I0413 21:10:17.329812 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0413 21:10:17.329943 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0413 21:10:17.330032 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0413 21:10:17.336609 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0413 21:10:17.337384 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0413 21:10:17.337472 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0413 21:10:17.337636 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0413 21:10:17.342041 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0413 21:10:17.362320 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0413 21:10:17.362598 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0413 21:10:17.369755 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0413 21:10:17.376041 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0413 21:10:17.379206 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0413 21:10:17.381468 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0413 21:10:17.381547 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0413 21:10:17.383754 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0413 21:10:17.385888 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0413 21:10:17.385906 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0413 21:10:17.385914 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0413 21:10:17.385985 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0413 21:10:17.387814 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0413 21:10:17.394525 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0413 21:10:17.397705 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0413 21:10:17.400619 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0413 21:10:17.400748 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0413 21:10:17.403540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0413 21:10:17.405897 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0413 21:10:17.408007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0413 21:10:17.410131 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0413 21:10:17.412200 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0413 21:10:17.420083 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0413 21:10:17.424231 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0413 21:10:17.426576 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0413 21:10:17.429587 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 21:10:17.430069 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 21:10:17.430096 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 21:10:17.430311 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 21:10:17.452489 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 21:10:17.470565 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 21:10:17.486913 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 21:10:17.503127 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 21:10:17.521641 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 21:10:17.537177 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 21:10:29.490018 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-13 21:10:29.489986424 +0000 UTC m=+12.196241489 I0413 21:10:30.262842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:10:30.262894 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 21:10:30.262881568 +0000 UTC m=+12.969136603 I0413 21:10:30.263384 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-13 21:10:30.26335425 +0000 UTC m=+12.969609375 E0413 21:10:30.282946 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 21:10:30.283064 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-13 21:10:30.283051937 +0000 UTC m=+12.989307002 E0413 21:10:30.283275 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 21:10:30.285620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:10:30.285767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:10:30.285848 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 21:10:30.285818736 +0000 UTC m=+12.992073801 E0413 21:10:30.293001 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0413 21:10:30.293320 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 21:10:30.293466 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 21:10:30.293532 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0413 21:10:30.329373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x69c9" condition "Approved" to 2026-04-13 21:10:30.329353325 +0000 UTC m=+13.035608390 I0413 21:10:30.343968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x69c9" condition "Ready" to 2026-04-13 21:10:30.343956584 +0000 UTC m=+13.050211619 I0413 21:10:30.369815 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:10:30.369800896 +0000 UTC m=+13.076055961 I0413 21:10:30.384387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:10:30.428934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:10:35.293512 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:10:35.293501703 +0000 UTC m=+17.999756738 I0413 21:10:59.424012 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-13 21:10:59.423993494 +0000 UTC m=+42.130248529 I0413 21:10:59.424174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:10:59.424309 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 21:10:59.424297502 +0000 UTC m=+42.130552577 I0413 21:10:59.443788 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-13 21:10:59.443773807 +0000 UTC m=+42.150028842 I0413 21:10:59.451045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:10:59.451121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:10:59.451150 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 21:10:59.451142824 +0000 UTC m=+42.157397859 I0413 21:10:59.709718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:10:59.719908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-crghc" condition "Approved" to 2026-04-13 21:10:59.719897881 +0000 UTC m=+42.426152916 I0413 21:10:59.760572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-crghc" condition "Ready" to 2026-04-13 21:10:59.760560093 +0000 UTC m=+42.466815128 I0413 21:10:59.800556 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:10:59.800541529 +0000 UTC m=+42.506796554 I0413 21:10:59.817676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:10:59.876932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:12:47.466323 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-13 21:12:47.466267918 +0000 UTC m=+150.172522943 I0413 21:12:47.466791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:12:47.466818 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-13 21:12:47.466812852 +0000 UTC m=+150.173067877 E0413 21:12:47.483028 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 21:12:47.483112 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-13 21:12:47.483104298 +0000 UTC m=+150.189359333 I0413 21:12:47.483240 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 21:12:47.485819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:12:47.486050 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-13 21:12:47.486028912 +0000 UTC m=+150.192283977 E0413 21:12:47.494925 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0413 21:12:47.495089 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 21:12:47.495170 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0413 21:12:47.495252 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0413 21:12:47.504597 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-13 21:12:47.504458162 +0000 UTC m=+150.210713247 I0413 21:12:47.504633 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:12:47.504957 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-13 21:12:47.504934784 +0000 UTC m=+150.211189819 I0413 21:12:47.521753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:12:47.521871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:12:47.521958 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-13 21:12:47.521946438 +0000 UTC m=+150.228201493 I0413 21:12:47.670281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-sfk7c" condition "Approved" to 2026-04-13 21:12:47.6702626 +0000 UTC m=+150.376517625 I0413 21:12:47.690337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-sfk7c" condition "Ready" to 2026-04-13 21:12:47.690323852 +0000 UTC m=+150.396578887 I0413 21:12:48.005781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:12:48.047070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-hmwht" condition "Approved" to 2026-04-13 21:12:48.047044509 +0000 UTC m=+150.753299574 I0413 21:12:48.075142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-hmwht" condition "Ready" to 2026-04-13 21:12:48.075130455 +0000 UTC m=+150.781385490 I0413 21:12:48.110987 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:12:48.110972109 +0000 UTC m=+150.817227134 I0413 21:12:48.131921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:12:48.185326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:12:52.496350 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:12:52.496332746 +0000 UTC m=+155.202587801 I0413 21:12:52.515669 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-sfk7c" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:12:52.51565071 +0000 UTC m=+155.221905785 I0413 21:12:52.547335 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:12:52.547324269 +0000 UTC m=+155.253579304 I0413 21:12:52.568089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:12:52.568404 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:12:52.568396928 +0000 UTC m=+155.274651973 I0413 21:12:52.587868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:15:35.289961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:15:35.290047 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Issuing" to 2026-04-13 21:15:35.290009893 +0000 UTC m=+317.996265008 I0413 21:15:35.290327 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready" to 2026-04-13 21:15:35.29030971 +0000 UTC m=+317.996564765 I0413 21:15:35.310281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:15:35.310349 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready" to 2026-04-13 21:15:35.310341221 +0000 UTC m=+318.016596256 I0413 21:15:35.502470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:15:35.534212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-25.nip.io-tls-8zdpd" condition "Approved" to 2026-04-13 21:15:35.534202627 +0000 UTC m=+318.240457662 I0413 21:15:35.553376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-25.nip.io-tls-8zdpd" condition "Ready" to 2026-04-13 21:15:35.553364877 +0000 UTC m=+318.259619942 I0413 21:15:35.584069 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:15:35.58405711 +0000 UTC m=+318.290312155 I0413 21:15:35.603823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:16:48.718867 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 21:16:48.718841605 +0000 UTC m=+391.425096660 I0413 21:16:48.718991 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:16:48.719140 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-13 21:16:48.719126772 +0000 UTC m=+391.425381827 E0413 21:16:48.736330 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 21:16:48.736399 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-13 21:16:48.736388262 +0000 UTC m=+391.442643327 E0413 21:16:48.736467 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 21:16:48.738605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:16:48.738688 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 21:16:48.738678751 +0000 UTC m=+391.444933816 E0413 21:16:48.749348 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0413 21:16:48.749646 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 21:16:48.749736 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 21:16:48.749851 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0413 21:16:48.760970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:16:48.787419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zrcq4" condition "Approved" to 2026-04-13 21:16:48.787372103 +0000 UTC m=+391.493627188 I0413 21:16:48.802528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zrcq4" condition "Ready" to 2026-04-13 21:16:48.80251302 +0000 UTC m=+391.508768055 I0413 21:16:48.825559 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:16:48.825541667 +0000 UTC m=+391.531796732 I0413 21:16:48.844364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:16:48.845302 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:16:48.845293631 +0000 UTC m=+391.551548666 I0413 21:16:48.868654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:16:53.749966 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:16:53.749945148 +0000 UTC m=+396.456200213 I0413 21:17:33.905079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:17:33.905142 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 21:17:33.905135707 +0000 UTC m=+436.611390732 I0413 21:17:33.905602 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 21:17:33.905588528 +0000 UTC m=+436.611843553 I0413 21:17:33.907822 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 21:17:33.907803365 +0000 UTC m=+436.614058390 I0413 21:17:33.908133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:17:33.908156 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-13 21:17:33.908152844 +0000 UTC m=+436.614407869 I0413 21:17:33.911468 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 21:17:33.911452158 +0000 UTC m=+436.617707173 I0413 21:17:33.911548 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:17:33.911582 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-13 21:17:33.911574271 +0000 UTC m=+436.617829296 I0413 21:17:33.953987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:33.954072 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 21:17:33.954065705 +0000 UTC m=+436.660320730 I0413 21:17:33.954138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:33.954225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:17:33.954259 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 21:17:33.9542527 +0000 UTC m=+436.660507725 I0413 21:17:33.954304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:33.957750 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 21:17:33.95773777 +0000 UTC m=+436.663992805 I0413 21:17:34.069188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:34.094263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:34.125339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hfkqt" condition "Approved" to 2026-04-13 21:17:34.125327186 +0000 UTC m=+436.831582221 I0413 21:17:34.127008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dvtqw" condition "Approved" to 2026-04-13 21:17:34.126996039 +0000 UTC m=+436.833251064 I0413 21:17:34.148104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dvtqw" condition "Ready" to 2026-04-13 21:17:34.148092847 +0000 UTC m=+436.854347872 I0413 21:17:34.149538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hfkqt" condition "Ready" to 2026-04-13 21:17:34.149523533 +0000 UTC m=+436.855778568 I0413 21:17:34.178079 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:17:34.178062132 +0000 UTC m=+436.884317227 I0413 21:17:34.178551 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:17:34.178535084 +0000 UTC m=+436.884790119 I0413 21:17:34.223287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:34.224068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:34.224393 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:17:34.224384654 +0000 UTC m=+436.930639679 I0413 21:17:34.344029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:34.344371 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:17:34.344362616 +0000 UTC m=+437.050617661 I0413 21:17:34.643210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:34.697118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pmx29" condition "Approved" to 2026-04-13 21:17:34.697105029 +0000 UTC m=+437.403360054 I0413 21:17:34.913098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pmx29" condition "Ready" to 2026-04-13 21:17:34.91308186 +0000 UTC m=+437.619336925 I0413 21:17:35.402785 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:17:35.402772167 +0000 UTC m=+438.109027202 I0413 21:17:35.493434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:35.493876 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:17:35.493867922 +0000 UTC m=+438.200122947 I0413 21:17:35.693102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:43.023199 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:17:43.023259 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls" condition "Issuing" to 2026-04-13 21:17:43.023248187 +0000 UTC m=+445.729503222 I0413 21:17:43.023440 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls" condition "Ready" to 2026-04-13 21:17:43.023414151 +0000 UTC m=+445.729669216 I0413 21:17:43.042851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:43.042953 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls" condition "Ready" to 2026-04-13 21:17:43.0429433 +0000 UTC m=+445.749198335 I0413 21:17:43.244311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:43.273263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jhwnf-kwgl2" condition "Approved" to 2026-04-13 21:17:43.273247667 +0000 UTC m=+445.979502692 I0413 21:17:43.295781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jhwnf-kwgl2" condition "Ready" to 2026-04-13 21:17:43.295763472 +0000 UTC m=+446.002018497 I0413 21:17:43.324322 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:17:43.324305849 +0000 UTC m=+446.030560884 I0413 21:17:43.349742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:17:43.350901 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:17:43.350891059 +0000 UTC m=+446.057146114 I0413 21:17:43.376265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jhwnf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:18:13.870291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:18:13.870334 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 21:18:13.870328683 +0000 UTC m=+476.576583718 I0413 21:18:13.870294 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-13 21:18:13.870273752 +0000 UTC m=+476.576528787 I0413 21:18:13.889008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:18:13.889153 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:18:13.889185 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 21:18:13.889176355 +0000 UTC m=+476.595431390 I0413 21:18:14.178057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:18:14.195928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-45mb7" condition "Approved" to 2026-04-13 21:18:14.195898402 +0000 UTC m=+476.902153447 I0413 21:18:14.218042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-45mb7" condition "Ready" to 2026-04-13 21:18:14.218032897 +0000 UTC m=+476.924287922 I0413 21:18:14.244037 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:18:14.24402456 +0000 UTC m=+476.950279575 I0413 21:18:14.262200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:18:14.262581 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:18:14.262574034 +0000 UTC m=+476.968829059 I0413 21:18:14.279446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:21:29.589587 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 21:21:29.589523714 +0000 UTC m=+672.295778749 I0413 21:21:29.589624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:21:29.589693 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 21:21:29.589687228 +0000 UTC m=+672.295942263 I0413 21:21:29.607358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:21:29.607573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:21:29.607641 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 21:21:29.607603165 +0000 UTC m=+672.313858220 I0413 21:21:29.867979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:21:29.877451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tc4lx" condition "Approved" to 2026-04-13 21:21:29.877432779 +0000 UTC m=+672.583687814 I0413 21:21:29.901464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tc4lx" condition "Ready" to 2026-04-13 21:21:29.901448741 +0000 UTC m=+672.607703776 I0413 21:21:29.930276 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:21:29.930259274 +0000 UTC m=+672.636514309 I0413 21:21:29.954237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:21:29.954516 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:21:29.954507772 +0000 UTC m=+672.660762797 I0413 21:21:29.961351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:21:29.974064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:21:29.974445 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:21:29.97443265 +0000 UTC m=+672.680687675 I0413 21:24:01.022339 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:24:01.022475 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-13 21:24:01.022432992 +0000 UTC m=+823.728688027 I0413 21:24:01.022719 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-13 21:24:01.022417642 +0000 UTC m=+823.728672677 I0413 21:24:01.042388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:24:01.042515 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-13 21:24:01.042504733 +0000 UTC m=+823.748759798 I0413 21:24:01.209318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:24:01.241751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-d4c9v" condition "Approved" to 2026-04-13 21:24:01.241333786 +0000 UTC m=+823.947588841 I0413 21:24:01.261227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-d4c9v" condition "Ready" to 2026-04-13 21:24:01.261204083 +0000 UTC m=+823.967459148 I0413 21:24:01.295980 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:24:01.295963098 +0000 UTC m=+824.002218133 I0413 21:24:01.322774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:24:01.324144 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:24:01.324123395 +0000 UTC m=+824.030378460 I0413 21:24:01.348030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:24:01.348428 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:24:01.348415763 +0000 UTC m=+824.054670798 I0413 21:24:01.351196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:25:12.368306 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-13 21:25:12.368276513 +0000 UTC m=+895.074531628 I0413 21:25:12.368369 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:25:12.368607 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-13 21:25:12.368597031 +0000 UTC m=+895.074852066 I0413 21:25:12.394408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:25:12.394494 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:25:12.394518 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-13 21:25:12.39450888 +0000 UTC m=+895.100763915 I0413 21:25:12.783393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xd92m" condition "Approved" to 2026-04-13 21:25:12.783374314 +0000 UTC m=+895.489629339 I0413 21:25:12.806583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xd92m" condition "Ready" to 2026-04-13 21:25:12.806564554 +0000 UTC m=+895.512819589 I0413 21:25:12.838943 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:25:12.838923608 +0000 UTC m=+895.545178643 I0413 21:25:12.856901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:25:12.857373 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:25:12.857364998 +0000 UTC m=+895.563620033 I0413 21:25:12.878184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:28:16.881135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:28:16.881243 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-13 21:28:16.881226742 +0000 UTC m=+1079.587481817 I0413 21:28:16.881564 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-13 21:28:16.88153643 +0000 UTC m=+1079.587791485 I0413 21:28:16.904241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:28:16.904352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 21:28:16.904382 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-13 21:28:16.904374102 +0000 UTC m=+1079.610629167 I0413 21:28:17.314722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-ht7ht" condition "Approved" to 2026-04-13 21:28:17.314704418 +0000 UTC m=+1080.020959463 I0413 21:28:17.331482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-ht7ht" condition "Ready" to 2026-04-13 21:28:17.331476235 +0000 UTC m=+1080.037731260 I0413 21:28:17.364300 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:28:17.364279559 +0000 UTC m=+1080.070534594 I0413 21:28:17.388923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:28:17.389521 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:28:17.389510151 +0000 UTC m=+1080.095765206 I0413 21:28:17.396933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:28:17.412130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 21:28:17.412499 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 21:28:17.412486477 +0000 UTC m=+1080.118741512 I0413 21:28:17.415420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"