I0422 16:29:23.292305 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0422 16:29:23.292480 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0422 16:29:23.292602 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0422 16:29:23.300525 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0422 16:29:23.301253 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0422 16:29:23.301382 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0422 16:29:23.301409 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0422 16:29:23.303619 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0422 16:29:23.318749 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0422 16:29:23.322462 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0422 16:29:23.329978 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0422 16:29:23.333388 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0422 16:29:23.336412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0422 16:29:23.338726 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0422 16:29:23.338895 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0422 16:29:23.340728 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0422 16:29:23.340754 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0422 16:29:23.342960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0422 16:29:23.347705 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0422 16:29:23.347772 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0422 16:29:23.347929 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0422 16:29:23.353790 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0422 16:29:23.356716 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0422 16:29:23.360540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0422 16:29:23.363401 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0422 16:29:23.365227 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0422 16:29:23.365252 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0422 16:29:23.365358 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0422 16:29:23.367154 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0422 16:29:23.368865 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0422 16:29:23.371471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0422 16:29:23.376780 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0422 16:29:23.380733 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0422 16:29:23.384017 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:29:23.384291 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:29:23.384641 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:29:23.398672 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:29:23.423274 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:29:23.430384 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:29:23.450322 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:29:23.471821 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:29:23.475611 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:29:23.487664 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 16:29:35.970974 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-22 16:29:35.970959346 +0000 UTC m=+12.719477934 I0422 16:29:36.688908 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:29:36.688999 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-22 16:29:36.688991235 +0000 UTC m=+13.437509843 I0422 16:29:36.688921 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 16:29:36.688904582 +0000 UTC m=+13.437423200 E0422 16:29:36.704863 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 16:29:36.704977 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-22 16:29:36.704965472 +0000 UTC m=+13.453484100 E0422 16:29:36.705014 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 16:29:36.711266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:29:36.711400 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 16:29:36.711388497 +0000 UTC m=+13.459907095 E0422 16:29:36.714692 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0422 16:29:36.714839 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 16:29:36.714895 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 16:29:36.714936 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0422 16:29:36.727249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:29:36.727354 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 16:29:36.727344484 +0000 UTC m=+13.475863082 I0422 16:29:36.735267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dwr4g" condition "Approved" to 2026-04-22 16:29:36.735250602 +0000 UTC m=+13.483769210 I0422 16:29:36.756916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dwr4g" condition "Ready" to 2026-04-22 16:29:36.756901713 +0000 UTC m=+13.505420311 I0422 16:29:36.789089 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:29:36.789076976 +0000 UTC m=+13.537595564 I0422 16:29:36.809311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:29:36.809687 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:29:36.809679648 +0000 UTC m=+13.558198246 I0422 16:29:36.830701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:29:41.715717 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:29:41.715679712 +0000 UTC m=+18.464198340 I0422 16:30:02.449417 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:30:02.449427 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-22 16:30:02.449396317 +0000 UTC m=+39.197914915 I0422 16:30:02.449475 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-22 16:30:02.449463718 +0000 UTC m=+39.197982316 I0422 16:30:02.468889 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-22 16:30:02.468872621 +0000 UTC m=+39.217391229 I0422 16:30:02.476297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:30:02.476425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:30:02.476464 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-22 16:30:02.476455101 +0000 UTC m=+39.224973699 I0422 16:30:02.603096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:30:02.612560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gkt2n" condition "Approved" to 2026-04-22 16:30:02.612481165 +0000 UTC m=+39.360999783 I0422 16:30:02.646538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gkt2n" condition "Ready" to 2026-04-22 16:30:02.646522112 +0000 UTC m=+39.395040720 I0422 16:30:02.680197 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:30:02.680173048 +0000 UTC m=+39.428691646 I0422 16:30:02.704233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:30:02.756606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:31:45.320322 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:31:45.320326 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-22 16:31:45.320295204 +0000 UTC m=+142.068813802 I0422 16:31:45.320395 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-22 16:31:45.320379516 +0000 UTC m=+142.068898144 E0422 16:31:45.335861 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0422 16:31:45.335991 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-22 16:31:45.335979476 +0000 UTC m=+142.084498084 I0422 16:31:45.336095 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0422 16:31:45.339957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:31:45.340114 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:31:45.340153 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-22 16:31:45.340144147 +0000 UTC m=+142.088662745 E0422 16:31:45.349206 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0422 16:31:45.349333 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0422 16:31:45.349375 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0422 16:31:45.349421 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0422 16:31:45.349624 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-22 16:31:45.34960705 +0000 UTC m=+142.098125648 I0422 16:31:45.349861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:31:45.349887 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-22 16:31:45.349882238 +0000 UTC m=+142.098400846 I0422 16:31:45.369681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:31:45.369780 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-22 16:31:45.369771233 +0000 UTC m=+142.118289831 I0422 16:31:45.429343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:31:45.437337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-rc5vh" condition "Approved" to 2026-04-22 16:31:45.437327535 +0000 UTC m=+142.185846133 I0422 16:31:45.469189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-rc5vh" condition "Ready" to 2026-04-22 16:31:45.469171726 +0000 UTC m=+142.217690344 I0422 16:31:45.492952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:31:45.498387 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:31:45.498376549 +0000 UTC m=+142.246895147 I0422 16:31:45.515191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:31:45.515660 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:31:45.515650618 +0000 UTC m=+142.264169216 I0422 16:31:45.525642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-48pdz" condition "Approved" to 2026-04-22 16:31:45.525628487 +0000 UTC m=+142.274147105 I0422 16:31:45.531878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:31:45.542478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-48pdz" condition "Ready" to 2026-04-22 16:31:45.542462804 +0000 UTC m=+142.290981412 I0422 16:31:50.350340 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:31:50.35032449 +0000 UTC m=+147.098843088 I0422 16:31:50.367782 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-48pdz" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:31:50.367759763 +0000 UTC m=+147.116278361 I0422 16:31:50.399384 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:31:50.399365368 +0000 UTC m=+147.147883966 I0422 16:31:50.422030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:31:50.422664 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:31:50.42265036 +0000 UTC m=+147.171168988 I0422 16:31:50.429057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:31:50.448928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:34:27.725056 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-112.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:34:27.725506 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-112.nip.io-tls" condition "Ready" to 2026-04-22 16:34:27.724903129 +0000 UTC m=+304.473421747 I0422 16:34:27.725719 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-112.nip.io-tls" condition "Issuing" to 2026-04-22 16:34:27.725114525 +0000 UTC m=+304.473633153 I0422 16:34:27.741239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-112.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-112.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:34:27.741316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-112.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:34:27.741334 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-112.nip.io-tls" condition "Issuing" to 2026-04-22 16:34:27.741327599 +0000 UTC m=+304.489846187 I0422 16:34:28.015997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-112.nip.io-tls-h4vwh" condition "Approved" to 2026-04-22 16:34:28.01597271 +0000 UTC m=+304.764491338 I0422 16:34:28.042535 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-112.nip.io-tls-h4vwh" condition "Ready" to 2026-04-22 16:34:28.042523662 +0000 UTC m=+304.791042260 I0422 16:34:28.073876 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-112.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:34:28.073860041 +0000 UTC m=+304.822378629 I0422 16:34:28.102215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-112.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-112.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:34:28.102934 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-112.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:34:28.102926085 +0000 UTC m=+304.851444693 I0422 16:34:28.112072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-112.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-112.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:34:28.130974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-112.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-112.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:35:39.778033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:35:39.778070 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-22 16:35:39.778062614 +0000 UTC m=+376.526581232 I0422 16:35:39.778243 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-22 16:35:39.778214418 +0000 UTC m=+376.526733036 I0422 16:35:39.791209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:35:39.791393 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-22 16:35:39.791383156 +0000 UTC m=+376.539901764 E0422 16:35:39.794621 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 16:35:39.794696 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-22 16:35:39.794683571 +0000 UTC m=+376.543202199 E0422 16:35:39.794782 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 16:35:39.805850 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0422 16:35:39.805956 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 16:35:39.805980 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 16:35:39.806010 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0422 16:35:39.810426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:35:39.832281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4pt2l" condition "Approved" to 2026-04-22 16:35:39.832258478 +0000 UTC m=+376.580777076 I0422 16:35:39.846515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4pt2l" condition "Ready" to 2026-04-22 16:35:39.846493946 +0000 UTC m=+376.595012574 I0422 16:35:39.870068 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:35:39.870052133 +0000 UTC m=+376.618570731 I0422 16:35:39.888913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:35:39.889689 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:35:39.889674626 +0000 UTC m=+376.638193244 I0422 16:35:39.914083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:35:39.914324 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:35:39.914313233 +0000 UTC m=+376.662831841 I0422 16:35:44.807303 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:35:44.807286873 +0000 UTC m=+381.555805501 I0422 16:36:25.140229 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-22 16:36:25.140156366 +0000 UTC m=+421.888674964 I0422 16:36:25.140560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:25.140644 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-22 16:36:25.14063924 +0000 UTC m=+421.889157828 I0422 16:36:25.140997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:25.140999 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-22 16:36:25.140982109 +0000 UTC m=+421.889500727 I0422 16:36:25.141043 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-22 16:36:25.141037151 +0000 UTC m=+421.889555749 I0422 16:36:25.141045 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-22 16:36:25.141040661 +0000 UTC m=+421.889559249 I0422 16:36:25.150397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:25.150521 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-22 16:36:25.150512053 +0000 UTC m=+421.899030651 I0422 16:36:25.191748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:25.191845 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:25.191911 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-22 16:36:25.191902102 +0000 UTC m=+421.940420700 I0422 16:36:25.196037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:25.196136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:25.196188 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-22 16:36:25.196180826 +0000 UTC m=+421.944699424 I0422 16:36:25.209079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:25.212742 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-22 16:36:25.212705341 +0000 UTC m=+421.961223949 I0422 16:36:25.395232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:25.402040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z6dpg" condition "Approved" to 2026-04-22 16:36:25.40201768 +0000 UTC m=+422.150536308 I0422 16:36:25.421984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z6dpg" condition "Ready" to 2026-04-22 16:36:25.421959293 +0000 UTC m=+422.170477881 I0422 16:36:25.456739 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:25.456719872 +0000 UTC m=+422.205238490 I0422 16:36:25.494920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:25.495419 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:25.495411715 +0000 UTC m=+422.243930303 I0422 16:36:25.533199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0422 16:36:25.538111 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-msmj8\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0422 16:36:25.566772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:25.573937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mr74g" condition "Approved" to 2026-04-22 16:36:25.573920691 +0000 UTC m=+422.322439299 I0422 16:36:25.591002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mr74g" condition "Ready" to 2026-04-22 16:36:25.590990351 +0000 UTC m=+422.339508949 I0422 16:36:25.600291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:25.731114 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:25.731086257 +0000 UTC m=+422.479604845 I0422 16:36:25.790994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8x9tr" condition "Approved" to 2026-04-22 16:36:25.790977348 +0000 UTC m=+422.539495946 I0422 16:36:25.882633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:25.883379 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:25.883365162 +0000 UTC m=+422.631883760 I0422 16:36:25.995718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8x9tr" condition "Ready" to 2026-04-22 16:36:25.99568998 +0000 UTC m=+422.744208618 I0422 16:36:26.583480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:26.634045 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:26.634026413 +0000 UTC m=+423.382545011 I0422 16:36:26.785223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:26.785572 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:26.785565908 +0000 UTC m=+423.534084496 I0422 16:36:27.037764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:27.083614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:33.211341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:33.211497 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" condition "Issuing" to 2026-04-22 16:36:33.211482044 +0000 UTC m=+429.960000672 I0422 16:36:33.211667 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" condition "Ready" to 2026-04-22 16:36:33.211648349 +0000 UTC m=+429.960166947 I0422 16:36:33.225880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:33.226026 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" condition "Ready" to 2026-04-22 16:36:33.226016912 +0000 UTC m=+429.974535510 I0422 16:36:33.316965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:33.349347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hrv9q-26zb6" condition "Approved" to 2026-04-22 16:36:33.349333186 +0000 UTC m=+430.097851784 I0422 16:36:33.379901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hrv9q-26zb6" condition "Ready" to 2026-04-22 16:36:33.379888094 +0000 UTC m=+430.128406702 I0422 16:36:33.411126 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:33.411107751 +0000 UTC m=+430.159626339 I0422 16:36:33.439412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:33.439854 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:33.439844266 +0000 UTC m=+430.188362854 I0422 16:36:33.444198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:33.459923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:33.463167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:33.463653 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hrv9q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:33.463643031 +0000 UTC m=+430.212161639 I0422 16:36:56.203020 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-22 16:36:56.203003382 +0000 UTC m=+452.951521980 I0422 16:36:56.203104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:56.203128 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-22 16:36:56.203121676 +0000 UTC m=+452.951640264 I0422 16:36:56.233004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:56.233164 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:36:56.233205 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-22 16:36:56.233197641 +0000 UTC m=+452.981716229 I0422 16:36:56.621138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qp7tl" condition "Approved" to 2026-04-22 16:36:56.621124258 +0000 UTC m=+453.369642856 I0422 16:36:56.638852 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qp7tl" condition "Ready" to 2026-04-22 16:36:56.638835187 +0000 UTC m=+453.387353815 I0422 16:36:56.675906 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:56.675887332 +0000 UTC m=+453.424405960 I0422 16:36:56.691928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:36:56.692638 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:36:56.692618683 +0000 UTC m=+453.441137321 I0422 16:36:56.714727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:40:15.504430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:40:15.504593 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-22 16:40:15.50456928 +0000 UTC m=+652.253087878 I0422 16:40:15.504776 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-22 16:40:15.50454611 +0000 UTC m=+652.253064698 I0422 16:40:15.522455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:40:15.522576 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-22 16:40:15.522565473 +0000 UTC m=+652.271084101 I0422 16:40:15.652165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:40:15.685241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j5xk7" condition "Approved" to 2026-04-22 16:40:15.685231301 +0000 UTC m=+652.433749889 I0422 16:40:15.702976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j5xk7" condition "Ready" to 2026-04-22 16:40:15.702957797 +0000 UTC m=+652.451476415 I0422 16:40:15.730189 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:40:15.730177927 +0000 UTC m=+652.478696515 I0422 16:40:15.753346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:42:45.828585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:42:45.828711 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-22 16:42:45.828633938 +0000 UTC m=+802.577152566 I0422 16:42:45.828797 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-22 16:42:45.828762032 +0000 UTC m=+802.577280650 I0422 16:42:45.849932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:42:45.850002 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-22 16:42:45.849995555 +0000 UTC m=+802.598514153 I0422 16:42:45.974315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:42:46.015030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-ds2cc" condition "Approved" to 2026-04-22 16:42:46.015017565 +0000 UTC m=+802.763536183 I0422 16:42:46.034469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-ds2cc" condition "Ready" to 2026-04-22 16:42:46.034461457 +0000 UTC m=+802.782980045 I0422 16:42:46.068087 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:42:46.067943175 +0000 UTC m=+802.816461763 I0422 16:42:46.093840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:43:49.156114 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:43:49.156169 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-22 16:43:49.156148468 +0000 UTC m=+865.904667066 I0422 16:43:49.156367 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-22 16:43:49.156351744 +0000 UTC m=+865.904870342 I0422 16:43:49.180867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:43:49.180999 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-22 16:43:49.180992977 +0000 UTC m=+865.929511565 I0422 16:43:49.539202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:43:49.585992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4zgtv" condition "Approved" to 2026-04-22 16:43:49.585981033 +0000 UTC m=+866.334499631 I0422 16:43:49.616706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4zgtv" condition "Ready" to 2026-04-22 16:43:49.61668593 +0000 UTC m=+866.365204558 I0422 16:43:49.649680 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:43:49.649663572 +0000 UTC m=+866.398182170 I0422 16:43:49.674785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:43:49.675661 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:43:49.675653164 +0000 UTC m=+866.424171762 I0422 16:43:49.698884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:43:49.699357 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:43:49.699348089 +0000 UTC m=+866.447866687 I0422 16:46:52.152410 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 16:46:52.152523 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-22 16:46:52.152515158 +0000 UTC m=+1048.901033766 I0422 16:46:52.152429 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-22 16:46:52.152256951 +0000 UTC m=+1048.900775579 I0422 16:46:52.169918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:46:52.170250 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-22 16:46:52.170239059 +0000 UTC m=+1048.918757657 I0422 16:46:52.489305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 16:46:52.523990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rldb6" condition "Approved" to 2026-04-22 16:46:52.523977175 +0000 UTC m=+1049.272495773 I0422 16:46:52.544927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rldb6" condition "Ready" to 2026-04-22 16:46:52.544909449 +0000 UTC m=+1049.293428067 I0422 16:46:52.577767 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 16:46:52.577746086 +0000 UTC m=+1049.326264674 I0422 16:46:52.605808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"