I0504 01:39:45.734055 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0504 01:39:45.734165 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0504 01:39:45.734240 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0504 01:39:45.738564 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0504 01:39:45.738900 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0504 01:39:45.738983 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0504 01:39:45.739007 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0504 01:39:45.740821 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0504 01:39:45.755633 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0504 01:39:45.758791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0504 01:39:45.761362 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0504 01:39:45.766924 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0504 01:39:45.770524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0504 01:39:45.772839 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0504 01:39:45.772868 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0504 01:39:45.772923 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0504 01:39:45.775454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0504 01:39:45.778009 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0504 01:39:45.780357 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0504 01:39:45.785462 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0504 01:39:45.789402 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0504 01:39:45.789448 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0504 01:39:45.793050 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0504 01:39:45.795129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0504 01:39:45.796942 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0504 01:39:45.798657 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0504 01:39:45.798677 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0504 01:39:45.798779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0504 01:39:45.800561 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0504 01:39:45.800602 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0504 01:39:45.802389 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0504 01:39:45.803910 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0504 01:39:45.809359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0504 01:39:45.812492 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:39:45.812777 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:39:45.813046 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:39:45.813742 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:39:45.831006 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:39:45.841214 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:39:45.854540 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:39:45.876243 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:39:45.888282 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:39:45.908020 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0504 01:39:57.706428 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-04 01:39:57.706408245 +0000 UTC m=+12.006944280 I0504 01:39:58.432045 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:39:58.431997 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-04 01:39:58.431976426 +0000 UTC m=+12.732512451 I0504 01:39:58.432108 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-04 01:39:58.432100098 +0000 UTC m=+12.732636123 E0504 01:39:58.454273 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 01:39:58.454367 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-04 01:39:58.454356635 +0000 UTC m=+12.754892670 E0504 01:39:58.454403 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 01:39:58.458884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:39:58.459056 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-04 01:39:58.458997102 +0000 UTC m=+12.759533137 E0504 01:39:58.537721 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0504 01:39:58.537904 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:39:58.537969 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:39:58.538051 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0504 01:39:58.563860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:39:58.592367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pbtpz" condition "Approved" to 2026-05-04 01:39:58.592350298 +0000 UTC m=+12.892886333 I0504 01:39:58.606856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pbtpz" condition "Ready" to 2026-05-04 01:39:58.606844529 +0000 UTC m=+12.907380534 I0504 01:39:58.630693 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:39:58.630681385 +0000 UTC m=+12.931217390 I0504 01:39:58.648264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:39:58.648744 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:39:58.648733613 +0000 UTC m=+12.949269618 I0504 01:39:58.667434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:40:03.539028 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:40:03.539008547 +0000 UTC m=+17.839544572 I0504 01:40:25.305414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:40:25.305451 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-04 01:40:25.305446316 +0000 UTC m=+39.605982321 I0504 01:40:25.305410 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-04 01:40:25.305368465 +0000 UTC m=+39.605904470 I0504 01:40:25.324748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:40:25.324833 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-04 01:40:25.324823716 +0000 UTC m=+39.625359731 I0504 01:40:25.328722 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-04 01:40:25.328711188 +0000 UTC m=+39.629247193 I0504 01:40:25.491850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:40:25.527638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9vnjw" condition "Approved" to 2026-05-04 01:40:25.527623867 +0000 UTC m=+39.828159902 I0504 01:40:25.559982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9vnjw" condition "Ready" to 2026-05-04 01:40:25.559965588 +0000 UTC m=+39.860501613 I0504 01:40:25.592284 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:40:25.592266839 +0000 UTC m=+39.892802834 I0504 01:40:25.616646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:40:25.679404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:42:08.402017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:42:08.402110 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-04 01:42:08.402086079 +0000 UTC m=+142.702622104 I0504 01:42:08.402338 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-04 01:42:08.402315343 +0000 UTC m=+142.702851368 E0504 01:42:08.417124 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0504 01:42:08.417178 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-04 01:42:08.41716708 +0000 UTC m=+142.717703115 I0504 01:42:08.417246 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0504 01:42:08.419240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:42:08.419340 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-04 01:42:08.41932823 +0000 UTC m=+142.719864255 E0504 01:42:08.425141 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0504 01:42:08.425211 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0504 01:42:08.425238 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0504 01:42:08.425266 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0504 01:42:08.428339 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:42:08.428403 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-04 01:42:08.428392908 +0000 UTC m=+142.728928933 I0504 01:42:08.428902 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-04 01:42:08.428888337 +0000 UTC m=+142.729424342 I0504 01:42:08.446226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:42:08.446301 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:42:08.446320 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-04 01:42:08.446312361 +0000 UTC m=+142.746848366 I0504 01:42:08.531901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:42:08.565686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-f5p74" condition "Approved" to 2026-05-04 01:42:08.565677138 +0000 UTC m=+142.866213133 I0504 01:42:08.593797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-f5p74" condition "Ready" to 2026-05-04 01:42:08.59378253 +0000 UTC m=+142.894318555 I0504 01:42:08.598087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:42:08.605598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-2p5mk" condition "Approved" to 2026-05-04 01:42:08.60558754 +0000 UTC m=+142.906123545 I0504 01:42:08.622147 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:42:08.622140857 +0000 UTC m=+142.922676862 I0504 01:42:08.627377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-2p5mk" condition "Ready" to 2026-05-04 01:42:08.627365314 +0000 UTC m=+142.927901299 I0504 01:42:08.647289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:42:13.425835 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:42:13.425818241 +0000 UTC m=+147.726354276 I0504 01:42:13.443329 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-2p5mk" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:42:13.443305677 +0000 UTC m=+147.743841682 I0504 01:42:13.476399 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:42:13.47637722 +0000 UTC m=+147.776913225 I0504 01:42:13.499107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:42:13.547325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:44:46.394919 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready" to 2026-05-04 01:44:46.394904595 +0000 UTC m=+300.695440600 I0504 01:44:46.395261 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-227.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:44:46.395323 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Issuing" to 2026-05-04 01:44:46.395310583 +0000 UTC m=+300.695846608 I0504 01:44:46.410746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:44:46.410802 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready" to 2026-05-04 01:44:46.410797202 +0000 UTC m=+300.711333197 I0504 01:44:46.680638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:44:46.714594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-227.nip.io-tls-8jfqc" condition "Approved" to 2026-05-04 01:44:46.714566814 +0000 UTC m=+301.015102839 I0504 01:44:46.732629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-227.nip.io-tls-8jfqc" condition "Ready" to 2026-05-04 01:44:46.732617152 +0000 UTC m=+301.033153147 I0504 01:44:46.761235 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:44:46.761221875 +0000 UTC m=+301.061757880 I0504 01:44:46.799039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:44:46.799578 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-227.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:44:46.799569302 +0000 UTC m=+301.100105307 I0504 01:44:46.826833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-227.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-227.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:45:56.501268 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-04 01:45:56.501227679 +0000 UTC m=+370.801763684 I0504 01:45:56.504436 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:45:56.504485 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-04 01:45:56.504475369 +0000 UTC m=+370.805011374 I0504 01:45:56.515838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:45:56.515939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:45:56.516184 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-04 01:45:56.516176407 +0000 UTC m=+370.816712412 E0504 01:45:56.516484 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0504 01:45:56.516536 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-04 01:45:56.516526304 +0000 UTC m=+370.817062329 E0504 01:45:56.516623 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:45:56.526256 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0504 01:45:56.526617 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:45:56.526657 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0504 01:45:56.526730 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0504 01:45:56.551170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:45:56.556674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-p82l4" condition "Approved" to 2026-05-04 01:45:56.556665592 +0000 UTC m=+370.857201597 I0504 01:45:56.569162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-p82l4" condition "Ready" to 2026-05-04 01:45:56.569146314 +0000 UTC m=+370.869682349 I0504 01:45:56.588466 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:45:56.588453844 +0000 UTC m=+370.888989849 I0504 01:45:56.613007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:45:56.613349 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:45:56.613337678 +0000 UTC m=+370.913873703 I0504 01:45:56.626163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:45:56.626521 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:45:56.626511693 +0000 UTC m=+370.927047698 I0504 01:45:56.627908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:01.527325 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:46:01.527310366 +0000 UTC m=+375.827846391 I0504 01:46:38.810122 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-04 01:46:38.810106835 +0000 UTC m=+413.110642840 I0504 01:46:38.810701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:46:38.810743 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-04 01:46:38.810735026 +0000 UTC m=+413.111271071 I0504 01:46:38.810845 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:46:38.810892 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-04 01:46:38.810866608 +0000 UTC m=+413.111402614 I0504 01:46:38.810970 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-04 01:46:38.81096488 +0000 UTC m=+413.111500885 I0504 01:46:38.816408 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-04 01:46:38.816400902 +0000 UTC m=+413.116936907 I0504 01:46:38.816731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:46:38.816753 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-04 01:46:38.816749228 +0000 UTC m=+413.117285233 I0504 01:46:38.841772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:38.841878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:46:38.841919 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-04 01:46:38.841909216 +0000 UTC m=+413.142445251 I0504 01:46:38.845191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:38.845272 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-04 01:46:38.84526464 +0000 UTC m=+413.145800645 I0504 01:46:38.845957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:38.845995 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-04 01:46:38.845991383 +0000 UTC m=+413.146527388 I0504 01:46:39.004647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:39.057317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-68n84" condition "Approved" to 2026-05-04 01:46:39.057304119 +0000 UTC m=+413.357840124 I0504 01:46:39.062048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:39.079804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-68n84" condition "Ready" to 2026-05-04 01:46:39.079791968 +0000 UTC m=+413.380328003 I0504 01:46:39.097468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rhlt6" condition "Approved" to 2026-05-04 01:46:39.097448077 +0000 UTC m=+413.397984082 I0504 01:46:39.110742 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:46:39.110732074 +0000 UTC m=+413.411268069 I0504 01:46:39.121734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rhlt6" condition "Ready" to 2026-05-04 01:46:39.121721959 +0000 UTC m=+413.422257994 I0504 01:46:39.136549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:39.178791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-d4mm5" condition "Approved" to 2026-05-04 01:46:39.178342174 +0000 UTC m=+413.478878179 I0504 01:46:39.196913 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:46:39.196897599 +0000 UTC m=+413.497433604 I0504 01:46:39.653898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-d4mm5" condition "Ready" to 2026-05-04 01:46:39.653888011 +0000 UTC m=+413.954424016 I0504 01:46:39.754135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:39.754495 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:46:39.754490246 +0000 UTC m=+414.055026231 I0504 01:46:40.214396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:40.249889 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:46:40.249871923 +0000 UTC m=+414.550407958 I0504 01:46:40.299503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:40.346677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:40.447444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:40.447818 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:46:40.44781099 +0000 UTC m=+414.748346995 I0504 01:46:40.700244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:47.419165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4xdm6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:46:47.419237 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4xdm6-tls" condition "Ready" to 2026-05-04 01:46:47.419207949 +0000 UTC m=+421.719743954 I0504 01:46:47.419212 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4xdm6-tls" condition "Issuing" to 2026-05-04 01:46:47.419200499 +0000 UTC m=+421.719736534 I0504 01:46:47.438378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4xdm6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4xdm6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:46:47.438492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4xdm6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:46:47.438527 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4xdm6-tls" condition "Issuing" to 2026-05-04 01:46:47.438512949 +0000 UTC m=+421.739048984 I0504 01:46:47.732071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4xdm6-fpw2g" condition "Approved" to 2026-05-04 01:46:47.732055967 +0000 UTC m=+422.032591972 I0504 01:46:47.755754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4xdm6-fpw2g" condition "Ready" to 2026-05-04 01:46:47.755739339 +0000 UTC m=+422.056275354 I0504 01:46:47.791438 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4xdm6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:46:47.791420413 +0000 UTC m=+422.091956408 I0504 01:46:47.814603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4xdm6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4xdm6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:47:12.578601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:47:12.578670 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-04 01:47:12.578649195 +0000 UTC m=+446.879185230 I0504 01:47:12.578679 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-04 01:47:12.578663075 +0000 UTC m=+446.879199080 I0504 01:47:12.592437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:47:12.592509 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-04 01:47:12.592503323 +0000 UTC m=+446.893039318 I0504 01:47:12.863764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:47:12.892081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fk7jc" condition "Approved" to 2026-05-04 01:47:12.892070273 +0000 UTC m=+447.192606278 I0504 01:47:12.913253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-fk7jc" condition "Ready" to 2026-05-04 01:47:12.913241817 +0000 UTC m=+447.213777822 I0504 01:47:12.935470 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:47:12.935458231 +0000 UTC m=+447.235994236 I0504 01:47:12.955946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:50:29.948763 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-04 01:50:29.94874392 +0000 UTC m=+644.249279955 I0504 01:50:29.949140 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:50:29.949210 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-04 01:50:29.949200708 +0000 UTC m=+644.249736743 I0504 01:50:29.966415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:50:29.966495 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-04 01:50:29.966488701 +0000 UTC m=+644.267024706 I0504 01:50:30.179737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:50:30.213946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bhk9k" condition "Approved" to 2026-05-04 01:50:30.213934441 +0000 UTC m=+644.514470426 I0504 01:50:30.235934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bhk9k" condition "Ready" to 2026-05-04 01:50:30.23592324 +0000 UTC m=+644.536459255 I0504 01:50:30.262508 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:50:30.262492316 +0000 UTC m=+644.563028351 I0504 01:50:30.289591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:50:30.290114 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:50:30.290107521 +0000 UTC m=+644.590643516 I0504 01:50:30.310554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:52:51.163159 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:52:51.163475 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-04 01:52:51.163462697 +0000 UTC m=+785.463998722 I0504 01:52:51.163248 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-04 01:52:51.163236223 +0000 UTC m=+785.463772228 I0504 01:52:51.182907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:52:51.183191 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-04 01:52:51.183177994 +0000 UTC m=+785.483714059 I0504 01:52:51.269978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:52:51.299413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4qr5t" condition "Approved" to 2026-05-04 01:52:51.299396896 +0000 UTC m=+785.599932901 I0504 01:52:51.321649 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4qr5t" condition "Ready" to 2026-05-04 01:52:51.32163954 +0000 UTC m=+785.622175535 I0504 01:52:51.350215 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:52:51.350198461 +0000 UTC m=+785.650734496 I0504 01:52:51.371164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:52:51.371667 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:52:51.371657901 +0000 UTC m=+785.672193926 I0504 01:52:51.394360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:53:52.972171 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-04 01:53:52.972145692 +0000 UTC m=+847.272681697 I0504 01:53:52.972236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:53:52.972275 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-04 01:53:52.972271034 +0000 UTC m=+847.272807039 I0504 01:53:52.989063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:53:52.989275 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-04 01:53:52.98926389 +0000 UTC m=+847.289799915 I0504 01:53:53.392678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:53:53.424548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-szs6r" condition "Approved" to 2026-05-04 01:53:53.424533688 +0000 UTC m=+847.725069693 I0504 01:53:53.447763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-szs6r" condition "Ready" to 2026-05-04 01:53:53.447750071 +0000 UTC m=+847.748286066 I0504 01:53:53.484185 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:53:53.484174009 +0000 UTC m=+847.784710014 I0504 01:53:53.505004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:53:53.505312 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:53:53.505306592 +0000 UTC m=+847.805842587 I0504 01:53:53.531298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:53:53.531723 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:53:53.531712273 +0000 UTC m=+847.832248298 I0504 01:53:53.536885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:56:52.416384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 01:56:52.416459 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-04 01:56:52.416449339 +0000 UTC m=+1026.716985374 I0504 01:56:52.416572 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-04 01:56:52.416551481 +0000 UTC m=+1026.717087536 I0504 01:56:52.431576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:56:52.431665 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-04 01:56:52.431657851 +0000 UTC m=+1026.732193876 I0504 01:56:52.692887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 01:56:52.723005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-f9qjq" condition "Approved" to 2026-05-04 01:56:52.722983619 +0000 UTC m=+1027.023519664 I0504 01:56:52.745453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-f9qjq" condition "Ready" to 2026-05-04 01:56:52.745436385 +0000 UTC m=+1027.045972410 I0504 01:56:52.775909 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 01:56:52.775868589 +0000 UTC m=+1027.076427434 I0504 01:56:52.794636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:03:09.908695 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-04 02:03:09.908673956 +0000 UTC m=+1404.209209981 I0504 02:03:09.908708 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 02:03:09.909143 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-04 02:03:09.909123694 +0000 UTC m=+1404.209659719 I0504 02:03:09.926299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:03:09.926385 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 02:03:09.926411 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-04 02:03:09.926404385 +0000 UTC m=+1404.226940400 I0504 02:03:10.338861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-85knh" condition "Approved" to 2026-05-04 02:03:10.338841875 +0000 UTC m=+1404.639377900 I0504 02:03:10.356915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-85knh" condition "Ready" to 2026-05-04 02:03:10.356904929 +0000 UTC m=+1404.657440934 I0504 02:03:10.383454 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 02:03:10.38344193 +0000 UTC m=+1404.683977935 I0504 02:03:10.406349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:03:10.407018 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 02:03:10.407006497 +0000 UTC m=+1404.707542502 I0504 02:03:10.422850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:03:10.425656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:03:10.426043 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 02:03:10.426034289 +0000 UTC m=+1404.726570284 I0504 02:04:37.783736 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-04 02:04:37.78370747 +0000 UTC m=+1492.084243475 I0504 02:04:37.783734 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 02:04:37.783918 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-04 02:04:37.783909313 +0000 UTC m=+1492.084445328 I0504 02:04:37.804075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:04:37.804213 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0504 02:04:37.804253 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-04 02:04:37.80424189 +0000 UTC m=+1492.104777925 I0504 02:04:37.911264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:04:37.931370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-qr9dc" condition "Approved" to 2026-05-04 02:04:37.931347041 +0000 UTC m=+1492.231883046 I0504 02:04:37.951251 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-qr9dc" condition "Ready" to 2026-05-04 02:04:37.95123713 +0000 UTC m=+1492.251773145 I0504 02:04:37.980679 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 02:04:37.980666614 +0000 UTC m=+1492.281202629 I0504 02:04:38.007333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:04:38.007810 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 02:04:38.007800756 +0000 UTC m=+1492.308336761 I0504 02:04:38.013029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:04:38.030495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0504 02:04:38.030846 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-04 02:04:38.030837432 +0000 UTC m=+1492.331373437