I0317 21:55:21.211325 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0317 21:55:21.211522 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0317 21:55:21.211623 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0317 21:55:21.217880 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0317 21:55:21.218390 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0317 21:55:21.218470 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0317 21:55:21.218541 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0317 21:55:21.220815 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0317 21:55:21.237506 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0317 21:55:21.239758 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0317 21:55:21.241483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0317 21:55:21.247405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0317 21:55:21.251191 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0317 21:55:21.251320 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0317 21:55:21.253895 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0317 21:55:21.256342 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0317 21:55:21.259754 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0317 21:55:21.263005 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0317 21:55:21.269018 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0317 21:55:21.269094 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0317 21:55:21.269126 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0317 21:55:21.273419 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0317 21:55:21.276379 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0317 21:55:21.278800 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0317 21:55:21.280728 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0317 21:55:21.282892 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0317 21:55:21.284692 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0317 21:55:21.284719 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0317 21:55:21.284726 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0317 21:55:21.284780 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0317 21:55:21.286706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0317 21:55:21.288643 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0317 21:55:21.295792 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0317 21:55:21.298956 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 21:55:21.299994 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 21:55:21.300651 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 21:55:21.319253 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 21:55:21.330923 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 21:55:21.334800 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 21:55:21.353842 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 21:55:21.372111 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 21:55:21.387472 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 21:55:21.409761 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 21:55:32.880250 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-17 21:55:32.880230373 +0000 UTC m=+11.702051015 I0317 21:55:33.642130 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 21:55:33.642230 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-17 21:55:33.642214921 +0000 UTC m=+12.464035593 I0317 21:55:33.643562 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-17 21:55:33.643551752 +0000 UTC m=+12.465372424 E0317 21:55:33.658874 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0317 21:55:33.658954 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-17 21:55:33.658944226 +0000 UTC m=+12.480764868 E0317 21:55:33.658982 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0317 21:55:33.660362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:55:33.660547 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-17 21:55:33.660534963 +0000 UTC m=+12.482355635 E0317 21:55:33.674349 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0317 21:55:33.674534 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0317 21:55:33.674588 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0317 21:55:33.674641 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0317 21:55:33.681159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:55:33.681263 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-17 21:55:33.68125106 +0000 UTC m=+12.503071732 I0317 21:55:33.687959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-782z5" condition "Approved" to 2026-03-17 21:55:33.687949765 +0000 UTC m=+12.509770407 I0317 21:55:33.692290 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-17 21:55:33.692277044 +0000 UTC m=+12.514097696 I0317 21:55:33.700249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:55:33.700704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-782z5" condition "Ready" to 2026-03-17 21:55:33.700684818 +0000 UTC m=+12.522505490 I0317 21:55:33.725305 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 21:55:33.725290555 +0000 UTC m=+12.547111197 I0317 21:55:33.746393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:55:33.796648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:55:38.675010 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 21:55:38.674994089 +0000 UTC m=+17.496814751 I0317 21:55:59.545734 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-17 21:55:59.545700161 +0000 UTC m=+38.367520823 I0317 21:55:59.545864 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 21:55:59.545986 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-17 21:55:59.545970777 +0000 UTC m=+38.367791449 I0317 21:55:59.570735 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-17 21:55:59.570680566 +0000 UTC m=+38.392501218 I0317 21:55:59.602592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:55:59.602706 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-17 21:55:59.602697764 +0000 UTC m=+38.424518416 I0317 21:55:59.803251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:55:59.859158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rmwsd" condition "Approved" to 2026-03-17 21:55:59.859142343 +0000 UTC m=+38.680963005 I0317 21:55:59.898713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rmwsd" condition "Ready" to 2026-03-17 21:55:59.898700885 +0000 UTC m=+38.720521527 I0317 21:55:59.939334 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 21:55:59.939320851 +0000 UTC m=+38.761141493 I0317 21:55:59.966943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:57:48.940084 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 21:57:48.940173 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-17 21:57:48.940157818 +0000 UTC m=+147.761978490 I0317 21:57:48.940124 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-17 21:57:48.940072367 +0000 UTC m=+147.761893009 I0317 21:57:48.958741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:57:48.958850 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-17 21:57:48.958838989 +0000 UTC m=+147.780659631 E0317 21:57:48.963977 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0317 21:57:48.964060 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-17 21:57:48.964024599 +0000 UTC m=+147.785845241 I0317 21:57:48.964156 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0317 21:57:48.974587 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0317 21:57:48.975271 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0317 21:57:48.975341 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0317 21:57:48.975550 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0317 21:57:48.976982 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-17 21:57:48.976970546 +0000 UTC m=+147.798791198 I0317 21:57:48.977374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 21:57:48.977475 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-17 21:57:48.977460948 +0000 UTC m=+147.799281590 I0317 21:57:48.992470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:57:48.992606 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-17 21:57:48.992592597 +0000 UTC m=+147.814413269 I0317 21:57:49.169641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:57:49.207968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-qrxmq" condition "Approved" to 2026-03-17 21:57:49.207943949 +0000 UTC m=+148.029764611 I0317 21:57:49.237144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-qrxmq" condition "Ready" to 2026-03-17 21:57:49.237118701 +0000 UTC m=+148.058939343 I0317 21:57:49.249677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:57:49.263642 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 21:57:49.263614322 +0000 UTC m=+148.085434994 I0317 21:57:49.309084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:57:49.310081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-gdkxd" condition "Approved" to 2026-03-17 21:57:49.310071622 +0000 UTC m=+148.131892254 I0317 21:57:49.329654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-gdkxd" condition "Ready" to 2026-03-17 21:57:49.329637003 +0000 UTC m=+148.151457675 I0317 21:57:53.975301 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 21:57:53.975284231 +0000 UTC m=+152.797104903 I0317 21:57:53.997118 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-gdkxd" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 21:57:53.997088352 +0000 UTC m=+152.818908984 I0317 21:57:54.030083 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 21:57:54.030036192 +0000 UTC m=+152.851856854 I0317 21:57:54.052559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:57:54.052944 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 21:57:54.052933349 +0000 UTC m=+152.874753991 I0317 21:57:54.073917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:57:54.074111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0317 21:57:54.074451 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 21:57:54.074444925 +0000 UTC m=+152.896265567 I0317 22:00:37.056005 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready" to 2026-03-17 22:00:37.055962731 +0000 UTC m=+315.877783393 I0317 22:00:37.056752 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:00:37.056788 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-03-17 22:00:37.056781231 +0000 UTC m=+315.878601903 I0317 22:00:37.075081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:00:37.075179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:00:37.075217 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-03-17 22:00:37.0752048 +0000 UTC m=+315.897025502 I0317 22:00:37.686800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-7s8bk" condition "Approved" to 2026-03-17 22:00:37.68678807 +0000 UTC m=+316.508608712 I0317 22:00:37.712206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-7s8bk" condition "Ready" to 2026-03-17 22:00:37.712195159 +0000 UTC m=+316.534015791 I0317 22:00:37.740052 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:00:37.740026356 +0000 UTC m=+316.561847018 I0317 22:00:37.756852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:00:37.757392 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:00:37.757381619 +0000 UTC m=+316.579202281 I0317 22:00:37.779015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:51.032795 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:01:51.032898 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-17 22:01:51.032886895 +0000 UTC m=+389.854707567 I0317 22:01:51.033064 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-17 22:01:51.0330425 +0000 UTC m=+389.854863142 E0317 22:01:51.047358 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0317 22:01:51.047420 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-17 22:01:51.047405657 +0000 UTC m=+389.869226319 E0317 22:01:51.047665 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0317 22:01:51.052199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:51.052373 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-17 22:01:51.052361846 +0000 UTC m=+389.874182488 E0317 22:01:51.058429 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0317 22:01:51.058553 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0317 22:01:51.058591 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0317 22:01:51.058633 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0317 22:01:51.067759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:51.067843 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-17 22:01:51.067834281 +0000 UTC m=+389.889654923 I0317 22:01:51.072450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:51.075823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wcb7q" condition "Approved" to 2026-03-17 22:01:51.075810724 +0000 UTC m=+389.897631386 I0317 22:01:51.080228 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-17 22:01:51.08021226 +0000 UTC m=+389.902032902 I0317 22:01:51.089684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wcb7q" condition "Ready" to 2026-03-17 22:01:51.08967129 +0000 UTC m=+389.911491942 I0317 22:01:51.090013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:51.110907 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:01:51.110897273 +0000 UTC m=+389.932717915 I0317 22:01:51.130149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:51.130572 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:01:51.130562769 +0000 UTC m=+389.952383431 I0317 22:01:51.150359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:56.059910 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:01:56.059894503 +0000 UTC m=+394.881715175 I0317 22:02:37.391760 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:02:37.391969 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-17 22:02:37.391955446 +0000 UTC m=+436.213776068 I0317 22:02:37.392002 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-17 22:02:37.391840923 +0000 UTC m=+436.213661565 I0317 22:02:37.401968 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:02:37.402027 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-17 22:02:37.402015888 +0000 UTC m=+436.223836540 I0317 22:02:37.405108 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-17 22:02:37.405092122 +0000 UTC m=+436.226912794 I0317 22:02:37.416692 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-17 22:02:37.41667823 +0000 UTC m=+436.238498862 I0317 22:02:37.416870 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:02:37.416920 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-17 22:02:37.416915485 +0000 UTC m=+436.238736117 I0317 22:02:37.432461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:37.432556 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-17 22:02:37.432547542 +0000 UTC m=+436.254368174 I0317 22:02:37.432886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:37.433160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:02:37.433177 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-17 22:02:37.433173797 +0000 UTC m=+436.254994429 I0317 22:02:37.458644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:37.458806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:02:37.458858 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-17 22:02:37.458848523 +0000 UTC m=+436.280669165 I0317 22:02:37.554370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:37.589525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-r6gwl" condition "Approved" to 2026-03-17 22:02:37.589513923 +0000 UTC m=+436.411334575 I0317 22:02:37.611747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:37.612589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-r6gwl" condition "Ready" to 2026-03-17 22:02:37.612572906 +0000 UTC m=+436.434393548 I0317 22:02:37.620497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8qxkh" condition "Approved" to 2026-03-17 22:02:37.620472836 +0000 UTC m=+436.442293478 I0317 22:02:37.641198 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8qxkh" condition "Ready" to 2026-03-17 22:02:37.641182444 +0000 UTC m=+436.463003086 I0317 22:02:37.649887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:37.653038 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:02:37.653017287 +0000 UTC m=+436.474837929 I0317 22:02:37.666292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gsd2d" condition "Approved" to 2026-03-17 22:02:37.666277536 +0000 UTC m=+436.488098168 I0317 22:02:37.682468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:37.682896 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:02:37.682886526 +0000 UTC m=+436.504707168 I0317 22:02:37.984843 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:02:37.984825979 +0000 UTC m=+436.806646621 I0317 22:02:38.043167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gsd2d" condition "Ready" to 2026-03-17 22:02:38.043153851 +0000 UTC m=+436.864974513 I0317 22:02:38.435145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:38.436366 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:02:38.436356767 +0000 UTC m=+437.258177399 I0317 22:02:38.617530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:38.638051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:38.887820 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:02:38.887783212 +0000 UTC m=+437.709603854 I0317 22:02:38.984659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:39.035493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:39.135586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:39.136068 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:02:39.136057807 +0000 UTC m=+437.957878449 I0317 22:02:39.384569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:46.312762 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f474l-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:02:46.312874 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f474l-tls" condition "Issuing" to 2026-03-17 22:02:46.312867494 +0000 UTC m=+445.134688136 I0317 22:02:46.312816 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f474l-tls" condition "Ready" to 2026-03-17 22:02:46.312801443 +0000 UTC m=+445.134622085 I0317 22:02:46.331941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f474l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f474l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:46.332114 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f474l-tls" condition "Ready" to 2026-03-17 22:02:46.332102507 +0000 UTC m=+445.153923139 I0317 22:02:46.488891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f474l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f474l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:46.520693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f474l-8s7xf" condition "Approved" to 2026-03-17 22:02:46.520670887 +0000 UTC m=+445.342491529 I0317 22:02:46.542936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f474l-8s7xf" condition "Ready" to 2026-03-17 22:02:46.542918571 +0000 UTC m=+445.364739213 I0317 22:02:46.577606 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f474l-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:02:46.577584253 +0000 UTC m=+445.399404895 I0317 22:02:46.599327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f474l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f474l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:46.600234 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f474l-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:02:46.600220467 +0000 UTC m=+445.422041099 I0317 22:02:46.619841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f474l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f474l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:02:46.621013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f474l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f474l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:03:09.636671 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-17 22:03:09.636649039 +0000 UTC m=+468.458469711 I0317 22:03:09.636728 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:03:09.636753 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-17 22:03:09.636748362 +0000 UTC m=+468.458568994 I0317 22:03:09.665612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:03:09.665763 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-17 22:03:09.665750159 +0000 UTC m=+468.487570831 I0317 22:03:10.063033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:03:10.098583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vdhk8" condition "Approved" to 2026-03-17 22:03:10.098569496 +0000 UTC m=+468.920390128 I0317 22:03:10.130979 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vdhk8" condition "Ready" to 2026-03-17 22:03:10.130963625 +0000 UTC m=+468.952784287 I0317 22:03:10.162126 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:03:10.162107953 +0000 UTC m=+468.983928585 I0317 22:03:10.186833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:03:10.187274 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:03:10.187265658 +0000 UTC m=+469.009086290 I0317 22:03:10.209641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:06:47.176687 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-17 22:06:47.17666613 +0000 UTC m=+685.998486802 I0317 22:06:47.177090 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:06:47.177174 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-17 22:06:47.177163502 +0000 UTC m=+685.998984144 I0317 22:06:47.219466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:06:47.219564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:06:47.219587 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-17 22:06:47.219580219 +0000 UTC m=+686.041400851 I0317 22:06:47.371233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-24h92" condition "Approved" to 2026-03-17 22:06:47.371215034 +0000 UTC m=+686.193035726 I0317 22:06:47.391584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-24h92" condition "Ready" to 2026-03-17 22:06:47.391568882 +0000 UTC m=+686.213389524 I0317 22:06:47.429210 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:06:47.429189242 +0000 UTC m=+686.251009914 I0317 22:06:47.463245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:06:47.463616 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:06:47.463609687 +0000 UTC m=+686.285430319 I0317 22:06:47.483987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:06:47.484358 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:06:47.484348393 +0000 UTC m=+686.306169045 I0317 22:09:26.479781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:09:26.479905 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-17 22:09:26.479894798 +0000 UTC m=+845.301715470 I0317 22:09:26.479765 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-17 22:09:26.479731374 +0000 UTC m=+845.301552036 I0317 22:09:26.500234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:09:26.500408 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-17 22:09:26.500390788 +0000 UTC m=+845.322211450 I0317 22:09:26.629602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:09:26.665538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-fthfw" condition "Approved" to 2026-03-17 22:09:26.665517791 +0000 UTC m=+845.487338443 I0317 22:09:26.688838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-fthfw" condition "Ready" to 2026-03-17 22:09:26.688820008 +0000 UTC m=+845.510640660 I0317 22:09:26.720982 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:09:26.720965205 +0000 UTC m=+845.542785857 I0317 22:09:26.748504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:09:26.748938 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:09:26.748931473 +0000 UTC m=+845.570752115 I0317 22:09:26.777890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:09:26.778266 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:09:26.778256684 +0000 UTC m=+845.600077316 I0317 22:09:26.800429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:10:37.010098 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-17 22:10:37.010052378 +0000 UTC m=+915.831873050 I0317 22:10:37.010155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:10:37.010202 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-17 22:10:37.010189871 +0000 UTC m=+915.832010503 I0317 22:10:37.026812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:10:37.026902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:10:37.026935 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-17 22:10:37.026924721 +0000 UTC m=+915.848745353 I0317 22:10:37.166272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:10:37.187135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rd4zm" condition "Approved" to 2026-03-17 22:10:37.187120537 +0000 UTC m=+916.008941179 I0317 22:10:37.212650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rd4zm" condition "Ready" to 2026-03-17 22:10:37.212635917 +0000 UTC m=+916.034456569 I0317 22:10:37.247576 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:10:37.247558561 +0000 UTC m=+916.069379203 I0317 22:10:37.272216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:13:56.451368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:13:56.451465 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-17 22:13:56.451451145 +0000 UTC m=+1115.273271817 I0317 22:13:56.451423 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-17 22:13:56.451397734 +0000 UTC m=+1115.273218406 I0317 22:13:56.470651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:13:56.470753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:13:56.470778 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-17 22:13:56.470770346 +0000 UTC m=+1115.292590988 I0317 22:13:56.608630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rc4d4" condition "Approved" to 2026-03-17 22:13:56.608612473 +0000 UTC m=+1115.430433105 I0317 22:13:56.629556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rc4d4" condition "Ready" to 2026-03-17 22:13:56.629535532 +0000 UTC m=+1115.451356174 I0317 22:13:56.661506 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:13:56.661488604 +0000 UTC m=+1115.483309256 I0317 22:13:56.685051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:13:56.685527 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:13:56.685515837 +0000 UTC m=+1115.507336479 I0317 22:13:56.707648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:13:56.708817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"