I0416 16:29:11.695698 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0416 16:29:11.695812 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0416 16:29:11.695896 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0416 16:29:11.699251 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0416 16:29:11.699709 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0416 16:29:11.699818 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0416 16:29:11.699915 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0416 16:29:11.705958 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0416 16:29:11.723250 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0416 16:29:11.723518 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0416 16:29:11.726994 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0416 16:29:11.729358 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0416 16:29:11.731901 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0416 16:29:11.736521 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0416 16:29:11.741099 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0416 16:29:11.741180 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0416 16:29:11.744876 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0416 16:29:11.747110 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0416 16:29:11.749322 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0416 16:29:11.751453 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0416 16:29:11.753187 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0416 16:29:11.757932 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0416 16:29:11.757978 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0416 16:29:11.758002 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0416 16:29:11.762805 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0416 16:29:11.765851 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0416 16:29:11.768420 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0416 16:29:11.768604 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0416 16:29:11.771090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0416 16:29:11.773757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0416 16:29:11.775680 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0416 16:29:11.777473 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0416 16:29:11.777816 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0416 16:29:11.780396 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:11.781418 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:11.782216 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:11.782678 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:11.782710 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:11.782922 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:11.784013 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:11.784514 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:11.784928 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:11.870163 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:29:22.823244 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-16 16:29:22.823212603 +0000 UTC m=+11.159169618 I0416 16:29:23.617485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:29:23.617549 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 16:29:23.617536595 +0000 UTC m=+11.953493640 I0416 16:29:23.617722 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 16:29:23.617693019 +0000 UTC m=+11.953650084 I0416 16:29:23.636465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:29:23.636597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:29:23.636697 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 16:29:23.636681458 +0000 UTC m=+11.972638523 E0416 16:29:23.637194 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:29:23.637289 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-16 16:29:23.637280442 +0000 UTC m=+11.973237437 E0416 16:29:23.637320 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:29:23.654166 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0416 16:29:23.654308 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:29:23.654397 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:29:23.654460 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0416 16:29:23.688768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fj8cn" condition "Approved" to 2026-04-16 16:29:23.688745325 +0000 UTC m=+12.024702370 I0416 16:29:23.703370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fj8cn" condition "Ready" to 2026-04-16 16:29:23.703348657 +0000 UTC m=+12.039305702 I0416 16:29:23.732507 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:29:23.732494332 +0000 UTC m=+12.068451337 I0416 16:29:23.752796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:29:23.753144 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:29:23.75313657 +0000 UTC m=+12.089093595 I0416 16:29:23.758130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:29:23.770440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:29:23.770817 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:29:23.770806016 +0000 UTC m=+12.106763031 I0416 16:29:28.655254 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:29:28.655230512 +0000 UTC m=+16.991187547 I0416 16:29:49.492012 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 16:29:49.491993358 +0000 UTC m=+37.827950393 I0416 16:29:49.491958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:29:49.492130 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 16:29:49.492122791 +0000 UTC m=+37.828079806 I0416 16:29:49.508166 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-16 16:29:49.508154812 +0000 UTC m=+37.844111827 I0416 16:29:49.513488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:29:49.513572 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 16:29:49.513564655 +0000 UTC m=+37.849521670 I0416 16:29:49.667610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:29:49.711353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cncvq" condition "Approved" to 2026-04-16 16:29:49.711333805 +0000 UTC m=+38.047290820 I0416 16:29:49.746300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cncvq" condition "Ready" to 2026-04-16 16:29:49.746276479 +0000 UTC m=+38.082233514 I0416 16:29:49.776463 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:29:49.776444746 +0000 UTC m=+38.112401781 I0416 16:29:49.797129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:29:49.797515 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:29:49.79750435 +0000 UTC m=+38.133461385 I0416 16:29:49.809582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:29:49.826546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:38.839081 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-16 16:31:38.839028035 +0000 UTC m=+147.174985070 I0416 16:31:38.839154 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:31:38.839201 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-16 16:31:38.839190039 +0000 UTC m=+147.175147084 E0416 16:31:38.852726 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 16:31:38.852774 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-16 16:31:38.852765294 +0000 UTC m=+147.188722309 I0416 16:31:38.852825 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 16:31:38.856064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:38.856415 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:31:38.856569 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-16 16:31:38.856557725 +0000 UTC m=+147.192514750 E0416 16:31:38.864408 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0416 16:31:38.864592 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 16:31:38.864657 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0416 16:31:38.864732 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0416 16:31:38.868412 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:31:38.868452 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-16 16:31:38.868443859 +0000 UTC m=+147.204400864 I0416 16:31:38.868634 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-16 16:31:38.868612063 +0000 UTC m=+147.204569078 I0416 16:31:38.881799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:38.882099 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-16 16:31:38.882089156 +0000 UTC m=+147.218046201 I0416 16:31:39.037148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:39.068445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-w9p5x" condition "Approved" to 2026-04-16 16:31:39.068431162 +0000 UTC m=+147.404388177 I0416 16:31:39.083867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-w9p5x" condition "Ready" to 2026-04-16 16:31:39.083859721 +0000 UTC m=+147.419816736 I0416 16:31:39.477056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-zqbs9" condition "Approved" to 2026-04-16 16:31:39.477043505 +0000 UTC m=+147.813000520 I0416 16:31:39.504510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-zqbs9" condition "Ready" to 2026-04-16 16:31:39.504496901 +0000 UTC m=+147.840453916 I0416 16:31:39.535979 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:31:39.535940693 +0000 UTC m=+147.871897728 I0416 16:31:39.558159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:39.558624 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:31:39.558614795 +0000 UTC m=+147.894571830 I0416 16:31:39.566322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:39.575181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:39.575606 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:31:39.575594301 +0000 UTC m=+147.911551336 I0416 16:31:43.865225 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:31:43.865215162 +0000 UTC m=+152.201172167 I0416 16:31:43.879188 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-w9p5x" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:31:43.879173966 +0000 UTC m=+152.215130991 I0416 16:31:43.906572 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:31:43.906557339 +0000 UTC m=+152.242514344 I0416 16:31:43.924361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:16.622642 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready" to 2026-04-16 16:34:16.622612595 +0000 UTC m=+304.958569600 I0416 16:34:16.622744 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:34:16.622828 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Issuing" to 2026-04-16 16:34:16.62281795 +0000 UTC m=+304.958774995 I0416 16:34:16.638418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:16.638489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:34:16.638512 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Issuing" to 2026-04-16 16:34:16.63850446 +0000 UTC m=+304.974461485 I0416 16:34:16.805692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:16.810201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-25.nip.io-tls-ntfp8" condition "Approved" to 2026-04-16 16:34:16.810190577 +0000 UTC m=+305.146147572 I0416 16:34:16.827461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-25.nip.io-tls-ntfp8" condition "Ready" to 2026-04-16 16:34:16.827448924 +0000 UTC m=+305.163405959 I0416 16:34:16.850866 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:16.850853446 +0000 UTC m=+305.186810461 I0416 16:34:16.874977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:35:27.163728 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:35:27.163758 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 16:35:27.163736833 +0000 UTC m=+375.499693868 I0416 16:35:27.163774 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 16:35:27.163759883 +0000 UTC m=+375.499716928 E0416 16:35:27.176037 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:35:27.176072 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-16 16:35:27.176064518 +0000 UTC m=+375.512021523 E0416 16:35:27.176113 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:35:27.178242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:35:27.178305 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 16:35:27.178300681 +0000 UTC m=+375.514257686 E0416 16:35:27.183890 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0416 16:35:27.183950 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:35:27.183966 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:35:27.183994 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0416 16:35:27.192425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:35:27.209757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7nxdp" condition "Approved" to 2026-04-16 16:35:27.209733123 +0000 UTC m=+375.545690158 I0416 16:35:27.222840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7nxdp" condition "Ready" to 2026-04-16 16:35:27.222828437 +0000 UTC m=+375.558785452 I0416 16:35:27.242425 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:35:27.242416615 +0000 UTC m=+375.578373630 I0416 16:35:27.263370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:35:27.263626 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:35:27.263618873 +0000 UTC m=+375.599575888 I0416 16:35:27.266719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:35:27.273927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:35:27.274154 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:35:27.274146904 +0000 UTC m=+375.610103919 I0416 16:35:32.184611 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:35:32.184597805 +0000 UTC m=+380.520554840 I0416 16:36:08.853340 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 16:36:08.85332979 +0000 UTC m=+417.189286795 I0416 16:36:08.853713 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:36:08.854364 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 16:36:08.854356464 +0000 UTC m=+417.190313489 I0416 16:36:08.862751 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:36:08.862778 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 16:36:08.862772787 +0000 UTC m=+417.198729792 I0416 16:36:08.863480 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 16:36:08.863462484 +0000 UTC m=+417.199419629 I0416 16:36:08.863797 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 16:36:08.863783181 +0000 UTC m=+417.199740196 I0416 16:36:08.864128 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:36:08.864157 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 16:36:08.864153651 +0000 UTC m=+417.200110656 I0416 16:36:08.878063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:08.878141 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:36:08.878168 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 16:36:08.87816223 +0000 UTC m=+417.214119245 I0416 16:36:08.887054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:08.887143 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 16:36:08.887132517 +0000 UTC m=+417.223089542 I0416 16:36:08.888992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:08.889054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:36:08.889076 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 16:36:08.889070134 +0000 UTC m=+417.225027149 I0416 16:36:09.059087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:09.088146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kkfd5" condition "Approved" to 2026-04-16 16:36:09.088132085 +0000 UTC m=+417.424089100 I0416 16:36:09.106945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-kkfd5" condition "Ready" to 2026-04-16 16:36:09.106936249 +0000 UTC m=+417.442893254 I0416 16:36:09.108445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-frfbw" condition "Approved" to 2026-04-16 16:36:09.108441236 +0000 UTC m=+417.444398231 I0416 16:36:09.123174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-frfbw" condition "Ready" to 2026-04-16 16:36:09.123169831 +0000 UTC m=+417.459126836 I0416 16:36:09.141722 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:36:09.14171201 +0000 UTC m=+417.477669025 I0416 16:36:09.169632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:09.169929 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:36:09.169923402 +0000 UTC m=+417.505880427 I0416 16:36:09.189305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:09.206183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:36:09.206216 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 16:36:09.206210599 +0000 UTC m=+417.542167604 I0416 16:36:09.212508 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:36:09.212492251 +0000 UTC m=+417.548449266 I0416 16:36:09.249633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:09.451264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:09.451682 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:36:09.451673481 +0000 UTC m=+417.787630496 I0416 16:36:09.599092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:09.902293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wkckd" condition "Approved" to 2026-04-16 16:36:09.902276383 +0000 UTC m=+418.238233398 I0416 16:36:10.003356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nzwmb" condition "Approved" to 2026-04-16 16:36:10.003342636 +0000 UTC m=+418.339299671 I0416 16:36:10.379666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wkckd" condition "Ready" to 2026-04-16 16:36:10.379656832 +0000 UTC m=+418.715613847 I0416 16:36:10.448334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-nzwmb" condition "Ready" to 2026-04-16 16:36:10.448311471 +0000 UTC m=+418.784268516 I0416 16:36:11.000746 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:36:11.000728153 +0000 UTC m=+419.336685228 I0416 16:36:11.199377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:11.199880 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:36:11.199870306 +0000 UTC m=+419.535827341 I0416 16:36:11.299791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:11.750560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:11.801136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:11.850141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:11.901538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:16.551854 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls" condition "Ready" to 2026-04-16 16:36:16.551835548 +0000 UTC m=+424.887792583 I0416 16:36:16.551979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:36:16.552033 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls" condition "Issuing" to 2026-04-16 16:36:16.552017502 +0000 UTC m=+424.887974547 I0416 16:36:16.567917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:16.567988 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:36:16.568005 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls" condition "Issuing" to 2026-04-16 16:36:16.567997779 +0000 UTC m=+424.903954794 I0416 16:36:17.008896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tj7nf-5qzfq" condition "Approved" to 2026-04-16 16:36:17.008879835 +0000 UTC m=+425.344836880 I0416 16:36:17.025910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tj7nf-5qzfq" condition "Ready" to 2026-04-16 16:36:17.025899936 +0000 UTC m=+425.361856951 I0416 16:36:17.052170 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:36:17.052159131 +0000 UTC m=+425.388116146 I0416 16:36:17.070221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:17.070653 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:36:17.070645238 +0000 UTC m=+425.406602263 I0416 16:36:17.088497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tj7nf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:42.792572 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 16:36:42.792531779 +0000 UTC m=+451.128488784 I0416 16:36:42.793095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:36:42.793136 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 16:36:42.793126594 +0000 UTC m=+451.129083639 I0416 16:36:42.809862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:42.809953 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:36:42.809975 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 16:36:42.809968221 +0000 UTC m=+451.145925226 I0416 16:36:43.217298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gp7r7" condition "Approved" to 2026-04-16 16:36:43.217279266 +0000 UTC m=+451.553236301 I0416 16:36:43.237032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gp7r7" condition "Ready" to 2026-04-16 16:36:43.237020353 +0000 UTC m=+451.572977368 I0416 16:36:43.262953 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:36:43.26294125 +0000 UTC m=+451.598898255 I0416 16:36:43.279279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:43.279921 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:36:43.27990625 +0000 UTC m=+451.615863295 I0416 16:36:43.285993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:36:43.303683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:02.116887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:40:02.116880 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 16:40:02.116837667 +0000 UTC m=+650.452794712 I0416 16:40:02.116933 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 16:40:02.116923849 +0000 UTC m=+650.452880864 I0416 16:40:02.132820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:02.132900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:40:02.132916 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 16:40:02.132911205 +0000 UTC m=+650.468868200 I0416 16:40:02.295456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vm9pj" condition "Approved" to 2026-04-16 16:40:02.295440177 +0000 UTC m=+650.631397192 I0416 16:40:02.311656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vm9pj" condition "Ready" to 2026-04-16 16:40:02.311645768 +0000 UTC m=+650.647602783 I0416 16:40:02.338955 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:02.338943627 +0000 UTC m=+650.674900642 I0416 16:40:02.363338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:02.363706 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:02.363698974 +0000 UTC m=+650.699655989 I0416 16:40:02.384055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:02.384302 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:02.384296011 +0000 UTC m=+650.720253026 I0416 16:42:31.221627 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-16 16:42:31.221592124 +0000 UTC m=+799.557549159 I0416 16:42:31.221749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:42:31.221830 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-16 16:42:31.22182106 +0000 UTC m=+799.557778105 I0416 16:42:31.240004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:31.240088 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:42:31.240114 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-16 16:42:31.240106334 +0000 UTC m=+799.576063379 I0416 16:42:31.464015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:31.471382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4b7p2" condition "Approved" to 2026-04-16 16:42:31.471370472 +0000 UTC m=+799.807327497 I0416 16:42:31.494496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4b7p2" condition "Ready" to 2026-04-16 16:42:31.494486044 +0000 UTC m=+799.830443049 I0416 16:42:31.529217 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:42:31.52920098 +0000 UTC m=+799.865158025 I0416 16:42:31.551108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:31.551552 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:42:31.551544433 +0000 UTC m=+799.887501448 I0416 16:42:31.573774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:43:38.355825 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:43:38.355857 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-16 16:43:38.355851987 +0000 UTC m=+866.691808992 I0416 16:43:38.355871 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-16 16:43:38.355855667 +0000 UTC m=+866.691812682 I0416 16:43:38.370085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:43:38.370189 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-16 16:43:38.370179736 +0000 UTC m=+866.706136771 I0416 16:43:38.470975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:43:38.507405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-sfn2c" condition "Approved" to 2026-04-16 16:43:38.507395571 +0000 UTC m=+866.843352576 I0416 16:43:38.525950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-sfn2c" condition "Ready" to 2026-04-16 16:43:38.525938491 +0000 UTC m=+866.861895496 I0416 16:43:38.554954 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:43:38.554943517 +0000 UTC m=+866.890900512 I0416 16:43:38.578821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:43:38.579015 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:43:38.579009341 +0000 UTC m=+866.914966346 I0416 16:43:38.593112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:43:38.593291 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:43:38.593286888 +0000 UTC m=+866.929243893 I0416 16:46:39.575580 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-16 16:46:39.575537246 +0000 UTC m=+1047.911494261 I0416 16:46:39.575604 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:46:39.575659 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-16 16:46:39.575652308 +0000 UTC m=+1047.911609353 I0416 16:46:39.593238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:46:39.593297 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:46:39.593314 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-16 16:46:39.593307475 +0000 UTC m=+1047.929264490 I0416 16:46:39.860965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wn4q8" condition "Approved" to 2026-04-16 16:46:39.86095062 +0000 UTC m=+1048.196907625 I0416 16:46:39.882336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wn4q8" condition "Ready" to 2026-04-16 16:46:39.882320997 +0000 UTC m=+1048.218278032 I0416 16:46:39.914262 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:46:39.914249789 +0000 UTC m=+1048.250206794 I0416 16:46:39.941293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:46:39.941774 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:46:39.941764075 +0000 UTC m=+1048.277721090 I0416 16:46:39.960286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:46:39.960852 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:46:39.960838167 +0000 UTC m=+1048.296795182