +0000 UTC m=+375.700050542 I0417 18:51:49.096999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:51:49.109301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n47tg" condition "Ready" to 2026-04-17 18:51:49.109288002 +0000 UTC m=+375.714034077 I0417 18:51:49.135385 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:51:49.135370722 +0000 UTC m=+375.740116817 I0417 18:51:49.150472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:51:49.201672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:51:54.067014 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:51:54.066998951 +0000 UTC m=+380.671745056 I0417 18:52:33.302528 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:52:33.302558 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 18:52:33.302553063 +0000 UTC m=+419.907299118 I0417 18:52:33.302566 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 18:52:33.302560723 +0000 UTC m=+419.907306798 I0417 18:52:33.305384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:52:33.305403 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 18:52:33.305400127 +0000 UTC m=+419.910146192 I0417 18:52:33.305569 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:52:33.305581 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 18:52:33.305579171 +0000 UTC m=+419.910325236 I0417 18:52:33.305686 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 18:52:33.305683343 +0000 UTC m=+419.910429408 I0417 18:52:33.305799 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 18:52:33.305792306 +0000 UTC m=+419.910538381 I0417 18:52:33.332367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:33.337277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:33.337334 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 18:52:33.337327484 +0000 UTC m=+419.942073559 I0417 18:52:33.337404 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 18:52:33.337399966 +0000 UTC m=+419.942146031 I0417 18:52:33.340720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:33.342027 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 18:52:33.342010006 +0000 UTC m=+419.946756071 I0417 18:52:33.442275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:33.482836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hc867" condition "Approved" to 2026-04-17 18:52:33.482817647 +0000 UTC m=+420.087563732 I0417 18:52:33.499082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-hc867" condition "Ready" to 2026-04-17 18:52:33.499072808 +0000 UTC m=+420.103818883 I0417 18:52:33.525965 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:33.525955166 +0000 UTC m=+420.130701241 I0417 18:52:33.547889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:33.602168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:33.622500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:33.633544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9s7dp" condition "Approved" to 2026-04-17 18:52:33.633535406 +0000 UTC m=+420.238281471 I0417 18:52:33.654655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-9s7dp" condition "Ready" to 2026-04-17 18:52:33.654643893 +0000 UTC m=+420.259389978 I0417 18:52:33.830618 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:33.830604465 +0000 UTC m=+420.435350540 I0417 18:52:33.950632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:33.952893 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:33.952883167 +0000 UTC m=+420.557629242 I0417 18:52:34.397770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:34.446266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:34.549303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-g7mjs" condition "Approved" to 2026-04-17 18:52:34.549278122 +0000 UTC m=+421.154024207 I0417 18:52:35.014830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-g7mjs" condition "Ready" to 2026-04-17 18:52:35.014818634 +0000 UTC m=+421.619564709 I0417 18:52:35.195269 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-g7mjs" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-7w75w" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0417 18:52:35.352610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8qvs5" condition "Approved" to 2026-04-17 18:52:35.352594893 +0000 UTC m=+421.957340968 I0417 18:52:35.403710 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8qvs5" condition "Ready" to 2026-04-17 18:52:35.403699588 +0000 UTC m=+422.008445663 I0417 18:52:35.897097 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:35.897086352 +0000 UTC m=+422.501832427 I0417 18:52:35.996059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:35.996477 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:35.996470209 +0000 UTC m=+422.601216284 I0417 18:52:36.248737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:36.298845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:41.422491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:52:41.422525 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls" condition "Issuing" to 2026-04-17 18:52:41.422516284 +0000 UTC m=+428.027262359 I0417 18:52:41.422673 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls" condition "Ready" to 2026-04-17 18:52:41.422652147 +0000 UTC m=+428.027398252 I0417 18:52:41.440647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:41.440751 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls" condition "Ready" to 2026-04-17 18:52:41.440739886 +0000 UTC m=+428.045485991 I0417 18:52:41.646218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:41.685138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8cb5p-44bql" condition "Approved" to 2026-04-17 18:52:41.685121884 +0000 UTC m=+428.289867979 I0417 18:52:41.701837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8cb5p-44bql" condition "Ready" to 2026-04-17 18:52:41.701827247 +0000 UTC m=+428.306573322 I0417 18:52:41.732060 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:52:41.73204662 +0000 UTC m=+428.336792695 I0417 18:52:41.755760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:52:41.808418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8cb5p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:53:11.767981 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:53:11.768016 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 18:53:11.768008054 +0000 UTC m=+458.372754129 I0417 18:53:11.768103 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 18:53:11.768086876 +0000 UTC m=+458.372832951 I0417 18:53:11.787795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:53:11.787889 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 18:53:11.787880959 +0000 UTC m=+458.392627034 I0417 18:53:11.926225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:53:11.952918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v2mdc" condition "Approved" to 2026-04-17 18:53:11.952906668 +0000 UTC m=+458.557652743 I0417 18:53:11.969255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v2mdc" condition "Ready" to 2026-04-17 18:53:11.969245922 +0000 UTC m=+458.573991987 I0417 18:53:11.999657 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:53:11.999645201 +0000 UTC m=+458.604391276 I0417 18:53:12.017579 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:53:12.017927 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:53:12.017919784 +0000 UTC m=+458.622665859 I0417 18:53:12.041561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:56:28.567786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:56:28.567901 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 18:56:28.567885918 +0000 UTC m=+655.172632073 I0417 18:56:28.568188 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 18:56:28.568173925 +0000 UTC m=+655.172920040 I0417 18:56:28.626681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:56:28.626747 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 18:56:28.62673985 +0000 UTC m=+655.231485925 I0417 18:56:29.161721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:56:29.330361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pwkxz" condition "Approved" to 2026-04-17 18:56:29.330337674 +0000 UTC m=+655.935083799 I0417 18:56:29.472345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pwkxz" condition "Ready" to 2026-04-17 18:56:29.472323773 +0000 UTC m=+656.077069878 I0417 18:56:29.903972 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:56:29.903955636 +0000 UTC m=+656.508701731 I0417 18:56:29.961469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:56:29.961881 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:56:29.961873145 +0000 UTC m=+656.566619220 I0417 18:56:29.973632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:56:29.991944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:59:28.466303 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:59:28.466509 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 18:59:28.466498432 +0000 UTC m=+835.071244517 I0417 18:59:28.466753 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-17 18:59:28.466732959 +0000 UTC m=+835.071479054 I0417 18:59:28.483445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:59:28.483571 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 18:59:28.483610 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 18:59:28.48360274 +0000 UTC m=+835.088348825 I0417 18:59:28.698382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-rzmz6" condition "Approved" to 2026-04-17 18:59:28.698362046 +0000 UTC m=+835.303108141 I0417 18:59:28.717102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-rzmz6" condition "Ready" to 2026-04-17 18:59:28.717091215 +0000 UTC m=+835.321837290 I0417 18:59:28.747904 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:59:28.747891111 +0000 UTC m=+835.352637186 I0417 18:59:28.775382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 18:59:28.775618 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 18:59:28.775612216 +0000 UTC m=+835.380358281 I0417 18:59:28.798330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 19:00:31.723548 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-17 19:00:31.723534006 +0000 UTC m=+898.328280081 I0417 19:00:31.723850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 19:00:31.723900 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 19:00:31.723890405 +0000 UTC m=+898.328636510 I0417 19:00:31.743253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 19:00:31.743344 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 19:00:31.743363 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 19:00:31.743354095 +0000 UTC m=+898.348100160 I0417 19:00:31.919501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-54fsx" condition "Approved" to 2026-04-17 19:00:31.91947239 +0000 UTC m=+898.524218495 I0417 19:00:31.941684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-54fsx" condition "Ready" to 2026-04-17 19:00:31.94166986 +0000 UTC m=+898.546415935 I0417 19:00:31.976793 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 19:00:31.976780849 +0000 UTC m=+898.581526914 I0417 19:00:32.000474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 19:03:29.817748 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 19:03:29.817782 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 19:03:29.817773829 +0000 UTC m=+1076.422519904 I0417 19:03:29.818280 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-17 19:03:29.818272352 +0000 UTC m=+1076.423018427 I0417 19:03:29.833010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 19:03:29.833115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 19:03:29.833145 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 19:03:29.83313425 +0000 UTC m=+1076.437880355 I0417 19:03:30.056602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rnvwz" condition "Approved" to 2026-04-17 19:03:30.056585 +0000 UTC m=+1076.661331095 I0417 19:03:30.074750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rnvwz" condition "Ready" to 2026-04-17 19:03:30.074742105 +0000 UTC m=+1076.679488160 I0417 19:03:30.099534 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 19:03:30.099525073 +0000 UTC m=+1076.704271128 I0417 19:03:30.122296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 19:03:30.122863 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 19:03:30.122854113 +0000 UTC m=+1076.727600208 I0417 19:03:30.128889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 19:03:30.145360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 19:03:30.146509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 19:03:30.147838 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 19:03:30.147824566 +0000 UTC m=+1076.752570651