I0408 10:48:49.075218 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 10:48:49.075373 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 10:48:49.075476 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 10:48:49.080688 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 10:48:49.081134 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 10:48:49.081235 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 10:48:49.081405 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 10:48:49.084985 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 10:48:49.104945 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 10:48:49.105210 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 10:48:49.110395 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 10:48:49.112995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 10:48:49.116699 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 10:48:49.116769 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 10:48:49.116838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 10:48:49.120212 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 10:48:49.120355 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 10:48:49.122761 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 10:48:49.125160 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 10:48:49.127600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 10:48:49.129863 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 10:48:49.129917 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 10:48:49.132216 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 10:48:49.135084 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 10:48:49.140394 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 10:48:49.142779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 10:48:49.145332 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 10:48:49.147500 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 10:48:49.147591 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 10:48:49.150120 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 10:48:49.152248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 10:48:49.154487 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 10:48:49.157360 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 10:48:49.162951 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:49.163458 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:49.164069 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:49.164124 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:49.165044 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:49.165228 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:49.165374 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:49.165561 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:49.165795 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:48:49.246261 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:49:00.983799 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 10:49:00.983780843 +0000 UTC m=+11.943188745 I0408 10:49:01.714507 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 10:49:01.714484835 +0000 UTC m=+12.673892707 I0408 10:49:01.714694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:01.714774 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 10:49:01.714762703 +0000 UTC m=+12.674170565 E0408 10:49:01.730018 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:49:01.730130 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 10:49:01.73011755 +0000 UTC m=+12.689525422 E0408 10:49:01.730167 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:49:01.732912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:01.732995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:01.733025 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 10:49:01.73301787 +0000 UTC m=+12.692425742 E0408 10:49:01.739115 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 10:49:01.739636 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:49:01.739714 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:49:01.739774 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 10:49:01.774101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hpp88" condition "Approved" to 2026-04-08 10:49:01.774090841 +0000 UTC m=+12.733498713 I0408 10:49:01.785474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hpp88" condition "Ready" to 2026-04-08 10:49:01.785465527 +0000 UTC m=+12.744873389 I0408 10:49:01.817350 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:01.817337723 +0000 UTC m=+12.776745595 I0408 10:49:01.837869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:06.739567 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:06.739504652 +0000 UTC m=+17.698912524 I0408 10:49:27.529705 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:27.529770 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 10:49:27.529751704 +0000 UTC m=+38.489159576 I0408 10:49:27.529762 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 10:49:27.529751674 +0000 UTC m=+38.489159546 I0408 10:49:27.543533 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 10:49:27.543513697 +0000 UTC m=+38.502921559 I0408 10:49:27.552135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:27.553002 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 10:49:27.552989401 +0000 UTC m=+38.512397283 I0408 10:49:27.735732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:27.766842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-x9956" condition "Approved" to 2026-04-08 10:49:27.766826398 +0000 UTC m=+38.726234270 I0408 10:49:27.799137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-x9956" condition "Ready" to 2026-04-08 10:49:27.799126376 +0000 UTC m=+38.758534238 I0408 10:49:27.827836 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:27.827821804 +0000 UTC m=+38.787229666 I0408 10:49:27.851487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:27.908611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:10.487032 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-08 10:51:10.486985717 +0000 UTC m=+141.446393619 I0408 10:51:10.487853 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:51:10.487896 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 10:51:10.487880022 +0000 UTC m=+141.447287924 E0408 10:51:10.499993 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 10:51:10.500093 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-08 10:51:10.500085086 +0000 UTC m=+141.459492958 I0408 10:51:10.500134 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 10:51:10.508107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:10.508189 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:51:10.508214 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 10:51:10.508207648 +0000 UTC m=+141.467615520 E0408 10:51:10.514617 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0408 10:51:10.514762 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 10:51:10.514816 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0408 10:51:10.514866 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0408 10:51:10.515902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:51:10.515941 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 10:51:10.515932449 +0000 UTC m=+141.475340321 I0408 10:51:10.516171 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-08 10:51:10.516158805 +0000 UTC m=+141.475566707 I0408 10:51:10.531271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:10.531379 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-08 10:51:10.531369861 +0000 UTC m=+141.490777733 I0408 10:51:10.963040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:10.993134 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bgfp9" condition "Approved" to 2026-04-08 10:51:10.99312047 +0000 UTC m=+141.952528342 I0408 10:51:11.009690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bgfp9" condition "Ready" to 2026-04-08 10:51:11.009677193 +0000 UTC m=+141.969085065 I0408 10:51:11.120446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:11.126645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-t2dzb" condition "Approved" to 2026-04-08 10:51:11.126620521 +0000 UTC m=+142.086028393 I0408 10:51:11.154249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-t2dzb" condition "Ready" to 2026-04-08 10:51:11.154234976 +0000 UTC m=+142.113642838 I0408 10:51:11.182548 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:11.18253333 +0000 UTC m=+142.141941202 I0408 10:51:11.207977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:11.256986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:15.515956 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:15.515943098 +0000 UTC m=+146.475351000 I0408 10:51:15.536555 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-bgfp9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:15.536536351 +0000 UTC m=+146.495944223 I0408 10:51:15.563502 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:15.563485778 +0000 UTC m=+146.522893670 I0408 10:51:15.582183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:15.582539 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:15.582531949 +0000 UTC m=+146.541939821 I0408 10:51:15.597373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:53:52.110003 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Ready" to 2026-04-08 10:53:52.109955724 +0000 UTC m=+303.069363596 I0408 10:53:52.110313 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-202.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:53:52.110370 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Issuing" to 2026-04-08 10:53:52.110357865 +0000 UTC m=+303.069765757 I0408 10:53:52.127639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-202.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-202.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:53:52.127725 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-202.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:53:52.127744 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Issuing" to 2026-04-08 10:53:52.127738256 +0000 UTC m=+303.087146118 I0408 10:53:52.246669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-202.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-202.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:53:52.252296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-202.nip.io-tls-snwsg" condition "Approved" to 2026-04-08 10:53:52.252274694 +0000 UTC m=+303.211682556 I0408 10:53:52.272149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-202.nip.io-tls-snwsg" condition "Ready" to 2026-04-08 10:53:52.272133194 +0000 UTC m=+303.231541086 I0408 10:53:52.299769 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:53:52.299745779 +0000 UTC m=+303.259153641 I0408 10:53:52.321106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-202.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-202.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:53:52.321761 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:53:52.321750018 +0000 UTC m=+303.281157910 I0408 10:53:52.338186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-202.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-202.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:53:52.338521 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-202.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:53:52.338513062 +0000 UTC m=+303.297920924 I0408 10:53:52.339831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-202.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-202.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:04.269291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:04.269387 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 10:55:04.269338287 +0000 UTC m=+375.228746189 I0408 10:55:04.269445 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 10:55:04.269335917 +0000 UTC m=+375.228743819 E0408 10:55:04.281434 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:55:04.281509 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 10:55:04.28149481 +0000 UTC m=+375.240902712 E0408 10:55:04.281595 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:55:04.282448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:04.282547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:04.282586 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 10:55:04.28257456 +0000 UTC m=+375.241982462 E0408 10:55:04.293865 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 10:55:04.293952 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:55:04.293978 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:55:04.294019 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 10:55:04.319097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:04.320513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qdbr9" condition "Approved" to 2026-04-08 10:55:04.320505438 +0000 UTC m=+375.279913300 I0408 10:55:04.332643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qdbr9" condition "Ready" to 2026-04-08 10:55:04.33263102 +0000 UTC m=+375.292038892 I0408 10:55:04.358981 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:04.358968321 +0000 UTC m=+375.318376193 I0408 10:55:04.375202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:04.375632 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:04.375620557 +0000 UTC m=+375.335028449 I0408 10:55:04.391477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:09.294743 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:09.294724832 +0000 UTC m=+380.254132724 I0408 10:55:47.072156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:47.072199 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 10:55:47.072191551 +0000 UTC m=+418.031599413 I0408 10:55:47.072626 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 10:55:47.072620952 +0000 UTC m=+418.032028814 I0408 10:55:47.081211 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 10:55:47.081199947 +0000 UTC m=+418.040607819 I0408 10:55:47.081501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:47.081521 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 10:55:47.081517826 +0000 UTC m=+418.040925688 I0408 10:55:47.081583 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:47.081637 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 10:55:47.081628969 +0000 UTC m=+418.041036841 I0408 10:55:47.081752 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 10:55:47.081739502 +0000 UTC m=+418.041147364 I0408 10:55:47.104569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:47.104650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:47.104674 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 10:55:47.10466911 +0000 UTC m=+418.064076972 I0408 10:55:47.128371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:47.128793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:47.130093 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 10:55:47.129967272 +0000 UTC m=+418.089375144 I0408 10:55:47.133266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:47.133403 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 10:55:47.133373106 +0000 UTC m=+418.092780968 I0408 10:55:47.253478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:47.289527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wwmrm" condition "Approved" to 2026-04-08 10:55:47.2895154 +0000 UTC m=+418.248923262 I0408 10:55:47.340990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wwmrm" condition "Ready" to 2026-04-08 10:55:47.34098047 +0000 UTC m=+418.300388332 I0408 10:55:47.381094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5m68f" condition "Approved" to 2026-04-08 10:55:47.381076798 +0000 UTC m=+418.340484670 I0408 10:55:47.400907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:47.400983 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 10:55:47.400971482 +0000 UTC m=+418.360379354 I0408 10:55:47.401824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5m68f" condition "Ready" to 2026-04-08 10:55:47.401810445 +0000 UTC m=+418.361218317 I0408 10:55:47.415672 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:47.415660534 +0000 UTC m=+418.375068396 I0408 10:55:47.446951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:47.452887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:47.453194 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:47.453186442 +0000 UTC m=+418.412594294 I0408 10:55:47.473277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gkgvg" condition "Approved" to 2026-04-08 10:55:47.473256151 +0000 UTC m=+418.432664043 I0408 10:55:47.525302 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:47.525275675 +0000 UTC m=+418.484683557 I0408 10:55:47.824980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-gkgvg" condition "Ready" to 2026-04-08 10:55:47.82496495 +0000 UTC m=+418.784372812 I0408 10:55:48.118241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:48.118578 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:48.118572309 +0000 UTC m=+419.077980191 I0408 10:55:48.225623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g7lrq" condition "Approved" to 2026-04-08 10:55:48.225603759 +0000 UTC m=+419.185011631 E0408 10:55:48.364657 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-stckh\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0408 10:55:48.628753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g7lrq" condition "Ready" to 2026-04-08 10:55:48.628737786 +0000 UTC m=+419.588145678 I0408 10:55:48.917330 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:48.917320407 +0000 UTC m=+419.876728279 I0408 10:55:49.016143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:49.216333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:49.216763 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:49.216756045 +0000 UTC m=+420.176163917 I0408 10:55:49.668018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:49.766477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:49.818270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:50.118617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:55.363727 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dd7c-tls" condition "Ready" to 2026-04-08 10:55:55.363709515 +0000 UTC m=+426.323117387 I0408 10:55:55.363791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dd7c-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:55.363831 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dd7c-tls" condition "Issuing" to 2026-04-08 10:55:55.363819968 +0000 UTC m=+426.323227870 I0408 10:55:55.381076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dd7c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5dd7c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:55.381164 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dd7c-tls" condition "Ready" to 2026-04-08 10:55:55.381156933 +0000 UTC m=+426.340564805 I0408 10:55:55.752282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dd7c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5dd7c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:55.784325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5dd7c-trfdw" condition "Approved" to 2026-04-08 10:55:55.78430019 +0000 UTC m=+426.743708062 I0408 10:55:55.799511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5dd7c-trfdw" condition "Ready" to 2026-04-08 10:55:55.799497377 +0000 UTC m=+426.758905279 I0408 10:55:55.836549 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dd7c-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:55.83652644 +0000 UTC m=+426.795934312 I0408 10:55:55.862693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dd7c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5dd7c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:19.642875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:19.642905 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 10:56:19.642897708 +0000 UTC m=+450.602305570 I0408 10:56:19.642988 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 10:56:19.64295813 +0000 UTC m=+450.602366012 I0408 10:56:19.663684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:19.663738 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:19.663752 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 10:56:19.663746269 +0000 UTC m=+450.623154141 I0408 10:56:19.899744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:19.909815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6672m" condition "Approved" to 2026-04-08 10:56:19.909802675 +0000 UTC m=+450.869210547 I0408 10:56:19.933095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6672m" condition "Ready" to 2026-04-08 10:56:19.933085352 +0000 UTC m=+450.892493204 I0408 10:56:19.963853 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:19.963834254 +0000 UTC m=+450.923242156 I0408 10:56:19.988343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:19.989268 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:19.98925393 +0000 UTC m=+450.948661822 I0408 10:56:19.994564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:20.002153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:20.002475 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:20.002467032 +0000 UTC m=+450.961874904 I0408 10:56:20.004417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:59:33.367052 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:59:33.367086 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 10:59:33.367078843 +0000 UTC m=+644.326486715 I0408 10:59:33.367030 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 10:59:33.366989971 +0000 UTC m=+644.326397863 I0408 10:59:33.386965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:59:33.387175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:59:33.387361 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 10:59:33.387352777 +0000 UTC m=+644.346760669 I0408 10:59:33.514039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:59:33.528930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4pxjp" condition "Approved" to 2026-04-08 10:59:33.528914107 +0000 UTC m=+644.488321969 I0408 10:59:33.551480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4pxjp" condition "Ready" to 2026-04-08 10:59:33.551466127 +0000 UTC m=+644.510874029 I0408 10:59:33.580257 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:59:33.580239573 +0000 UTC m=+644.539647455 I0408 10:59:33.599217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:59:33.599554 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:59:33.599547143 +0000 UTC m=+644.558955015 I0408 10:59:33.623685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:01:59.628904 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:01:59.628994 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-08 11:01:59.628982189 +0000 UTC m=+790.588390091 I0408 11:01:59.628976 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-08 11:01:59.628937938 +0000 UTC m=+790.588345830 I0408 11:01:59.643447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:01:59.643533 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-08 11:01:59.643525639 +0000 UTC m=+790.602933511 I0408 11:01:59.789605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:01:59.825238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-2fqd5" condition "Approved" to 2026-04-08 11:01:59.825219416 +0000 UTC m=+790.784627318 I0408 11:01:59.844586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-2fqd5" condition "Ready" to 2026-04-08 11:01:59.844555737 +0000 UTC m=+790.803963609 I0408 11:01:59.870927 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:01:59.870909382 +0000 UTC m=+790.830317254 I0408 11:01:59.893924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:01:59.894307 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:01:59.894299805 +0000 UTC m=+790.853707677 I0408 11:01:59.913560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:01:59.913900 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:01:59.913892154 +0000 UTC m=+790.873300026 I0408 11:03:13.651345 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:03:13.651381 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 11:03:13.651372969 +0000 UTC m=+864.610780841 I0408 11:03:13.651747 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-08 11:03:13.651735688 +0000 UTC m=+864.611143560 I0408 11:03:13.673707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:03:13.673814 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:03:13.673842 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 11:03:13.673833951 +0000 UTC m=+864.633241843 I0408 11:03:13.982763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-2wrwp" condition "Approved" to 2026-04-08 11:03:13.982745494 +0000 UTC m=+864.942153356 I0408 11:03:14.006829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-2wrwp" condition "Ready" to 2026-04-08 11:03:14.006816494 +0000 UTC m=+864.966224366 I0408 11:03:14.039159 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:03:14.039141374 +0000 UTC m=+864.998549276 I0408 11:03:14.071152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:06:08.841151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:06:08.841221 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 11:06:08.841180431 +0000 UTC m=+1039.800588293 I0408 11:06:08.841410 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-08 11:06:08.841197681 +0000 UTC m=+1039.800605563 I0408 11:06:08.857133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:06:08.857325 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-08 11:06:08.857317199 +0000 UTC m=+1039.816725071 I0408 11:06:09.154698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:06:09.182594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-f66wr" condition "Approved" to 2026-04-08 11:06:09.182585526 +0000 UTC m=+1040.141993388 I0408 11:06:09.202436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-f66wr" condition "Ready" to 2026-04-08 11:06:09.202423806 +0000 UTC m=+1040.161831678 I0408 11:06:09.235344 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:06:09.235328589 +0000 UTC m=+1040.194736461 I0408 11:06:09.255216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:06:09.257697 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:06:09.257687947 +0000 UTC m=+1040.217095809 I0408 11:06:09.280383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:06:09.280902 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:06:09.280892227 +0000 UTC m=+1040.240300119