I0317 22:01:18.981604 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0317 22:01:18.981787 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0317 22:01:18.981947 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0317 22:01:18.987038 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0317 22:01:18.987579 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0317 22:01:18.987717 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0317 22:01:18.987887 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0317 22:01:18.991737 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0317 22:01:19.007906 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0317 22:01:19.008143 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0317 22:01:19.014199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0317 22:01:19.019170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0317 22:01:19.021918 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0317 22:01:19.024437 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0317 22:01:19.026840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0317 22:01:19.029286 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0317 22:01:19.029319 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0317 22:01:19.029336 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0317 22:01:19.029434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0317 22:01:19.032956 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0317 22:01:19.040716 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0317 22:01:19.043714 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0317 22:01:19.046098 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0317 22:01:19.049200 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0317 22:01:19.050891 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0317 22:01:19.051009 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0317 22:01:19.053183 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0317 22:01:19.055195 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0317 22:01:19.058144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0317 22:01:19.063821 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0317 22:01:19.066882 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0317 22:01:19.068722 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0317 22:01:19.068987 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0317 22:01:19.072091 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 22:01:19.072218 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 22:01:19.072952 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 22:01:19.073369 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 22:01:19.092079 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 22:01:19.105200 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 22:01:19.106600 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 22:01:19.126467 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 22:01:19.143829 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 22:01:19.161615 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0317 22:01:27.189855 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-17 22:01:27.189828497 +0000 UTC m=+8.244773962 I0317 22:01:27.912048 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-17 22:01:27.912029311 +0000 UTC m=+8.966974806 I0317 22:01:27.912090 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:01:27.912483 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-17 22:01:27.912454542 +0000 UTC m=+8.967400057 E0317 22:01:27.927180 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0317 22:01:27.927342 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-17 22:01:27.927307492 +0000 UTC m=+8.982252977 E0317 22:01:27.927381 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0317 22:01:27.931035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:27.931151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:01:27.931182 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-17 22:01:27.931171858 +0000 UTC m=+8.986117343 E0317 22:01:27.938866 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0317 22:01:27.939247 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0317 22:01:27.939283 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0317 22:01:27.939336 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0317 22:01:27.969445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xgjpc" condition "Approved" to 2026-03-17 22:01:27.969426641 +0000 UTC m=+9.024372106 I0317 22:01:27.979164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xgjpc" condition "Ready" to 2026-03-17 22:01:27.979153573 +0000 UTC m=+9.034099038 I0317 22:01:28.007364 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:01:28.007340045 +0000 UTC m=+9.062285530 I0317 22:01:28.029020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:32.939693 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:01:32.939675512 +0000 UTC m=+13.994620997 I0317 22:01:52.617023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:01:52.617145 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-17 22:01:52.617124083 +0000 UTC m=+33.672069548 I0317 22:01:52.617309 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-17 22:01:52.617107932 +0000 UTC m=+33.672053427 I0317 22:01:52.630824 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-17 22:01:52.630809855 +0000 UTC m=+33.685755320 I0317 22:01:52.646481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:52.646556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:01:52.646582 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-17 22:01:52.64657531 +0000 UTC m=+33.701520775 I0317 22:01:52.828653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:52.841500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-svk6w" condition "Approved" to 2026-03-17 22:01:52.84148386 +0000 UTC m=+33.896429355 I0317 22:01:52.872655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-svk6w" condition "Ready" to 2026-03-17 22:01:52.872631639 +0000 UTC m=+33.927577104 I0317 22:01:52.902404 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:01:52.902385735 +0000 UTC m=+33.957331230 I0317 22:01:52.926512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:52.926968 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:01:52.926958244 +0000 UTC m=+33.981903739 I0317 22:01:52.938044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:52.954094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:01:52.954485 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:01:52.954472934 +0000 UTC m=+34.009418389 I0317 22:03:48.588388 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-17 22:03:48.588340308 +0000 UTC m=+149.643285793 I0317 22:03:48.588999 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:03:48.589113 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-17 22:03:48.589101587 +0000 UTC m=+149.644047052 E0317 22:03:48.604217 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0317 22:03:48.604289 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-17 22:03:48.604279926 +0000 UTC m=+149.659225391 I0317 22:03:48.604341 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0317 22:03:48.608248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:03:48.608338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:03:48.608373 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-17 22:03:48.608366387 +0000 UTC m=+149.663311862 E0317 22:03:48.616478 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0317 22:03:48.616573 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0317 22:03:48.616610 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0317 22:03:48.616647 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0317 22:03:48.618083 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:03:48.618101 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-17 22:03:48.618095293 +0000 UTC m=+149.673040748 I0317 22:03:48.618113 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-17 22:03:48.618105423 +0000 UTC m=+149.673050918 I0317 22:03:48.632256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:03:48.632366 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-17 22:03:48.632354761 +0000 UTC m=+149.687300266 I0317 22:03:48.890218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-mj2rs" condition "Approved" to 2026-03-17 22:03:48.890200284 +0000 UTC m=+149.945145769 I0317 22:03:48.916163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-mj2rs" condition "Ready" to 2026-03-17 22:03:48.916144486 +0000 UTC m=+149.971089951 I0317 22:03:48.945591 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:03:48.945582364 +0000 UTC m=+150.000527829 I0317 22:03:48.964888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:03:48.965366 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:03:48.965356975 +0000 UTC m=+150.020302440 I0317 22:03:48.990560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:03:49.037631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:03:49.071925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dq6nk" condition "Approved" to 2026-03-17 22:03:49.071909172 +0000 UTC m=+150.126854657 I0317 22:03:49.091202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dq6nk" condition "Ready" to 2026-03-17 22:03:49.091183812 +0000 UTC m=+150.146129307 I0317 22:03:53.617897 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:03:53.617881734 +0000 UTC m=+154.672827219 I0317 22:03:53.635058 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-dq6nk" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:03:53.635044281 +0000 UTC m=+154.689989756 I0317 22:03:53.667969 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:03:53.667959764 +0000 UTC m=+154.722905219 I0317 22:03:53.692032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:03:53.745927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:06:30.548878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-74.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:06:30.548925 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-74.nip.io-tls" condition "Issuing" to 2026-03-17 22:06:30.548913973 +0000 UTC m=+311.603859458 I0317 22:06:30.548945 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-74.nip.io-tls" condition "Ready" to 2026-03-17 22:06:30.548922633 +0000 UTC m=+311.603868128 I0317 22:06:30.567843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:06:30.567932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-74.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:06:30.567963 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-74.nip.io-tls" condition "Issuing" to 2026-03-17 22:06:30.567954055 +0000 UTC m=+311.622899550 I0317 22:06:30.817082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:06:30.824591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-74.nip.io-tls-29k2v" condition "Approved" to 2026-03-17 22:06:30.824567638 +0000 UTC m=+311.879513123 I0317 22:06:30.846113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-74.nip.io-tls-29k2v" condition "Ready" to 2026-03-17 22:06:30.846094901 +0000 UTC m=+311.901040386 I0317 22:06:30.871838 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-74.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:06:30.871817354 +0000 UTC m=+311.926762839 I0317 22:06:30.897118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:07:42.243242 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-17 22:07:42.243215993 +0000 UTC m=+383.298161478 I0317 22:07:42.243268 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:07:42.243459 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-17 22:07:42.243417378 +0000 UTC m=+383.298362863 E0317 22:07:42.258366 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0317 22:07:42.258408 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-17 22:07:42.258399501 +0000 UTC m=+383.313344966 E0317 22:07:42.258469 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0317 22:07:42.261572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:07:42.261673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:07:42.261749 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-17 22:07:42.261714742 +0000 UTC m=+383.316660207 E0317 22:07:42.269578 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0317 22:07:42.269757 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0317 22:07:42.269828 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0317 22:07:42.269941 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0317 22:07:42.299029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7qds7" condition "Approved" to 2026-03-17 22:07:42.299010337 +0000 UTC m=+383.353955832 I0317 22:07:42.311646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7qds7" condition "Ready" to 2026-03-17 22:07:42.311628442 +0000 UTC m=+383.366573927 I0317 22:07:42.335068 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:07:42.33504891 +0000 UTC m=+383.389994375 I0317 22:07:42.354821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:07:42.355155 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:07:42.355145418 +0000 UTC m=+383.410090883 I0317 22:07:42.367802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:07:42.368145 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:07:42.368132183 +0000 UTC m=+383.423077668 I0317 22:07:47.270683 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:07:47.270662079 +0000 UTC m=+388.325607574 I0317 22:08:26.566353 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-17 22:08:26.566313067 +0000 UTC m=+427.621258522 I0317 22:08:26.566761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:08:26.566780 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-17 22:08:26.566777548 +0000 UTC m=+427.621722993 I0317 22:08:26.566967 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:08:26.566981 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-17 22:08:26.566978793 +0000 UTC m=+427.621924238 I0317 22:08:26.567173 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-17 22:08:26.567169657 +0000 UTC m=+427.622115102 I0317 22:08:26.572348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:08:26.572359 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-17 22:08:26.572342513 +0000 UTC m=+427.627287968 I0317 22:08:26.572392 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-17 22:08:26.572388384 +0000 UTC m=+427.627333839 I0317 22:08:26.589419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:26.589674 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-17 22:08:26.589659951 +0000 UTC m=+427.644605406 I0317 22:08:26.594778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:26.594875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:08:26.594940 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-17 22:08:26.594932599 +0000 UTC m=+427.649878064 I0317 22:08:26.600559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:26.600647 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-17 22:08:26.600639166 +0000 UTC m=+427.655584621 I0317 22:08:26.712026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:26.712067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:26.745253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hv7zr" condition "Approved" to 2026-03-17 22:08:26.745243932 +0000 UTC m=+427.800189397 I0317 22:08:26.757032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ptt9r" condition "Approved" to 2026-03-17 22:08:26.757018386 +0000 UTC m=+427.811963851 I0317 22:08:26.778256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hv7zr" condition "Ready" to 2026-03-17 22:08:26.778242629 +0000 UTC m=+427.833188094 I0317 22:08:26.782039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ptt9r" condition "Ready" to 2026-03-17 22:08:26.782023721 +0000 UTC m=+427.836969176 I0317 22:08:26.809945 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:08:26.809929874 +0000 UTC m=+427.864875339 I0317 22:08:26.812402 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:08:26.812389204 +0000 UTC m=+427.867334669 I0317 22:08:26.837409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:26.837802 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:08:26.837793308 +0000 UTC m=+427.892738773 I0317 22:08:26.846690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:27.217358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:27.258564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:27.304013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:27.364722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fhpxf" condition "Approved" to 2026-03-17 22:08:27.364705372 +0000 UTC m=+428.419650827 I0317 22:08:27.564884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fhpxf" condition "Ready" to 2026-03-17 22:08:27.56486606 +0000 UTC m=+428.619811555 I0317 22:08:28.157807 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:08:28.15779164 +0000 UTC m=+429.212737095 I0317 22:08:28.257658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:28.258219 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:08:28.258207887 +0000 UTC m=+429.313153382 I0317 22:08:28.503384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:28.556578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:34.394717 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gzqft-tls" condition "Ready" to 2026-03-17 22:08:34.394698935 +0000 UTC m=+435.449644400 I0317 22:08:34.394806 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gzqft-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:08:34.394845 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gzqft-tls" condition "Issuing" to 2026-03-17 22:08:34.394835218 +0000 UTC m=+435.449780683 I0317 22:08:34.411503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gzqft-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gzqft-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:34.411615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gzqft-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:08:34.411654 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gzqft-tls" condition "Issuing" to 2026-03-17 22:08:34.411645375 +0000 UTC m=+435.466590890 I0317 22:08:35.025068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gzqft-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gzqft-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:35.034833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gzqft-n9rlc" condition "Approved" to 2026-03-17 22:08:35.034817456 +0000 UTC m=+436.089762911 I0317 22:08:35.057705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gzqft-n9rlc" condition "Ready" to 2026-03-17 22:08:35.057692848 +0000 UTC m=+436.112638313 I0317 22:08:35.088292 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gzqft-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:08:35.088275918 +0000 UTC m=+436.143221383 I0317 22:08:35.114310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gzqft-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gzqft-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:56.082888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:08:56.082929 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-17 22:08:56.08291996 +0000 UTC m=+457.137865425 I0317 22:08:56.083452 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-17 22:08:56.083446113 +0000 UTC m=+457.138391588 I0317 22:08:56.103728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:56.103794 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-17 22:08:56.103786925 +0000 UTC m=+457.158732370 I0317 22:08:56.319396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:56.348914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-crg5r" condition "Approved" to 2026-03-17 22:08:56.348898518 +0000 UTC m=+457.403844013 I0317 22:08:56.367479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-crg5r" condition "Ready" to 2026-03-17 22:08:56.367466987 +0000 UTC m=+457.422412452 I0317 22:08:56.402525 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:08:56.402508614 +0000 UTC m=+457.457454079 I0317 22:08:56.427401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:56.427768 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:08:56.427759984 +0000 UTC m=+457.482705449 I0317 22:08:56.433768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:56.445004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:56.448384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:08:56.448795 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:08:56.448783932 +0000 UTC m=+457.503729427 I0317 22:12:14.087151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:12:14.087106 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-17 22:12:14.086974721 +0000 UTC m=+655.141920206 I0317 22:12:14.087187 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-17 22:12:14.087176986 +0000 UTC m=+655.142122451 I0317 22:12:14.106184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:12:14.106293 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-17 22:12:14.106282617 +0000 UTC m=+655.161228082 I0317 22:12:14.205500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:12:14.242590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j5tjf" condition "Approved" to 2026-03-17 22:12:14.24256468 +0000 UTC m=+655.297510145 I0317 22:12:14.266444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j5tjf" condition "Ready" to 2026-03-17 22:12:14.264979421 +0000 UTC m=+655.319924886 I0317 22:12:14.325848 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:12:14.325826067 +0000 UTC m=+655.380771532 I0317 22:12:14.361057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:12:14.417040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:14:47.409816 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-17 22:14:47.409736782 +0000 UTC m=+808.464682267 I0317 22:14:47.410295 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:14:47.410324 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-17 22:14:47.410317296 +0000 UTC m=+808.465262791 I0317 22:14:47.435960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:14:47.436067 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-17 22:14:47.436056456 +0000 UTC m=+808.491001911 I0317 22:14:47.562918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:14:47.596615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-rclml" condition "Approved" to 2026-03-17 22:14:47.596594561 +0000 UTC m=+808.651540056 I0317 22:14:47.615796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-rclml" condition "Ready" to 2026-03-17 22:14:47.615789303 +0000 UTC m=+808.670734758 I0317 22:14:47.645721 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:14:47.645703073 +0000 UTC m=+808.700648558 I0317 22:14:47.665199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:14:47.665670 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:14:47.665661044 +0000 UTC m=+808.720606509 I0317 22:14:47.673974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:14:47.693373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:15:54.924613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:15:54.924652 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-17 22:15:54.92464309 +0000 UTC m=+875.979588555 I0317 22:15:54.924713 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-17 22:15:54.924688201 +0000 UTC m=+875.979633666 I0317 22:15:54.942886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:15:54.942954 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:15:54.943009 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-17 22:15:54.943000622 +0000 UTC m=+875.997946087 I0317 22:15:55.374765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:15:55.398376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6fl22" condition "Approved" to 2026-03-17 22:15:55.398348978 +0000 UTC m=+876.453294443 I0317 22:15:55.430204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6fl22" condition "Ready" to 2026-03-17 22:15:55.430185434 +0000 UTC m=+876.485130919 I0317 22:15:55.467031 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:15:55.467018571 +0000 UTC m=+876.521964066 I0317 22:15:55.496648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:15:55.497083 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:15:55.497072935 +0000 UTC m=+876.552018400 I0317 22:15:55.508380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:15:55.521892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:15:55.522320 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:15:55.522306613 +0000 UTC m=+876.577252078 I0317 22:15:55.528807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:18:58.012426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:18:58.012417 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-17 22:18:58.012373559 +0000 UTC m=+1059.067319024 I0317 22:18:58.012458 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-17 22:18:58.012450211 +0000 UTC m=+1059.067395666 I0317 22:18:58.032800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:18:58.032879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0317 22:18:58.032895 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-17 22:18:58.032892093 +0000 UTC m=+1059.087837548 I0317 22:18:58.146845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:18:58.159197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-g9r7x" condition "Approved" to 2026-03-17 22:18:58.159180403 +0000 UTC m=+1059.214125858 I0317 22:18:58.176451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-g9r7x" condition "Ready" to 2026-03-17 22:18:58.176438648 +0000 UTC m=+1059.231384103 I0317 22:18:58.209753 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:18:58.20974611 +0000 UTC m=+1059.264691565 I0317 22:18:58.231957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:18:58.232415 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-17 22:18:58.232405206 +0000 UTC m=+1059.287350671 I0317 22:18:58.246618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0317 22:18:58.263869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"