I0418 06:02:38.160068 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0418 06:02:38.160274 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0418 06:02:38.160421 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0418 06:02:38.164002 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0418 06:02:38.164439 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0418 06:02:38.164567 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0418 06:02:38.164660 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0418 06:02:38.167031 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0418 06:02:38.181194 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0418 06:02:38.181489 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0418 06:02:38.181611 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0418 06:02:38.186992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0418 06:02:38.192187 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0418 06:02:38.194882 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0418 06:02:38.197369 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0418 06:02:38.199230 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0418 06:02:38.201251 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0418 06:02:38.203046 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0418 06:02:38.204923 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0418 06:02:38.210167 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0418 06:02:38.213519 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0418 06:02:38.215741 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0418 06:02:38.215888 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0418 06:02:38.218403 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0418 06:02:38.220640 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0418 06:02:38.220665 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0418 06:02:38.220754 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0418 06:02:38.222523 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0418 06:02:38.222576 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0418 06:02:38.224547 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0418 06:02:38.226298 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0418 06:02:38.232396 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0418 06:02:38.235957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0418 06:02:38.238939 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 06:02:38.239397 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 06:02:38.239618 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 06:02:38.239639 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 06:02:38.239758 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 06:02:38.240002 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 06:02:38.240087 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 06:02:38.240280 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 06:02:38.240497 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 06:02:38.326744 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 06:02:52.201278 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-18 06:02:52.201263484 +0000 UTC m=+14.078187579 I0418 06:02:52.924104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:02:52.924148 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 06:02:52.924138483 +0000 UTC m=+14.801062578 I0418 06:02:52.924675 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 06:02:52.924666414 +0000 UTC m=+14.801590519 E0418 06:02:52.968550 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 06:02:52.968638 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-18 06:02:52.968627845 +0000 UTC m=+14.845551940 E0418 06:02:52.968671 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 06:02:52.971308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:02:52.971378 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:02:52.971398 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 06:02:52.971391198 +0000 UTC m=+14.848315273 E0418 06:02:53.005160 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0418 06:02:53.005382 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 06:02:53.005455 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 06:02:53.005533 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0418 06:02:53.060158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:02:53.079954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lj5hb" condition "Approved" to 2026-04-18 06:02:53.079940162 +0000 UTC m=+14.956864237 I0418 06:02:53.105712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-lj5hb" condition "Ready" to 2026-04-18 06:02:53.105696769 +0000 UTC m=+14.982620874 I0418 06:02:53.146621 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:02:53.146611994 +0000 UTC m=+15.023536069 I0418 06:02:53.180025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:02:58.006048 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:02:58.006034637 +0000 UTC m=+19.882958732 I0418 06:03:24.006480 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-18 06:03:24.006462278 +0000 UTC m=+45.883386353 I0418 06:03:24.006529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:03:24.006580 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 06:03:24.00656853 +0000 UTC m=+45.883492625 I0418 06:03:24.016923 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-18 06:03:24.016901635 +0000 UTC m=+45.893825740 I0418 06:03:24.028143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:03:24.028216 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-18 06:03:24.028209949 +0000 UTC m=+45.905134014 I0418 06:03:24.213164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:03:24.248926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xnsjw" condition "Approved" to 2026-04-18 06:03:24.248909203 +0000 UTC m=+46.125833308 I0418 06:03:24.290883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xnsjw" condition "Ready" to 2026-04-18 06:03:24.290863247 +0000 UTC m=+46.167787342 I0418 06:03:24.320236 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:03:24.320218011 +0000 UTC m=+46.197142086 I0418 06:03:24.343406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:03:24.397099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:05:40.222647 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:05:40.222736 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-18 06:05:40.222726417 +0000 UTC m=+182.099650512 I0418 06:05:40.223454 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-18 06:05:40.22344302 +0000 UTC m=+182.100367125 E0418 06:05:40.235537 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 06:05:40.235618 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-18 06:05:40.235609168 +0000 UTC m=+182.112533243 I0418 06:05:40.235644 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 06:05:40.239573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:05:40.239686 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-18 06:05:40.239667984 +0000 UTC m=+182.116592089 E0418 06:05:40.247146 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0418 06:05:40.247248 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 06:05:40.247283 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0418 06:05:40.247336 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0418 06:05:40.252731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:05:40.252761 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-18 06:05:40.252751708 +0000 UTC m=+182.129675783 I0418 06:05:40.252841 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-18 06:05:40.252824169 +0000 UTC m=+182.129748264 I0418 06:05:40.270662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:05:40.270773 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-18 06:05:40.270760775 +0000 UTC m=+182.147684870 I0418 06:05:40.411479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:05:40.445166 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-j8z6r" condition "Approved" to 2026-04-18 06:05:40.445152305 +0000 UTC m=+182.322076380 I0418 06:05:40.463861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-j8z6r" condition "Ready" to 2026-04-18 06:05:40.463843275 +0000 UTC m=+182.340767370 I0418 06:05:40.659225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:05:40.687461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gx2lh" condition "Approved" to 2026-04-18 06:05:40.687448765 +0000 UTC m=+182.564372840 I0418 06:05:40.715673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gx2lh" condition "Ready" to 2026-04-18 06:05:40.715652412 +0000 UTC m=+182.592576507 I0418 06:05:40.747051 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:05:40.747033648 +0000 UTC m=+182.623957753 I0418 06:05:40.770257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:05:40.770644 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:05:40.7706357 +0000 UTC m=+182.647559775 I0418 06:05:40.776815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:05:40.834258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:05:40.834330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:05:40.834661 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:05:40.834648277 +0000 UTC m=+182.711572382 I0418 06:05:45.248613 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:05:45.248597035 +0000 UTC m=+187.125521140 I0418 06:05:45.267480 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-j8z6r" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:05:45.267462498 +0000 UTC m=+187.144386603 I0418 06:05:45.303589 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:05:45.303572683 +0000 UTC m=+187.180496748 I0418 06:05:45.323342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:05:45.323665 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:05:45.323657928 +0000 UTC m=+187.200581993 I0418 06:05:45.348976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:05:45.349483 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:05:45.349468951 +0000 UTC m=+187.226393056 I0418 06:05:45.351360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:08:22.323022 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:08:22.322997 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-04-18 06:08:22.322977447 +0000 UTC m=+344.199901522 I0418 06:08:22.323067 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-04-18 06:08:22.323055598 +0000 UTC m=+344.199979693 I0418 06:08:22.345367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:08:22.345559 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-04-18 06:08:22.345424618 +0000 UTC m=+344.222348673 I0418 06:08:22.410930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:08:22.443995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-qmnsv" condition "Approved" to 2026-04-18 06:08:22.443975366 +0000 UTC m=+344.320899461 I0418 06:08:22.463336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-qmnsv" condition "Ready" to 2026-04-18 06:08:22.463324659 +0000 UTC m=+344.340248714 I0418 06:08:22.491073 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:08:22.491058819 +0000 UTC m=+344.367982894 I0418 06:08:22.522148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:08:22.522625 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:08:22.522529379 +0000 UTC m=+344.399453444 I0418 06:08:22.537281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:09:34.076630 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 06:09:34.076605822 +0000 UTC m=+415.953529917 I0418 06:09:34.077362 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:09:34.077440 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 06:09:34.077423477 +0000 UTC m=+415.954347582 E0418 06:09:34.092150 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 06:09:34.092216 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-18 06:09:34.092202096 +0000 UTC m=+415.969126191 E0418 06:09:34.092292 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 06:09:34.095433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:09:34.095542 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 06:09:34.095534758 +0000 UTC m=+415.972458853 E0418 06:09:34.102754 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0418 06:09:34.103585 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 06:09:34.103615 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 06:09:34.103670 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0418 06:09:34.110605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:09:34.134814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xr8hs" condition "Approved" to 2026-04-18 06:09:34.134792046 +0000 UTC m=+416.011716141 I0418 06:09:34.149410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xr8hs" condition "Ready" to 2026-04-18 06:09:34.14940292 +0000 UTC m=+416.026326985 I0418 06:09:34.174145 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:09:34.174123066 +0000 UTC m=+416.051047171 I0418 06:09:34.192821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:09:34.193151 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:09:34.193138714 +0000 UTC m=+416.070062779 I0418 06:09:34.209815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:09:39.103344 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:09:39.103326563 +0000 UTC m=+420.980250658 I0418 06:10:18.337464 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-18 06:10:18.337450081 +0000 UTC m=+460.214374156 I0418 06:10:18.337468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:10:18.337680 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 06:10:18.337666336 +0000 UTC m=+460.214590401 I0418 06:10:18.337816 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 06:10:18.337806558 +0000 UTC m=+460.214730633 I0418 06:10:18.337957 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:10:18.337989 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 06:10:18.337984691 +0000 UTC m=+460.214908766 I0418 06:10:18.338030 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:10:18.338052 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 06:10:18.338049742 +0000 UTC m=+460.214973807 I0418 06:10:18.337816 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-18 06:10:18.337805408 +0000 UTC m=+460.214729493 I0418 06:10:18.374838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:18.374930 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 06:10:18.374920846 +0000 UTC m=+460.251844921 I0418 06:10:18.529986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:18.530028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:18.530087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:10:18.530108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:10:18.530117 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 06:10:18.530109364 +0000 UTC m=+460.407033429 I0418 06:10:18.530138 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 06:10:18.530127304 +0000 UTC m=+460.407051359 I0418 06:10:18.764599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lz77t" condition "Approved" to 2026-04-18 06:10:18.764586063 +0000 UTC m=+460.641510138 I0418 06:10:18.766713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vkqqm" condition "Approved" to 2026-04-18 06:10:18.766705213 +0000 UTC m=+460.643629288 I0418 06:10:18.784225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lz77t" condition "Ready" to 2026-04-18 06:10:18.784211191 +0000 UTC m=+460.661135266 I0418 06:10:18.788543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-vkqqm" condition "Ready" to 2026-04-18 06:10:18.788532334 +0000 UTC m=+460.665456409 I0418 06:10:18.815978 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:10:18.815965669 +0000 UTC m=+460.692889744 I0418 06:10:18.827134 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:10:18.827121659 +0000 UTC m=+460.704045734 I0418 06:10:18.828001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:18.855336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:18.855655 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:10:18.855648875 +0000 UTC m=+460.732572950 I0418 06:10:18.858907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:18.859521 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:10:18.859514228 +0000 UTC m=+460.736438303 I0418 06:10:18.959746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wtv8t" condition "Approved" to 2026-04-18 06:10:18.959726592 +0000 UTC m=+460.836650677 I0418 06:10:19.004986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:19.005413 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:10:19.00540014 +0000 UTC m=+460.882324245 I0418 06:10:19.105649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:19.153845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:19.527625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wtv8t" condition "Ready" to 2026-04-18 06:10:19.52760994 +0000 UTC m=+461.404534015 I0418 06:10:19.873038 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:10:19.873090 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 06:10:19.873081797 +0000 UTC m=+461.750005872 I0418 06:10:19.881425 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:10:19.881412783 +0000 UTC m=+461.758336838 I0418 06:10:20.054907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:20.055409 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:10:20.055397195 +0000 UTC m=+461.932321300 I0418 06:10:20.106514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0418 06:10:20.352833 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-9bwxh\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0418 06:10:20.412540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s6snh" condition "Approved" to 2026-04-18 06:10:20.41251638 +0000 UTC m=+462.289440475 I0418 06:10:20.570570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-s6snh" condition "Ready" to 2026-04-18 06:10:20.570554032 +0000 UTC m=+462.447478127 I0418 06:10:21.280679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:21.308795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:21.353588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:28.086958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:10:28.087051 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls" condition "Issuing" to 2026-04-18 06:10:28.087008286 +0000 UTC m=+469.963932381 I0418 06:10:28.087298 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls" condition "Ready" to 2026-04-18 06:10:28.08726083 +0000 UTC m=+469.964184935 I0418 06:10:28.102785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:28.102858 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:10:28.102888 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls" condition "Issuing" to 2026-04-18 06:10:28.102872604 +0000 UTC m=+469.979796679 I0418 06:10:28.261964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tnsdc-d2d7c" condition "Approved" to 2026-04-18 06:10:28.26194018 +0000 UTC m=+470.138864285 I0418 06:10:28.286501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tnsdc-d2d7c" condition "Ready" to 2026-04-18 06:10:28.286489182 +0000 UTC m=+470.163413257 I0418 06:10:28.321917 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:10:28.321897429 +0000 UTC m=+470.198821504 I0418 06:10:28.341436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:28.341933 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:10:28.341922846 +0000 UTC m=+470.218846921 I0418 06:10:28.351229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:10:28.363942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tnsdc-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:14:02.647205 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-18 06:14:02.647183413 +0000 UTC m=+684.524107488 I0418 06:14:02.647386 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:14:02.647456 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 06:14:02.647441049 +0000 UTC m=+684.524365154 I0418 06:14:02.671900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:14:02.671992 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:14:02.672018 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 06:14:02.672011562 +0000 UTC m=+684.548935667 I0418 06:14:02.847712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:14:02.855521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fvjsg" condition "Approved" to 2026-04-18 06:14:02.855508517 +0000 UTC m=+684.732432592 I0418 06:14:02.877159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fvjsg" condition "Ready" to 2026-04-18 06:14:02.877144366 +0000 UTC m=+684.754068441 I0418 06:14:02.907687 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:14:02.907668261 +0000 UTC m=+684.784592336 I0418 06:14:02.930203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:14:02.930763 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:14:02.930753548 +0000 UTC m=+684.807677623 I0418 06:14:02.934474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:14:02.945310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:14:02.945712 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:14:02.94570288 +0000 UTC m=+684.822626945 I0418 06:17:30.471238 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 06:17:30.471218203 +0000 UTC m=+892.348142308 I0418 06:17:30.471299 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:17:30.471407 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-18 06:17:30.471394697 +0000 UTC m=+892.348318802 I0418 06:17:30.490197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:17:30.490338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:17:30.490381 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-18 06:17:30.490369205 +0000 UTC m=+892.367293310 I0418 06:17:30.719716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:17:30.730239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-h45jn" condition "Approved" to 2026-04-18 06:17:30.730220102 +0000 UTC m=+892.607144187 I0418 06:17:30.752251 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-h45jn" condition "Ready" to 2026-04-18 06:17:30.752236078 +0000 UTC m=+892.629160153 I0418 06:17:30.782877 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:17:30.782853726 +0000 UTC m=+892.659777801 I0418 06:17:30.822733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:17:30.824200 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:17:30.824186566 +0000 UTC m=+892.701110661 I0418 06:17:30.850039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:20:09.950763 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-18 06:20:09.950741585 +0000 UTC m=+1051.827665660 I0418 06:20:09.951160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:20:09.951242 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-18 06:20:09.951231184 +0000 UTC m=+1051.828155289 I0418 06:20:09.971908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:20:09.971979 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:20:09.972001 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-18 06:20:09.971992675 +0000 UTC m=+1051.848916760 I0418 06:20:10.111192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qrwlb" condition "Approved" to 2026-04-18 06:20:10.11117777 +0000 UTC m=+1051.988101845 I0418 06:20:10.130723 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qrwlb" condition "Ready" to 2026-04-18 06:20:10.130707558 +0000 UTC m=+1052.007631633 I0418 06:20:10.156833 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:20:10.15681045 +0000 UTC m=+1052.033734525 I0418 06:20:10.187019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:20:10.187481 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:20:10.187473088 +0000 UTC m=+1052.064397153 I0418 06:20:10.194094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:20:10.201638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:20:10.201844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:20:10.202326 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:20:10.202313358 +0000 UTC m=+1052.079237463 I0418 06:21:27.406865 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-18 06:21:27.406850778 +0000 UTC m=+1129.283774853 I0418 06:21:27.406862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:21:27.406937 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-18 06:21:27.40692827 +0000 UTC m=+1129.283852335 I0418 06:21:27.427915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:21:27.427987 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-18 06:21:27.427979036 +0000 UTC m=+1129.304903111 I0418 06:21:27.576140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:21:27.609867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-z9lbj" condition "Approved" to 2026-04-18 06:21:27.609855353 +0000 UTC m=+1129.486779418 I0418 06:21:27.632488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-z9lbj" condition "Ready" to 2026-04-18 06:21:27.632469509 +0000 UTC m=+1129.509393564 I0418 06:21:27.671113 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:21:27.671090166 +0000 UTC m=+1129.548014251 I0418 06:21:27.695078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:21:27.695407 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:21:27.695400445 +0000 UTC m=+1129.572324520 I0418 06:21:27.714924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:21:27.715477 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:21:27.715463713 +0000 UTC m=+1129.592387808 I0418 06:24:37.725715 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-18 06:24:37.725696959 +0000 UTC m=+1319.602621064 I0418 06:24:37.726077 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:24:37.726171 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-18 06:24:37.726160188 +0000 UTC m=+1319.603084283 I0418 06:24:37.745699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:24:37.745779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 06:24:37.745805 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-18 06:24:37.745798658 +0000 UTC m=+1319.622722753 I0418 06:24:37.880755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 06:24:37.890780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2k8vp" condition "Approved" to 2026-04-18 06:24:37.890762369 +0000 UTC m=+1319.767686444 I0418 06:24:37.916218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2k8vp" condition "Ready" to 2026-04-18 06:24:37.916203979 +0000 UTC m=+1319.793128064 I0418 06:24:37.950684 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 06:24:37.950673097 +0000 UTC m=+1319.827597152 I0418 06:24:37.977569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"