I0412 08:55:23.295650 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0412 08:55:23.295831 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0412 08:55:23.295942 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0412 08:55:23.303983 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0412 08:55:23.304637 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0412 08:55:23.304638 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0412 08:55:23.304727 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0412 08:55:23.309070 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0412 08:55:23.329574 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0412 08:55:23.330038 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0412 08:55:23.335004 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0412 08:55:23.335584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0412 08:55:23.343549 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0412 08:55:23.348712 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0412 08:55:23.351851 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0412 08:55:23.354635 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0412 08:55:23.357010 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0412 08:55:23.359065 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0412 08:55:23.360985 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0412 08:55:23.363991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0412 08:55:23.367813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0412 08:55:23.369867 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0412 08:55:23.371881 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0412 08:55:23.371919 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0412 08:55:23.371920 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0412 08:55:23.371932 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0412 08:55:23.371945 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0412 08:55:23.374022 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0412 08:55:23.376006 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0412 08:55:23.378480 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0412 08:55:23.380547 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0412 08:55:23.382602 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0412 08:55:23.387787 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0412 08:55:23.391158 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:55:23.391740 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:55:23.392182 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:55:23.392393 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:55:23.411832 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:55:23.431556 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:55:23.452590 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:55:23.470705 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:55:23.471789 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:55:23.490913 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0412 08:55:33.687654 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-12 08:55:33.687637809 +0000 UTC m=+10.426627652 I0412 08:55:34.390491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:55:34.390562 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-12 08:55:34.390552349 +0000 UTC m=+11.129542212 I0412 08:55:34.390693 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 08:55:34.390667471 +0000 UTC m=+11.129657384 E0412 08:55:34.404825 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 08:55:34.404941 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-12 08:55:34.404931819 +0000 UTC m=+11.143921682 E0412 08:55:34.404987 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 08:55:34.409017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:55:34.409142 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-12 08:55:34.409134024 +0000 UTC m=+11.148123867 E0412 08:55:34.414894 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0412 08:55:34.414981 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 08:55:34.415031 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 08:55:34.415074 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0412 08:55:34.422726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:55:34.446986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s5zcw" condition "Approved" to 2026-04-12 08:55:34.446971807 +0000 UTC m=+11.185961630 I0412 08:55:34.461793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s5zcw" condition "Ready" to 2026-04-12 08:55:34.461775557 +0000 UTC m=+11.200765420 I0412 08:55:34.481657 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:55:34.481645268 +0000 UTC m=+11.220635141 I0412 08:55:34.498631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:55:34.499034 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:55:34.499026499 +0000 UTC m=+11.238016342 I0412 08:55:34.515421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:55:34.517370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:55:39.415469 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:55:39.415448225 +0000 UTC m=+16.154438088 I0412 08:56:00.520789 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:56:00.520828 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-12 08:56:00.520819677 +0000 UTC m=+37.259809520 I0412 08:56:00.521842 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-12 08:56:00.521826917 +0000 UTC m=+37.260816770 I0412 08:56:00.528478 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-12 08:56:00.528460952 +0000 UTC m=+37.267450795 I0412 08:56:00.540189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:00.540346 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-12 08:56:00.540318982 +0000 UTC m=+37.279308825 I0412 08:56:00.677202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:00.711029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-hwzfc" condition "Approved" to 2026-04-12 08:56:00.711009426 +0000 UTC m=+37.449999299 I0412 08:56:00.742701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-hwzfc" condition "Ready" to 2026-04-12 08:56:00.742684348 +0000 UTC m=+37.481674191 I0412 08:56:00.773553 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:56:00.773536184 +0000 UTC m=+37.512526037 I0412 08:56:00.836027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:56:00.836381 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:56:00.836370969 +0000 UTC m=+37.575360802 I0412 08:56:00.872612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:57:33.999577 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-12 08:57:33.999543022 +0000 UTC m=+130.738532895 I0412 08:57:33.999702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:57:33.999951 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-12 08:57:33.999931999 +0000 UTC m=+130.738921872 E0412 08:57:34.017232 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 08:57:34.017360 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-12 08:57:34.01734815 +0000 UTC m=+130.756338023 I0412 08:57:34.017495 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 08:57:34.020684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:57:34.020760 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:57:34.020791 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-12 08:57:34.020784249 +0000 UTC m=+130.759774092 E0412 08:57:34.029421 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0412 08:57:34.029994 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0412 08:57:34.030044 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0412 08:57:34.030111 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0412 08:57:34.030572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:57:34.030623 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-12 08:57:34.030601247 +0000 UTC m=+130.769591110 I0412 08:57:34.031030 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-12 08:57:34.031006615 +0000 UTC m=+130.769996458 I0412 08:57:34.050389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:57:34.050510 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 08:57:34.050544 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-12 08:57:34.050532138 +0000 UTC m=+130.789522011 I0412 08:57:34.235263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:57:34.241950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-5b6mt" condition "Approved" to 2026-04-12 08:57:34.24193945 +0000 UTC m=+130.980929313 I0412 08:57:34.264759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-5b6mt" condition "Ready" to 2026-04-12 08:57:34.264738508 +0000 UTC m=+131.003728381 I0412 08:57:34.425290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:57:34.432825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-sl5wf" condition "Approved" to 2026-04-12 08:57:34.432801681 +0000 UTC m=+131.171791534 I0412 08:57:34.459013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-sl5wf" condition "Ready" to 2026-04-12 08:57:34.459003889 +0000 UTC m=+131.197993722 I0412 08:57:34.488461 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:57:34.488442711 +0000 UTC m=+131.227432564 I0412 08:57:34.506892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:57:34.557688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:57:39.029986 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:57:39.029967242 +0000 UTC m=+135.768957115 I0412 08:57:39.046128 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-5b6mt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:57:39.046112647 +0000 UTC m=+135.785102490 I0412 08:57:39.075109 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 08:57:39.075094761 +0000 UTC m=+135.814084604 I0412 08:57:39.093844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 08:57:39.142939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:00:11.899656 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready" to 2026-04-12 09:00:11.899565916 +0000 UTC m=+288.638555759 I0412 09:00:11.899908 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-36.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:00:11.899995 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Issuing" to 2026-04-12 09:00:11.899984885 +0000 UTC m=+288.638974738 I0412 09:00:11.916997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:00:11.917076 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready" to 2026-04-12 09:00:11.917066297 +0000 UTC m=+288.656056150 I0412 09:00:12.068112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:00:12.100162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-36.nip.io-tls-pv259" condition "Approved" to 2026-04-12 09:00:12.100134522 +0000 UTC m=+288.839124365 I0412 09:00:12.117575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-36.nip.io-tls-pv259" condition "Ready" to 2026-04-12 09:00:12.117560851 +0000 UTC m=+288.856550694 I0412 09:00:12.142746 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:00:12.142733564 +0000 UTC m=+288.881723427 I0412 09:00:12.163013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:00:12.163458 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-36.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:00:12.163449129 +0000 UTC m=+288.902438972 I0412 09:00:12.171801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:00:12.188386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-36.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-36.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:01:22.618699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:01:22.618766 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-12 09:01:22.618728349 +0000 UTC m=+359.357718212 I0412 09:01:22.618775 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 09:01:22.618763229 +0000 UTC m=+359.357753102 E0412 09:01:22.631543 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 09:01:22.631585 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-12 09:01:22.631577865 +0000 UTC m=+359.370567708 E0412 09:01:22.631626 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0412 09:01:22.634913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:01:22.635067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:01:22.635107 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-12 09:01:22.635096357 +0000 UTC m=+359.374086230 E0412 09:01:22.640976 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0412 09:01:22.641099 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 09:01:22.641153 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0412 09:01:22.641194 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0412 09:01:22.669994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4fcvl" condition "Approved" to 2026-04-12 09:01:22.669978964 +0000 UTC m=+359.408968837 I0412 09:01:22.680857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4fcvl" condition "Ready" to 2026-04-12 09:01:22.680846232 +0000 UTC m=+359.419836075 I0412 09:01:22.703299 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:01:22.703287931 +0000 UTC m=+359.442277784 I0412 09:01:22.718009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:01:22.718298 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:01:22.718290141 +0000 UTC m=+359.457279984 I0412 09:01:22.735095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:01:22.735378 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:01:22.735369773 +0000 UTC m=+359.474359646 I0412 09:01:27.641515 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:01:27.641501802 +0000 UTC m=+364.380491665 I0412 09:02:05.932636 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-12 09:02:05.932623396 +0000 UTC m=+402.671613229 I0412 09:02:05.932934 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:02:05.932950 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-12 09:02:05.932947263 +0000 UTC m=+402.671937096 I0412 09:02:05.939717 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-12 09:02:05.939708798 +0000 UTC m=+402.678698631 I0412 09:02:05.939797 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:02:05.939859 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 09:02:05.939851371 +0000 UTC m=+402.678841214 I0412 09:02:05.954025 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-12 09:02:05.954015634 +0000 UTC m=+402.693005457 I0412 09:02:05.954592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:02:05.954647 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-12 09:02:05.954639917 +0000 UTC m=+402.693629750 I0412 09:02:05.974163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:05.975327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:02:05.975372 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-12 09:02:05.975362462 +0000 UTC m=+402.714352315 I0412 09:02:05.975895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:05.975931 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-12 09:02:05.975926453 +0000 UTC m=+402.714916286 I0412 09:02:05.988168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:05.988226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:02:05.988244 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-12 09:02:05.988239319 +0000 UTC m=+402.727229152 I0412 09:02:06.066911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:06.102616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r8nqh" condition "Approved" to 2026-04-12 09:02:06.102601569 +0000 UTC m=+402.841591412 I0412 09:02:06.121544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-r8nqh" condition "Ready" to 2026-04-12 09:02:06.121529988 +0000 UTC m=+402.860519851 I0412 09:02:06.146626 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:02:06.146615941 +0000 UTC m=+402.885605784 I0412 09:02:06.169734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xldbv" condition "Approved" to 2026-04-12 09:02:06.169721063 +0000 UTC m=+402.908710906 I0412 09:02:06.174398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:06.174865 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:02:06.174858036 +0000 UTC m=+402.913847879 I0412 09:02:06.187399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xldbv" condition "Ready" to 2026-04-12 09:02:06.187393266 +0000 UTC m=+402.926383109 I0412 09:02:06.194357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:06.194632 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:02:06.194622522 +0000 UTC m=+402.933612365 I0412 09:02:06.198123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:06.276243 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:02:06.276229506 +0000 UTC m=+403.015219339 I0412 09:02:06.374232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:06.374636 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:02:06.374626116 +0000 UTC m=+403.113615989 I0412 09:02:06.619636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:06.827225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-48tqm" condition "Approved" to 2026-04-12 09:02:06.827208157 +0000 UTC m=+403.566198000 I0412 09:02:06.884271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-48tqm" condition "Ready" to 2026-04-12 09:02:06.884248169 +0000 UTC m=+403.623238032 I0412 09:02:07.413233 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:02:07.413210619 +0000 UTC m=+404.152200492 I0412 09:02:07.475104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:07.475639 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:02:07.475632189 +0000 UTC m=+404.214622032 I0412 09:02:07.671805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:15.509520 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rjpns-tls" condition "Ready" to 2026-04-12 09:02:15.509495969 +0000 UTC m=+412.248485802 I0412 09:02:15.509779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rjpns-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:02:15.509841 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rjpns-tls" condition "Issuing" to 2026-04-12 09:02:15.509828726 +0000 UTC m=+412.248818589 I0412 09:02:15.523624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rjpns-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rjpns-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:15.523704 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rjpns-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:02:15.523726 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rjpns-tls" condition "Issuing" to 2026-04-12 09:02:15.523720774 +0000 UTC m=+412.262710597 I0412 09:02:15.783413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rjpns-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rjpns-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:15.796569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rjpns-ftl8s" condition "Approved" to 2026-04-12 09:02:15.796550117 +0000 UTC m=+412.535539950 I0412 09:02:15.817386 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rjpns-ftl8s" condition "Ready" to 2026-04-12 09:02:15.817366913 +0000 UTC m=+412.556356776 I0412 09:02:15.853040 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rjpns-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:02:15.853025017 +0000 UTC m=+412.592014860 I0412 09:02:15.935566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rjpns-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rjpns-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:37.880665 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-12 09:02:37.880642203 +0000 UTC m=+434.619632046 I0412 09:02:37.882039 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:02:37.882067 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-12 09:02:37.88206173 +0000 UTC m=+434.621051574 I0412 09:02:37.903998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:37.904107 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:02:37.904139 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-12 09:02:37.904131132 +0000 UTC m=+434.643120975 I0412 09:02:38.077601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:02:38.259766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kbrpp" condition "Approved" to 2026-04-12 09:02:38.259749192 +0000 UTC m=+434.998739035 I0412 09:02:38.492497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kbrpp" condition "Ready" to 2026-04-12 09:02:38.492476622 +0000 UTC m=+435.231466495 I0412 09:02:38.933686 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:02:38.933673436 +0000 UTC m=+435.672663279 I0412 09:02:38.949968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:05:50.485001 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-12 09:05:50.484940601 +0000 UTC m=+627.223930474 I0412 09:05:50.485071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:05:50.485174 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-12 09:05:50.485161785 +0000 UTC m=+627.224151648 I0412 09:05:50.504027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:05:50.504139 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-12 09:05:50.504125006 +0000 UTC m=+627.243114869 I0412 09:05:50.765502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:05:50.802958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wmkbj" condition "Approved" to 2026-04-12 09:05:50.802914459 +0000 UTC m=+627.541904302 I0412 09:05:50.828590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wmkbj" condition "Ready" to 2026-04-12 09:05:50.828574184 +0000 UTC m=+627.567564017 I0412 09:05:50.872168 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:05:50.87214642 +0000 UTC m=+627.611136253 I0412 09:05:50.898501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:05:50.954622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:08:20.785879 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-12 09:08:20.785825649 +0000 UTC m=+777.524815512 I0412 09:08:20.786082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:08:20.786197 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-12 09:08:20.786183636 +0000 UTC m=+777.525173499 I0412 09:08:20.804459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:08:20.804629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:08:20.804678 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-12 09:08:20.804669628 +0000 UTC m=+777.543659471 I0412 09:08:20.910700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-9vdzx" condition "Approved" to 2026-04-12 09:08:20.910683977 +0000 UTC m=+777.649673820 I0412 09:08:20.931597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-9vdzx" condition "Ready" to 2026-04-12 09:08:20.931581556 +0000 UTC m=+777.670571399 I0412 09:08:20.965082 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:08:20.965066708 +0000 UTC m=+777.704056551 I0412 09:08:20.987361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:08:20.987640 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:08:20.987633271 +0000 UTC m=+777.726623114 I0412 09:08:21.012669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:08:21.014203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:08:21.015293 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:08:21.015269397 +0000 UTC m=+777.754259240 I0412 09:09:24.658619 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:09:24.658666 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-12 09:09:24.658649933 +0000 UTC m=+841.397639776 I0412 09:09:24.658665 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-12 09:09:24.658656863 +0000 UTC m=+841.397646686 I0412 09:09:24.682245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:09:24.682340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:09:24.682367 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-12 09:09:24.682358938 +0000 UTC m=+841.421348811 I0412 09:09:24.850314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6hq2k" condition "Approved" to 2026-04-12 09:09:24.850296106 +0000 UTC m=+841.589285949 I0412 09:09:24.871508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6hq2k" condition "Ready" to 2026-04-12 09:09:24.871493051 +0000 UTC m=+841.610482894 I0412 09:09:24.903255 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:09:24.903239377 +0000 UTC m=+841.642229220 I0412 09:09:24.925437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:09:24.985740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:12:27.468546 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-12 09:12:27.468525916 +0000 UTC m=+1024.207515789 I0412 09:12:27.468947 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0412 09:12:27.468996 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-12 09:12:27.468984225 +0000 UTC m=+1024.207974088 I0412 09:12:27.485270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:12:27.485410 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-12 09:12:27.485398144 +0000 UTC m=+1024.224388007 I0412 09:12:27.679146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:12:27.720425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7mkfr" condition "Approved" to 2026-04-12 09:12:27.720409568 +0000 UTC m=+1024.459399431 I0412 09:12:27.738953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7mkfr" condition "Ready" to 2026-04-12 09:12:27.73893914 +0000 UTC m=+1024.477928983 I0412 09:12:27.771462 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:12:27.77145098 +0000 UTC m=+1024.510440843 I0412 09:12:27.797053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0412 09:12:27.797378 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-12 09:12:27.79737025 +0000 UTC m=+1024.536360093 I0412 09:12:27.822246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"