I0407 05:52:23.473751 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 05:52:23.473859 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 05:52:23.474060 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 05:52:23.480479 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 05:52:23.480933 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 05:52:23.480995 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 05:52:23.481024 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 05:52:23.484038 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 05:52:23.498635 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 05:52:23.503335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 05:52:23.507430 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 05:52:23.507470 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 05:52:23.507524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 05:52:23.513840 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 05:52:23.517850 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 05:52:23.521066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 05:52:23.522670 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 05:52:23.522732 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 05:52:23.524472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 05:52:23.526344 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 05:52:23.529675 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 05:52:23.532543 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 05:52:23.532640 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 05:52:23.534756 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 05:52:23.537060 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 05:52:23.539198 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 05:52:23.541237 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 05:52:23.543461 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 05:52:23.545876 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 05:52:23.545899 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 05:52:23.545980 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 05:52:23.548399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 05:52:23.553463 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 05:52:23.555490 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:52:23.556918 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:52:23.557013 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:52:23.557690 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:52:23.557915 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:52:23.558000 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:52:23.558280 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:52:23.558281 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:52:23.558706 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:52:23.644521 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 05:52:34.724287 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 05:52:34.724272876 +0000 UTC m=+11.283168622 I0407 05:52:35.437325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:52:35.437376 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 05:52:35.437370024 +0000 UTC m=+11.996265770 I0407 05:52:35.437370 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 05:52:35.437356974 +0000 UTC m=+11.996252740 E0407 05:52:35.451103 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 05:52:35.451158 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 05:52:35.451151976 +0000 UTC m=+12.010047732 E0407 05:52:35.451209 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 05:52:35.452751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:52:35.452982 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 05:52:35.452969896 +0000 UTC m=+12.011865672 E0407 05:52:35.459575 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 05:52:35.459657 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 05:52:35.459692 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 05:52:35.459729 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 05:52:35.471785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:52:35.491171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rsmkz" condition "Approved" to 2026-04-07 05:52:35.491164025 +0000 UTC m=+12.050059761 I0407 05:52:35.502568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rsmkz" condition "Ready" to 2026-04-07 05:52:35.50255002 +0000 UTC m=+12.061445746 I0407 05:52:35.525454 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:52:35.525437254 +0000 UTC m=+12.084333030 I0407 05:52:35.544054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:52:35.544647 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:52:35.544635616 +0000 UTC m=+12.103531362 I0407 05:52:35.563337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:52:35.564868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:52:40.460265 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:52:40.460249506 +0000 UTC m=+17.019145262 I0407 05:52:58.530791 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 05:52:58.53070899 +0000 UTC m=+35.089604766 I0407 05:52:58.531265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:52:58.531385 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 05:52:58.531311047 +0000 UTC m=+35.090206823 I0407 05:52:58.544403 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 05:52:58.54438812 +0000 UTC m=+35.103283886 I0407 05:52:58.550329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:52:58.550495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:52:58.550581 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 05:52:58.550567856 +0000 UTC m=+35.109463632 I0407 05:52:58.910117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gpbmx" condition "Approved" to 2026-04-07 05:52:58.910097528 +0000 UTC m=+35.468993314 I0407 05:52:58.940664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gpbmx" condition "Ready" to 2026-04-07 05:52:58.94064816 +0000 UTC m=+35.499543926 I0407 05:52:58.970430 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:52:58.970419129 +0000 UTC m=+35.529314865 I0407 05:52:58.994816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:54:40.656686 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 05:54:40.65667235 +0000 UTC m=+137.215568086 I0407 05:54:40.657020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:54:40.657035 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 05:54:40.65703292 +0000 UTC m=+137.215928656 E0407 05:54:40.670894 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 05:54:40.670934 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-07 05:54:40.670926275 +0000 UTC m=+137.229822021 I0407 05:54:40.670978 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 05:54:40.672725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:54:40.672788 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 05:54:40.672783277 +0000 UTC m=+137.231679023 E0407 05:54:40.679550 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0407 05:54:40.679625 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 05:54:40.679654 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 05:54:40.679729 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0407 05:54:40.684354 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:54:40.684385 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 05:54:40.684377798 +0000 UTC m=+137.243273534 I0407 05:54:40.684517 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 05:54:40.684504121 +0000 UTC m=+137.243399867 I0407 05:54:40.697616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:54:40.697724 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 05:54:40.697712218 +0000 UTC m=+137.256608004 I0407 05:54:40.849105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:54:40.877799 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-zr9js" condition "Approved" to 2026-04-07 05:54:40.87778338 +0000 UTC m=+137.436679126 I0407 05:54:40.911413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-zr9js" condition "Ready" to 2026-04-07 05:54:40.911398882 +0000 UTC m=+137.470294628 I0407 05:54:40.941569 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:54:40.941551288 +0000 UTC m=+137.500447064 I0407 05:54:40.959981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:54:40.960316 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:54:40.960309558 +0000 UTC m=+137.519205304 I0407 05:54:40.980227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:54:40.980522 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:54:40.980513518 +0000 UTC m=+137.539409274 I0407 05:54:41.039284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:54:41.065700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dzbtd" condition "Approved" to 2026-04-07 05:54:41.065684939 +0000 UTC m=+137.624580705 I0407 05:54:41.081376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dzbtd" condition "Ready" to 2026-04-07 05:54:41.081365664 +0000 UTC m=+137.640261410 I0407 05:54:45.680893 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:54:45.68087921 +0000 UTC m=+142.239774976 I0407 05:54:45.698282 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-dzbtd" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:54:45.698266372 +0000 UTC m=+142.257162138 I0407 05:54:45.728291 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:54:45.728279074 +0000 UTC m=+142.287174810 I0407 05:54:45.746477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:54:45.746776 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:54:45.746770047 +0000 UTC m=+142.305665783 I0407 05:54:45.766235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:54:45.766550 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:54:45.766540785 +0000 UTC m=+142.325436531 I0407 05:57:12.211045 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-69.nip.io-tls" condition "Ready" to 2026-04-07 05:57:12.211030939 +0000 UTC m=+288.769926695 I0407 05:57:12.211550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-69.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:57:12.211654 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-69.nip.io-tls" condition "Issuing" to 2026-04-07 05:57:12.211642896 +0000 UTC m=+288.770538662 I0407 05:57:12.228228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-69.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-69.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:57:12.228299 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-69.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:57:12.228354 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-69.nip.io-tls" condition "Issuing" to 2026-04-07 05:57:12.228347605 +0000 UTC m=+288.787243351 I0407 05:57:12.681978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-69.nip.io-tls-h4m67" condition "Approved" to 2026-04-07 05:57:12.681958839 +0000 UTC m=+289.240854605 I0407 05:57:12.702739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-69.nip.io-tls-h4m67" condition "Ready" to 2026-04-07 05:57:12.70272798 +0000 UTC m=+289.261623726 I0407 05:57:12.735743 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-69.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:57:12.735733297 +0000 UTC m=+289.294629043 I0407 05:57:12.754379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-69.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-69.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:57:12.754700 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-69.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:57:12.754688267 +0000 UTC m=+289.313584014 I0407 05:57:12.780895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-69.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-69.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:58:22.459929 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 05:58:22.459878446 +0000 UTC m=+359.018774222 I0407 05:58:22.460469 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:58:22.460576 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 05:58:22.460556264 +0000 UTC m=+359.019452040 E0407 05:58:22.474626 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 05:58:22.474668 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 05:58:22.47465951 +0000 UTC m=+359.033555276 E0407 05:58:22.474910 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 05:58:22.476019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:58:22.476121 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 05:58:22.47611011 +0000 UTC m=+359.035005856 E0407 05:58:22.483571 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 05:58:22.483665 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 05:58:22.483740 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 05:58:22.483808 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 05:58:22.491475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:58:22.512179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dm7dw" condition "Approved" to 2026-04-07 05:58:22.512163527 +0000 UTC m=+359.071059303 I0407 05:58:22.525727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dm7dw" condition "Ready" to 2026-04-07 05:58:22.525715168 +0000 UTC m=+359.084610914 I0407 05:58:22.544875 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:58:22.544862962 +0000 UTC m=+359.103758708 I0407 05:58:22.561451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:58:22.561784 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:58:22.561773285 +0000 UTC m=+359.120669051 I0407 05:58:22.576778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:58:22.577636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:58:27.485109 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:58:27.485091002 +0000 UTC m=+364.043986778 I0407 05:59:04.849264 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 05:59:04.849249751 +0000 UTC m=+401.408145487 I0407 05:59:04.849972 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:59:04.850002 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 05:59:04.849998822 +0000 UTC m=+401.408894558 I0407 05:59:04.855807 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 05:59:04.855775 +0000 UTC m=+401.414670736 I0407 05:59:04.856660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:59:04.856686 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 05:59:04.856682765 +0000 UTC m=+401.415578501 I0407 05:59:04.860806 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 05:59:04.860800517 +0000 UTC m=+401.419696253 I0407 05:59:04.861448 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:59:04.861468 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 05:59:04.861464415 +0000 UTC m=+401.420360141 I0407 05:59:04.878120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:04.878221 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:59:04.878283 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 05:59:04.878244525 +0000 UTC m=+401.437140271 I0407 05:59:04.884842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:04.884911 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 05:59:04.884901837 +0000 UTC m=+401.443797613 I0407 05:59:04.890608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:04.890698 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 05:59:04.890689056 +0000 UTC m=+401.449584792 I0407 05:59:04.981251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:05.014138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nc4j7" condition "Approved" to 2026-04-07 05:59:05.014116684 +0000 UTC m=+401.573012510 I0407 05:59:05.031899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nc4j7" condition "Ready" to 2026-04-07 05:59:05.031888481 +0000 UTC m=+401.590784217 I0407 05:59:05.062060 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:59:05.062045096 +0000 UTC m=+401.620940862 I0407 05:59:05.075282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k4b5j" condition "Approved" to 2026-04-07 05:59:05.075267648 +0000 UTC m=+401.634163394 I0407 05:59:05.083307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:05.083838 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:59:05.083832053 +0000 UTC m=+401.642727789 I0407 05:59:05.092405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:05.094838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-k4b5j" condition "Ready" to 2026-04-07 05:59:05.094827624 +0000 UTC m=+401.653723360 I0407 05:59:05.105298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:05.246324 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:59:05.24630977 +0000 UTC m=+401.805205516 I0407 05:59:05.396567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:05.397045 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:59:05.397034106 +0000 UTC m=+401.955929882 I0407 05:59:05.445810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:05.792689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:05.846518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:05.899930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2kt6k" condition "Approved" to 2026-04-07 05:59:05.899907891 +0000 UTC m=+402.458803697 I0407 05:59:06.157894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-2kt6k" condition "Ready" to 2026-04-07 05:59:06.157880513 +0000 UTC m=+402.716776279 I0407 05:59:06.508093 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:59:06.508080059 +0000 UTC m=+403.066975785 I0407 05:59:06.597931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:06.598232 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:59:06.598224817 +0000 UTC m=+403.157120553 I0407 05:59:06.797750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:12.356883 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xcsdp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:59:12.356981 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xcsdp-tls" condition "Issuing" to 2026-04-07 05:59:12.356966842 +0000 UTC m=+408.915862618 I0407 05:59:12.357415 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xcsdp-tls" condition "Ready" to 2026-04-07 05:59:12.357397514 +0000 UTC m=+408.916293260 I0407 05:59:12.372045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xcsdp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xcsdp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:12.372176 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xcsdp-tls" condition "Ready" to 2026-04-07 05:59:12.372168838 +0000 UTC m=+408.931064574 I0407 05:59:12.788518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xcsdp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xcsdp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:12.858945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xcsdp-mf6cs" condition "Approved" to 2026-04-07 05:59:12.858930802 +0000 UTC m=+409.417826568 I0407 05:59:12.876415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xcsdp-mf6cs" condition "Ready" to 2026-04-07 05:59:12.876404511 +0000 UTC m=+409.435300257 I0407 05:59:12.904030 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xcsdp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:59:12.904014407 +0000 UTC m=+409.462910153 I0407 05:59:12.924681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xcsdp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xcsdp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:37.854902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 05:59:37.854935 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 05:59:37.854930829 +0000 UTC m=+434.413826565 I0407 05:59:37.854902 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 05:59:37.854890898 +0000 UTC m=+434.413786634 I0407 05:59:37.867827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:37.867917 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 05:59:37.867908704 +0000 UTC m=+434.426804450 I0407 05:59:37.948705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:37.980155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mvw8v" condition "Approved" to 2026-04-07 05:59:37.980138351 +0000 UTC m=+434.539034087 I0407 05:59:38.000677 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mvw8v" condition "Ready" to 2026-04-07 05:59:38.000660921 +0000 UTC m=+434.559556717 I0407 05:59:38.029753 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:59:38.029738666 +0000 UTC m=+434.588634412 I0407 05:59:38.047677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:38.048134 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 05:59:38.048122918 +0000 UTC m=+434.607018684 I0407 05:59:38.065255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 05:59:38.065751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:02:54.226013 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 06:02:54.225998917 +0000 UTC m=+630.784894663 I0407 06:02:54.226003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 06:02:54.226081 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 06:02:54.226071899 +0000 UTC m=+630.784967675 I0407 06:02:54.242734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:02:54.242874 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 06:02:54.242933 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 06:02:54.242923429 +0000 UTC m=+630.801819205 I0407 06:02:54.577549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kf2tj" condition "Approved" to 2026-04-07 06:02:54.577534691 +0000 UTC m=+631.136430447 I0407 06:02:54.595039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-kf2tj" condition "Ready" to 2026-04-07 06:02:54.595025028 +0000 UTC m=+631.153920774 I0407 06:02:54.634592 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 06:02:54.634577527 +0000 UTC m=+631.193473283 I0407 06:02:54.659522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:02:54.659908 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 06:02:54.659900617 +0000 UTC m=+631.218796363 I0407 06:02:54.678310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:02:54.678625 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 06:02:54.678616957 +0000 UTC m=+631.237512703 I0407 06:05:17.336452 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 06:05:17.336436301 +0000 UTC m=+773.895332077 I0407 06:05:17.336803 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 06:05:17.336843 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 06:05:17.336834622 +0000 UTC m=+773.895730368 I0407 06:05:17.357188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:05:17.357297 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 06:05:17.357336 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 06:05:17.35731915 +0000 UTC m=+773.916214916 I0407 06:05:17.547340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jcksv" condition "Approved" to 2026-04-07 06:05:17.547331535 +0000 UTC m=+774.106227271 I0407 06:05:17.561997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jcksv" condition "Ready" to 2026-04-07 06:05:17.561990434 +0000 UTC m=+774.120886170 I0407 06:05:17.595149 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 06:05:17.595135599 +0000 UTC m=+774.154031335 I0407 06:05:17.619273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:06:18.709573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 06:06:18.709580 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 06:06:18.70955936 +0000 UTC m=+835.268455106 I0407 06:06:18.709621 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 06:06:18.709609411 +0000 UTC m=+835.268505177 I0407 06:06:18.730048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:06:18.730140 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 06:06:18.730127732 +0000 UTC m=+835.289023488 I0407 06:06:18.905032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:06:18.945813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-85hlp" condition "Approved" to 2026-04-07 06:06:18.945802434 +0000 UTC m=+835.504698180 I0407 06:06:18.973920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-85hlp" condition "Ready" to 2026-04-07 06:06:18.973901871 +0000 UTC m=+835.532797637 I0407 06:06:19.006365 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 06:06:19.006349157 +0000 UTC m=+835.565244933 I0407 06:06:19.030975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:06:19.031386 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 06:06:19.031376421 +0000 UTC m=+835.590272167 I0407 06:06:19.060556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:06:19.061117 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 06:06:19.061107793 +0000 UTC m=+835.620003549 I0407 06:06:19.063388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:09:14.628161 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 06:09:14.628143933 +0000 UTC m=+1011.187039679 I0407 06:09:14.628199 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 06:09:14.628254 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 06:09:14.628247485 +0000 UTC m=+1011.187143221 I0407 06:09:14.647964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:09:14.648051 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 06:09:14.648068 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 06:09:14.648061876 +0000 UTC m=+1011.206957622 I0407 06:09:14.805844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mxss4" condition "Approved" to 2026-04-07 06:09:14.805833415 +0000 UTC m=+1011.364729161 I0407 06:09:14.822801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mxss4" condition "Ready" to 2026-04-07 06:09:14.822790808 +0000 UTC m=+1011.381686554 I0407 06:09:14.852404 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 06:09:14.852389267 +0000 UTC m=+1011.411285023 I0407 06:09:14.875598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:09:14.876306 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 06:09:14.87629934 +0000 UTC m=+1011.435195086 I0407 06:09:14.889692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 06:09:14.889994 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 06:09:14.889986103 +0000 UTC m=+1011.448881849 I0407 06:09:14.895587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"