I0409 02:06:58.021775 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0409 02:06:58.022037 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0409 02:06:58.022249 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0409 02:06:58.027903 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0409 02:06:58.028808 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0409 02:06:58.028809 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0409 02:06:58.028903 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0409 02:06:58.032474 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0409 02:06:58.048877 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0409 02:06:58.052677 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0409 02:06:58.052716 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0409 02:06:58.053013 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0409 02:06:58.060493 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0409 02:06:58.063861 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0409 02:06:58.066804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0409 02:06:58.069931 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0409 02:06:58.073060 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0409 02:06:58.075691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0409 02:06:58.078302 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0409 02:06:58.084635 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0409 02:06:58.087437 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0409 02:06:58.090051 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0409 02:06:58.090134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0409 02:06:58.092753 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0409 02:06:58.095580 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0409 02:06:58.097989 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0409 02:06:58.099966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0409 02:06:58.102068 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0409 02:06:58.107686 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0409 02:06:58.107931 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0409 02:06:58.112388 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0409 02:06:58.112419 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0409 02:06:58.112531 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0409 02:06:58.115708 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:58.115944 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:58.116065 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:58.116661 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:58.116715 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:58.116736 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:58.116773 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:58.117934 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:58.118487 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:06:58.207061 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:10.785385 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 02:07:10.785367273 +0000 UTC m=+12.802685086 I0409 02:07:11.502561 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 02:07:11.502545979 +0000 UTC m=+13.519863802 I0409 02:07:11.503864 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:11.503921 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 02:07:11.503912957 +0000 UTC m=+13.521230780 E0409 02:07:11.520055 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:07:11.520170 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 02:07:11.520156262 +0000 UTC m=+13.537474075 E0409 02:07:11.520212 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:07:11.521200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:11.521316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:11.521362 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 02:07:11.521351976 +0000 UTC m=+13.538669799 E0409 02:07:11.531715 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0409 02:07:11.531832 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:07:11.531881 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:07:11.531949 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0409 02:07:11.567170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:11.568805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tdwkk" condition "Approved" to 2026-04-09 02:07:11.567656224 +0000 UTC m=+13.584974097 I0409 02:07:11.583562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tdwkk" condition "Ready" to 2026-04-09 02:07:11.583550019 +0000 UTC m=+13.600867812 I0409 02:07:11.606774 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:11.60675722 +0000 UTC m=+13.624075033 I0409 02:07:11.629121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:11.629503 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:11.629495767 +0000 UTC m=+13.646813560 I0409 02:07:11.635798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:11.644678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:11.645136 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:11.645127436 +0000 UTC m=+13.662445219 I0409 02:07:16.533147 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:16.533127224 +0000 UTC m=+18.550445047 I0409 02:07:38.212295 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 02:07:38.212277712 +0000 UTC m=+40.229595505 I0409 02:07:38.212326 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:38.212358 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 02:07:38.212349314 +0000 UTC m=+40.229667127 I0409 02:07:38.222067 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 02:07:38.222052806 +0000 UTC m=+40.239370599 I0409 02:07:38.244251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:38.244347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:38.244378 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 02:07:38.244371109 +0000 UTC m=+40.261688902 I0409 02:07:38.572258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zngck" condition "Approved" to 2026-04-09 02:07:38.572246602 +0000 UTC m=+40.589564385 I0409 02:07:38.601417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zngck" condition "Ready" to 2026-04-09 02:07:38.601403176 +0000 UTC m=+40.618720959 I0409 02:07:38.639897 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:38.63987544 +0000 UTC m=+40.657193253 I0409 02:07:38.656347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:20.051124 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-09 02:09:20.051062375 +0000 UTC m=+142.068380198 I0409 02:09:20.051772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:09:20.051801 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-09 02:09:20.051794715 +0000 UTC m=+142.069112538 E0409 02:09:20.068638 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 02:09:20.068744 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-09 02:09:20.068735944 +0000 UTC m=+142.086053747 I0409 02:09:20.068805 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 02:09:20.071267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:20.071327 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-09 02:09:20.071321685 +0000 UTC m=+142.088639478 E0409 02:09:20.078800 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0409 02:09:20.078933 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 02:09:20.079010 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0409 02:09:20.079134 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0409 02:09:20.085116 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:09:20.085152 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-09 02:09:20.085141937 +0000 UTC m=+142.102459730 I0409 02:09:20.085394 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-09 02:09:20.085385354 +0000 UTC m=+142.102703157 I0409 02:09:20.102638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:20.102753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:09:20.102828 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-09 02:09:20.102816606 +0000 UTC m=+142.120134389 I0409 02:09:20.208687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:20.238409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-96bzz" condition "Approved" to 2026-04-09 02:09:20.238369506 +0000 UTC m=+142.255687339 I0409 02:09:20.267236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-96bzz" condition "Ready" to 2026-04-09 02:09:20.267217494 +0000 UTC m=+142.284535307 I0409 02:09:20.294964 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:20.294946741 +0000 UTC m=+142.312264534 I0409 02:09:20.319330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:20.367272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:20.370763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:20.375123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-7rdgk" condition "Approved" to 2026-04-09 02:09:20.375108358 +0000 UTC m=+142.392426151 I0409 02:09:20.393127 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-7rdgk" condition "Ready" to 2026-04-09 02:09:20.393110866 +0000 UTC m=+142.410428659 I0409 02:09:25.079678 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:25.079661285 +0000 UTC m=+147.096979098 I0409 02:09:25.097990 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-7rdgk" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:25.097969771 +0000 UTC m=+147.115287584 I0409 02:09:25.128681 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:25.12866581 +0000 UTC m=+147.145983603 I0409 02:09:25.146995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:25.147547 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:25.147535112 +0000 UTC m=+147.164852935 I0409 02:09:25.167721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:11:58.364685 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready" to 2026-04-09 02:11:58.364654455 +0000 UTC m=+300.381972248 I0409 02:11:58.366795 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-227.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:11:58.366819 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Issuing" to 2026-04-09 02:11:58.366814375 +0000 UTC m=+300.384132168 I0409 02:11:58.379235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:11:58.379293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-227.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:11:58.379473 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Issuing" to 2026-04-09 02:11:58.379420453 +0000 UTC m=+300.396738246 I0409 02:11:58.532734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-227.nip.io-tls-5tlgn" condition "Approved" to 2026-04-09 02:11:58.532723664 +0000 UTC m=+300.550041467 I0409 02:11:58.549785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-227.nip.io-tls-5tlgn" condition "Ready" to 2026-04-09 02:11:58.549775795 +0000 UTC m=+300.567093578 I0409 02:11:58.571323 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:11:58.571310639 +0000 UTC m=+300.588628432 I0409 02:11:58.589514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:11:58.589959 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:11:58.589952424 +0000 UTC m=+300.607270217 I0409 02:11:58.604817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:08.337126 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 02:13:08.337105539 +0000 UTC m=+370.354423362 I0409 02:13:08.337331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:13:08.337399 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 02:13:08.337384967 +0000 UTC m=+370.354702790 E0409 02:13:08.349519 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:13:08.349558 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-09 02:13:08.349551671 +0000 UTC m=+370.366869464 E0409 02:13:08.349739 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:13:08.352496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:08.352593 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:13:08.352652 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 02:13:08.352646046 +0000 UTC m=+370.369963839 E0409 02:13:08.366378 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0409 02:13:08.366531 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:13:08.366582 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:13:08.366636 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0409 02:13:08.391323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5qbgr" condition "Approved" to 2026-04-09 02:13:08.391299328 +0000 UTC m=+370.408617141 I0409 02:13:08.402620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5qbgr" condition "Ready" to 2026-04-09 02:13:08.402608638 +0000 UTC m=+370.419926431 I0409 02:13:08.423403 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:13:08.423384219 +0000 UTC m=+370.440702012 I0409 02:13:08.442005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:08.442653 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:13:08.442634648 +0000 UTC m=+370.459952461 I0409 02:13:08.456805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:08.457110 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:13:08.457102405 +0000 UTC m=+370.474420198 I0409 02:13:13.367722 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:13:13.367708459 +0000 UTC m=+375.385026282 I0409 02:14:03.641943 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 02:14:03.641914581 +0000 UTC m=+425.659232374 I0409 02:14:03.642513 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 02:14:03.642509517 +0000 UTC m=+425.659827300 I0409 02:14:03.642699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:03.642715 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 02:14:03.642712913 +0000 UTC m=+425.660030696 I0409 02:14:03.642883 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:03.642897 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 02:14:03.642893848 +0000 UTC m=+425.660211641 I0409 02:14:03.656301 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 02:14:03.656288695 +0000 UTC m=+425.673606478 I0409 02:14:03.656569 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:03.656610 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 02:14:03.656581133 +0000 UTC m=+425.673898916 I0409 02:14:03.676901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:03.676994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:03.677033 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 02:14:03.677025864 +0000 UTC m=+425.694343657 I0409 02:14:03.681526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:03.681639 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:03.681693 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 02:14:03.681683141 +0000 UTC m=+425.699000934 I0409 02:14:03.690095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:03.690224 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 02:14:03.690211485 +0000 UTC m=+425.707529278 I0409 02:14:03.827469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ds54w" condition "Approved" to 2026-04-09 02:14:03.827452528 +0000 UTC m=+425.844770351 I0409 02:14:03.847686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ds54w" condition "Ready" to 2026-04-09 02:14:03.847671623 +0000 UTC m=+425.864989436 I0409 02:14:03.848023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:03.876042 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:03.8760275 +0000 UTC m=+425.893345283 I0409 02:14:03.878642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dxvxh" condition "Approved" to 2026-04-09 02:14:03.878628692 +0000 UTC m=+425.895946505 I0409 02:14:03.894820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dxvxh" condition "Ready" to 2026-04-09 02:14:03.894807946 +0000 UTC m=+425.912125739 I0409 02:14:03.897426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:03.941113 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:03.941102075 +0000 UTC m=+425.958419868 I0409 02:14:04.036763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:04.037167 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:04.037159589 +0000 UTC m=+426.054477382 I0409 02:14:04.436242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:04.487949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:04.547366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vxz58" condition "Approved" to 2026-04-09 02:14:04.547349399 +0000 UTC m=+426.564667192 I0409 02:14:04.749098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vxz58" condition "Ready" to 2026-04-09 02:14:04.749081631 +0000 UTC m=+426.766399454 I0409 02:14:05.139423 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:05.139393563 +0000 UTC m=+427.156711376 I0409 02:14:05.236409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:05.237163 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:05.237147983 +0000 UTC m=+427.254465806 I0409 02:14:05.434404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:11.927966 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls" condition "Ready" to 2026-04-09 02:14:11.927947503 +0000 UTC m=+433.945265316 I0409 02:14:11.928065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:11.928182 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls" condition "Issuing" to 2026-04-09 02:14:11.928171309 +0000 UTC m=+433.945489092 I0409 02:14:11.949817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:11.949986 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:11.950040 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls" condition "Issuing" to 2026-04-09 02:14:11.950030739 +0000 UTC m=+433.967348532 I0409 02:14:12.291077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:12.299779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4wkv5-5ctp2" condition "Approved" to 2026-04-09 02:14:12.299769268 +0000 UTC m=+434.317087061 I0409 02:14:12.318236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4wkv5-5ctp2" condition "Ready" to 2026-04-09 02:14:12.318216904 +0000 UTC m=+434.335534717 I0409 02:14:12.350162 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:12.35014868 +0000 UTC m=+434.367466473 I0409 02:14:12.374771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:12.375441 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:12.375433633 +0000 UTC m=+434.392751416 I0409 02:14:12.394643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4wkv5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:33.334693 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 02:14:33.33467628 +0000 UTC m=+455.351994073 I0409 02:14:33.335155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:33.335182 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 02:14:33.335176643 +0000 UTC m=+455.352494436 I0409 02:14:33.358230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:33.358317 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 02:14:33.358309888 +0000 UTC m=+455.375627671 I0409 02:14:33.630453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:33.682581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vlqnd" condition "Approved" to 2026-04-09 02:14:33.682564298 +0000 UTC m=+455.699882121 I0409 02:14:33.707210 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vlqnd" condition "Ready" to 2026-04-09 02:14:33.707198414 +0000 UTC m=+455.724516207 I0409 02:14:33.734203 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:33.734185454 +0000 UTC m=+455.751503267 I0409 02:14:33.749961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:33.750303 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:33.750295176 +0000 UTC m=+455.767612969 I0409 02:14:33.769110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:33.774212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:33.774561 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:33.774552131 +0000 UTC m=+455.791869924 I0409 02:17:51.541298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:17:51.541347 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 02:17:51.541337285 +0000 UTC m=+653.558655068 I0409 02:17:51.542548 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 02:17:51.541245353 +0000 UTC m=+653.558563166 I0409 02:17:51.560264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:17:51.560351 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 02:17:51.560342657 +0000 UTC m=+653.577660450 I0409 02:17:51.721592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:17:51.758563 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-276d8" condition "Approved" to 2026-04-09 02:17:51.758544915 +0000 UTC m=+653.775862708 I0409 02:17:51.778954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-276d8" condition "Ready" to 2026-04-09 02:17:51.778937245 +0000 UTC m=+653.796255038 I0409 02:17:51.806321 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:17:51.806304105 +0000 UTC m=+653.823621888 I0409 02:17:51.830172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:17:51.830467 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:17:51.830459758 +0000 UTC m=+653.847777541 I0409 02:17:51.849086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:17:51.849701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:17:51.850115 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:17:51.850103777 +0000 UTC m=+653.867421570 I0409 02:20:23.916109 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-09 02:20:23.916070909 +0000 UTC m=+805.933388702 I0409 02:20:23.916150 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:20:23.916222 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-09 02:20:23.916212723 +0000 UTC m=+805.933530536 I0409 02:20:23.941572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:20:23.941692 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:20:23.941718 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-09 02:20:23.941710082 +0000 UTC m=+805.959027905 I0409 02:20:24.268559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:20:24.283994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-m6sgq" condition "Approved" to 2026-04-09 02:20:24.283982499 +0000 UTC m=+806.301300292 I0409 02:20:24.302483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-m6sgq" condition "Ready" to 2026-04-09 02:20:24.302464336 +0000 UTC m=+806.319782149 I0409 02:20:24.335564 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:20:24.335546263 +0000 UTC m=+806.352864046 I0409 02:20:24.357957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:20:24.358549 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:20:24.358540724 +0000 UTC m=+806.375858507 I0409 02:20:24.378708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:20:24.380477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:32.394489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:21:32.394553 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-09 02:21:32.394537971 +0000 UTC m=+874.411855794 I0409 02:21:32.394476 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-09 02:21:32.394449859 +0000 UTC m=+874.411767682 I0409 02:21:32.417473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:32.417575 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:21:32.417599 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-09 02:21:32.417590744 +0000 UTC m=+874.434908567 I0409 02:21:32.769105 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-dpr7f" condition "Approved" to 2026-04-09 02:21:32.769088744 +0000 UTC m=+874.786406537 I0409 02:21:32.791381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-dpr7f" condition "Ready" to 2026-04-09 02:21:32.791371315 +0000 UTC m=+874.808689098 I0409 02:21:32.828291 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:21:32.828277147 +0000 UTC m=+874.845594930 I0409 02:21:32.849787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:32.850771 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:21:32.850760494 +0000 UTC m=+874.868078307 I0409 02:21:32.872257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:24:44.542017 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-09 02:24:44.541986069 +0000 UTC m=+1066.559303852 I0409 02:24:44.544699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:24:44.544748 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-09 02:24:44.544738875 +0000 UTC m=+1066.562056658 I0409 02:24:44.571390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:24:44.571506 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-09 02:24:44.571494028 +0000 UTC m=+1066.588811851 I0409 02:24:45.073410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:24:45.114533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7bb7f" condition "Approved" to 2026-04-09 02:24:45.11451554 +0000 UTC m=+1067.131833323 I0409 02:24:45.141557 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7bb7f" condition "Ready" to 2026-04-09 02:24:45.14153838 +0000 UTC m=+1067.158856193 I0409 02:24:45.169126 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:24:45.169108996 +0000 UTC m=+1067.186426809 I0409 02:24:45.191759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"