I0412 20:50:34.235957 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0412 20:50:34.236110 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0412 20:50:34.236211 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0412 20:50:34.243422 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0412 20:50:34.244045 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0412 20:50:34.244068 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0412 20:50:34.244106 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0412 20:50:34.246868 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0412 20:50:34.263323 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0412 20:50:34.267636 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0412 20:50:34.271056 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0412 20:50:34.276740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0412 20:50:34.279674 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0412 20:50:34.282110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0412 20:50:34.284519 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0412 20:50:34.284592 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0412 20:50:34.287161 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0412 20:50:34.289783 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0412 20:50:34.294942 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0412 20:50:34.294988 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0412 20:50:34.295014 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0412 20:50:34.298668 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0412 20:50:34.300980 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0412 20:50:34.303517 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0412 20:50:34.303540 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0412 20:50:34.303677 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0412 20:50:34.306168 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0412 20:50:34.307929 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0412 20:50:34.310335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0412 20:50:34.312173 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0412 20:50:34.312261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0412 20:50:34.317924 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0412 20:50:34.322261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0412 20:50:34.324371 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:50:34.325107 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:50:34.325672 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:50:34.325809 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:50:34.325910 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:50:34.326525 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:50:34.326547 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:50:34.326896 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:50:34.326963 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:50:34.412155 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 20:50:44.772711 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-12 20:50:44.772697547 +0000 UTC m=+10.566936660 I0412 20:50:45.442161 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:50:45.442203 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-12 20:50:45.442194287 +0000 UTC m=+11.236433400 I0412 20:50:45.442098 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 20:50:45.442080315 +0000 UTC m=+11.236319448 E0412 20:50:45.462836 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 20:50:45.462904 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-12 20:50:45.462897679 +0000 UTC m=+11.257136792 E0412 20:50:45.462929 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 20:50:45.463157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:50:45.463655 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:50:45.463724 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-12 20:50:45.463714156 +0000 UTC m=+11.257953269 E0412 20:50:45.470529 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0412 20:50:45.470893 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 20:50:45.471058 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 20:50:45.471163 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0412 20:50:45.499153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-46fd5" condition "Approved" to 2026-04-12 20:50:45.499138634 +0000 UTC m=+11.293377747 I0412 20:50:45.515148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-46fd5" condition "Ready" to 2026-04-12 20:50:45.515131946 +0000 UTC m=+11.309371079 I0412 20:50:45.544200 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:50:45.544186922 +0000 UTC m=+11.338426035 I0412 20:50:45.559721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:50:45.560102 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:50:45.560095732 +0000 UTC m=+11.354334845 I0412 20:50:45.596601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:50:45.602897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:50:50.471504 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:50:50.471488926 +0000 UTC m=+16.265728029 I0412 20:51:08.300605 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-12 20:51:08.300585711 +0000 UTC m=+34.094824824 I0412 20:51:08.300664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:51:08.300719 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-12 20:51:08.300710574 +0000 UTC m=+34.094949687 I0412 20:51:08.311004 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-12 20:51:08.310990706 +0000 UTC m=+34.105229819 I0412 20:51:08.317879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:51:08.317982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:51:08.318102 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-12 20:51:08.31804947 +0000 UTC m=+34.112288593 I0412 20:51:08.643872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-hjhm2" condition "Approved" to 2026-04-12 20:51:08.643856425 +0000 UTC m=+34.438095568 I0412 20:51:08.677553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-hjhm2" condition "Ready" to 2026-04-12 20:51:08.677535848 +0000 UTC m=+34.471774981 I0412 20:51:08.766543 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:51:08.766518406 +0000 UTC m=+34.560757529 I0412 20:51:08.838214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:51:08.838646 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:51:08.838637338 +0000 UTC m=+34.632876441 I0412 20:51:08.880595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:52:51.330087 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-12 20:52:51.3300543 +0000 UTC m=+137.124293433 I0412 20:52:51.330379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:52:51.330450 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-12 20:52:51.330437428 +0000 UTC m=+137.124676581 E0412 20:52:51.350895 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 20:52:51.351061 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-12 20:52:51.350992703 +0000 UTC m=+137.145231816 I0412 20:52:51.351095 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 20:52:51.354561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:52:51.354641 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:52:51.354664 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-12 20:52:51.354660316 +0000 UTC m=+137.148899419 E0412 20:52:51.360060 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0412 20:52:51.360210 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 20:52:51.360237 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0412 20:52:51.360330 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0412 20:52:51.362943 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:52:51.362966 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-12 20:52:51.362961404 +0000 UTC m=+137.157200517 I0412 20:52:51.363343 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-12 20:52:51.363336751 +0000 UTC m=+137.157575854 I0412 20:52:51.378464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:52:51.378584 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-12 20:52:51.378572329 +0000 UTC m=+137.172811442 I0412 20:52:51.459711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:52:51.493871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-q5hzl" condition "Approved" to 2026-04-12 20:52:51.493845132 +0000 UTC m=+137.288084265 I0412 20:52:51.515981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-q5hzl" condition "Ready" to 2026-04-12 20:52:51.515953198 +0000 UTC m=+137.310192341 I0412 20:52:51.554312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2sl8k" condition "Approved" to 2026-04-12 20:52:51.55429125 +0000 UTC m=+137.348530363 I0412 20:52:51.581146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2sl8k" condition "Ready" to 2026-04-12 20:52:51.581128201 +0000 UTC m=+137.375367314 I0412 20:52:51.612032 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:52:51.612009244 +0000 UTC m=+137.406248387 I0412 20:52:51.633481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:52:51.633770 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:52:51.633762492 +0000 UTC m=+137.428001585 I0412 20:52:51.653468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:52:51.653729 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:52:51.653717955 +0000 UTC m=+137.447957068 I0412 20:52:56.360867 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:52:56.360778451 +0000 UTC m=+142.155017594 I0412 20:52:56.377109 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-q5hzl" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:52:56.37709377 +0000 UTC m=+142.171332873 I0412 20:52:56.406941 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:52:56.406927991 +0000 UTC m=+142.201167104 I0412 20:52:56.430694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:52:56.485049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:55:33.642316 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready" to 2026-04-12 20:55:33.642259692 +0000 UTC m=+299.436498895 I0412 20:55:33.642349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:55:33.642441 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Issuing" to 2026-04-12 20:55:33.642430136 +0000 UTC m=+299.436669279 I0412 20:55:33.659106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:55:33.659301 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-157.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:55:33.659391 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Issuing" to 2026-04-12 20:55:33.659380446 +0000 UTC m=+299.453619579 I0412 20:55:33.923739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:55:33.932377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-157.nip.io-tls-gnm8d" condition "Approved" to 2026-04-12 20:55:33.932362896 +0000 UTC m=+299.726602009 I0412 20:55:33.948894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-157.nip.io-tls-gnm8d" condition "Ready" to 2026-04-12 20:55:33.948876598 +0000 UTC m=+299.743115731 I0412 20:55:33.976499 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:55:33.976485164 +0000 UTC m=+299.770724307 I0412 20:55:33.996358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:55:33.996744 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-157.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:55:33.996736901 +0000 UTC m=+299.790976014 I0412 20:55:34.012401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:55:34.013154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-157.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-157.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:41.957361 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-12 20:56:41.957320456 +0000 UTC m=+367.751559579 I0412 20:56:41.957430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:56:41.957480 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 20:56:41.957470109 +0000 UTC m=+367.751709252 E0412 20:56:41.969212 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 20:56:41.969259 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-12 20:56:41.969250535 +0000 UTC m=+367.763489648 E0412 20:56:41.969308 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 20:56:41.971924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:41.972007 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-12 20:56:41.97199932 +0000 UTC m=+367.766238433 E0412 20:56:41.978086 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0412 20:56:41.978203 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 20:56:41.978237 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 20:56:41.978275 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0412 20:56:41.984128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:41.984217 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-12 20:56:41.984208864 +0000 UTC m=+367.778447977 I0412 20:56:41.991099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:41.991699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vv5sx" condition "Approved" to 2026-04-12 20:56:41.991679543 +0000 UTC m=+367.785918686 I0412 20:56:41.999680 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-12 20:56:41.999655043 +0000 UTC m=+367.793894176 I0412 20:56:42.002362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vv5sx" condition "Ready" to 2026-04-12 20:56:42.002350817 +0000 UTC m=+367.796589930 I0412 20:56:42.006767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:42.025453 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:56:42.025432379 +0000 UTC m=+367.819671512 I0412 20:56:42.044225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:42.083540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:56:46.979097 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:56:46.979081944 +0000 UTC m=+372.773321087 I0412 20:57:23.928876 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:57:23.928914 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-12 20:57:23.928905145 +0000 UTC m=+409.723144268 I0412 20:57:23.929310 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-12 20:57:23.929264542 +0000 UTC m=+409.723503695 I0412 20:57:23.937890 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:57:23.937932 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 20:57:23.937923936 +0000 UTC m=+409.732163049 I0412 20:57:23.938341 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-12 20:57:23.938335684 +0000 UTC m=+409.732574787 I0412 20:57:23.939914 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:57:23.939937 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-12 20:57:23.939932975 +0000 UTC m=+409.734172078 I0412 20:57:23.940184 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-12 20:57:23.940178751 +0000 UTC m=+409.734417844 I0412 20:57:23.956962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:23.957028 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-12 20:57:23.957019738 +0000 UTC m=+409.751258841 I0412 20:57:23.957407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:23.957461 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:57:23.957480 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-12 20:57:23.957476427 +0000 UTC m=+409.751715540 I0412 20:57:23.961122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:23.961177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:57:23.961197 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 20:57:23.961192951 +0000 UTC m=+409.755432064 I0412 20:57:24.187708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g62gb" condition "Approved" to 2026-04-12 20:57:24.187691847 +0000 UTC m=+409.981930980 I0412 20:57:24.204446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:24.257495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g62gb" condition "Ready" to 2026-04-12 20:57:24.257480534 +0000 UTC m=+410.051719637 I0412 20:57:24.300092 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:57:24.300080307 +0000 UTC m=+410.094319410 I0412 20:57:24.322801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:24.323076 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:57:24.323068887 +0000 UTC m=+410.117308010 I0412 20:57:24.325817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:24.335749 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vw9b6" condition "Approved" to 2026-04-12 20:57:24.335738091 +0000 UTC m=+410.129977194 E0412 20:57:24.341323 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-nngdr\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0412 20:57:24.341697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:24.342371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bhzhn" condition "Approved" to 2026-04-12 20:57:24.342364053 +0000 UTC m=+410.136603166 I0412 20:57:24.344030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:24.344384 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:57:24.344374284 +0000 UTC m=+410.138613397 I0412 20:57:24.349460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vw9b6" condition "Ready" to 2026-04-12 20:57:24.349450546 +0000 UTC m=+410.143689659 I0412 20:57:24.634923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bhzhn" condition "Ready" to 2026-04-12 20:57:24.634905191 +0000 UTC m=+410.429144334 I0412 20:57:25.135398 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-bhzhn" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-6dm8q" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0412 20:57:25.275219 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:57:25.275203061 +0000 UTC m=+411.069442194 I0412 20:57:25.522942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:25.523433 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:57:25.523423761 +0000 UTC m=+411.317662894 I0412 20:57:25.579657 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2q58r" condition "Approved" to 2026-04-12 20:57:25.579637687 +0000 UTC m=+411.373876830 I0412 20:57:26.034417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2q58r" condition "Ready" to 2026-04-12 20:57:26.034400492 +0000 UTC m=+411.828639625 I0412 20:57:26.173583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:26.224325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:26.475054 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:57:26.475001223 +0000 UTC m=+412.269240356 I0412 20:57:26.574206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:26.574638 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:57:26.574628658 +0000 UTC m=+412.368867781 I0412 20:57:26.824619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:26.873125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:32.014847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sf69f-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:57:32.014905 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sf69f-tls" condition "Issuing" to 2026-04-12 20:57:32.014887645 +0000 UTC m=+417.809126778 I0412 20:57:32.014912 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sf69f-tls" condition "Ready" to 2026-04-12 20:57:32.014888835 +0000 UTC m=+417.809127978 I0412 20:57:32.032173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sf69f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sf69f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:32.032364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sf69f-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:57:32.032425 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sf69f-tls" condition "Issuing" to 2026-04-12 20:57:32.032391394 +0000 UTC m=+417.826630537 I0412 20:57:32.338478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sf69f-v6tv8" condition "Approved" to 2026-04-12 20:57:32.338460509 +0000 UTC m=+418.132699622 I0412 20:57:32.359322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sf69f-v6tv8" condition "Ready" to 2026-04-12 20:57:32.359312076 +0000 UTC m=+418.153551189 I0412 20:57:32.386039 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sf69f-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:57:32.386022919 +0000 UTC m=+418.180262032 I0412 20:57:32.409811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sf69f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sf69f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:32.422107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sf69f-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sf69f-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:56.001960 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 20:57:56.002043 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-12 20:57:56.00203415 +0000 UTC m=+441.796273283 I0412 20:57:56.002016 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-12 20:57:56.001992579 +0000 UTC m=+441.796231752 I0412 20:57:56.021523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:56.021689 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-12 20:57:56.021678643 +0000 UTC m=+441.815917776 I0412 20:57:56.175063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:56.206704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cm2gp" condition "Approved" to 2026-04-12 20:57:56.206687469 +0000 UTC m=+442.000926602 I0412 20:57:56.227164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cm2gp" condition "Ready" to 2026-04-12 20:57:56.227150067 +0000 UTC m=+442.021389200 I0412 20:57:56.283515 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:57:56.283506083 +0000 UTC m=+442.077745196 I0412 20:57:56.301650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:56.302024 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 20:57:56.302017543 +0000 UTC m=+442.096256656 I0412 20:57:56.312793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 20:57:56.319789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:01:13.479651 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-12 21:01:13.479607622 +0000 UTC m=+639.273846725 I0412 21:01:13.479846 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:01:13.479933 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-12 21:01:13.479926799 +0000 UTC m=+639.274165902 I0412 21:01:13.497753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:01:13.497856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:01:13.497882 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-12 21:01:13.49787524 +0000 UTC m=+639.292114343 I0412 21:01:13.711751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:01:13.718893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rk2hv" condition "Approved" to 2026-04-12 21:01:13.718875988 +0000 UTC m=+639.513115101 I0412 21:01:13.737722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rk2hv" condition "Ready" to 2026-04-12 21:01:13.737709448 +0000 UTC m=+639.531948561 I0412 21:01:13.766931 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:01:13.766915608 +0000 UTC m=+639.561154721 I0412 21:01:13.806600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:01:13.874167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:03:29.510893 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-12 21:03:29.510857509 +0000 UTC m=+775.305096622 I0412 21:03:29.511281 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:03:29.511302 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-12 21:03:29.511298108 +0000 UTC m=+775.305537221 I0412 21:03:29.529285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:03:29.529358 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:03:29.529376 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-12 21:03:29.529370129 +0000 UTC m=+775.323609242 I0412 21:03:29.708618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-fs9vh" condition "Approved" to 2026-04-12 21:03:29.708605908 +0000 UTC m=+775.502845021 I0412 21:03:29.726638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-fs9vh" condition "Ready" to 2026-04-12 21:03:29.726624529 +0000 UTC m=+775.520863642 I0412 21:03:29.760514 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:03:29.760502797 +0000 UTC m=+775.554741900 I0412 21:03:29.782034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:04:29.290546 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-12 21:04:29.290531352 +0000 UTC m=+835.084770445 I0412 21:04:29.290557 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:04:29.290818 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-12 21:04:29.290795827 +0000 UTC m=+835.085034970 I0412 21:04:29.315296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:04:29.315388 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-12 21:04:29.315381569 +0000 UTC m=+835.109620682 I0412 21:04:29.586629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:04:29.623006 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bw55r" condition "Approved" to 2026-04-12 21:04:29.622995025 +0000 UTC m=+835.417234128 I0412 21:04:29.649795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bw55r" condition "Ready" to 2026-04-12 21:04:29.649770571 +0000 UTC m=+835.444009714 I0412 21:04:29.688833 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:04:29.688810291 +0000 UTC m=+835.483049434 I0412 21:04:29.709646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:04:29.710039 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:04:29.710032264 +0000 UTC m=+835.504271377 I0412 21:04:29.738461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:07:22.711175 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-12 21:07:22.711140349 +0000 UTC m=+1008.505379482 I0412 21:07:22.711399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:07:22.711523 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-12 21:07:22.711471605 +0000 UTC m=+1008.505710718 I0412 21:07:22.727301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:07:22.727393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 21:07:22.727417 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-12 21:07:22.727408144 +0000 UTC m=+1008.521647257 I0412 21:07:23.009115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:07:23.015997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wrdpc" condition "Approved" to 2026-04-12 21:07:23.01597739 +0000 UTC m=+1008.810216503 I0412 21:07:23.040745 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wrdpc" condition "Ready" to 2026-04-12 21:07:23.040728635 +0000 UTC m=+1008.834967748 I0412 21:07:23.071642 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:07:23.071623043 +0000 UTC m=+1008.865862156 I0412 21:07:23.102370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 21:07:23.102790 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 21:07:23.102779625 +0000 UTC m=+1008.897018738 I0412 21:07:23.125347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"