I0327 01:55:10.696750 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0327 01:55:10.696850 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0327 01:55:10.696951 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0327 01:55:10.701753 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0327 01:55:10.702114 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0327 01:55:10.702206 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0327 01:55:10.702367 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0327 01:55:10.704859 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0327 01:55:10.720781 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0327 01:55:10.727130 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0327 01:55:10.732616 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0327 01:55:10.735008 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0327 01:55:10.735067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0327 01:55:10.737603 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0327 01:55:10.740133 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0327 01:55:10.742637 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0327 01:55:10.744839 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0327 01:55:10.750218 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0327 01:55:10.750317 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0327 01:55:10.753773 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0327 01:55:10.756426 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0327 01:55:10.758770 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0327 01:55:10.758796 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0327 01:55:10.758812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0327 01:55:10.761494 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0327 01:55:10.764163 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0327 01:55:10.766113 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0327 01:55:10.767992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0327 01:55:10.770467 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0327 01:55:10.777751 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0327 01:55:10.781319 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0327 01:55:10.781362 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0327 01:55:10.781363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0327 01:55:10.784084 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:55:10.784125 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:55:10.784310 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:55:10.785010 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:55:10.803563 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:55:10.820437 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:55:10.836740 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:55:10.854656 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:55:10.871410 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:55:10.872030 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:55:21.737311 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-27 01:55:21.737293807 +0000 UTC m=+11.092364853 I0327 01:55:22.430572 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-27 01:55:22.430557353 +0000 UTC m=+11.785628389 I0327 01:55:22.430898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 01:55:22.430978 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-27 01:55:22.430966153 +0000 UTC m=+11.786037189 E0327 01:55:22.446486 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0327 01:55:22.446577 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-27 01:55:22.446568874 +0000 UTC m=+11.801639900 E0327 01:55:22.446992 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0327 01:55:22.447953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:55:22.448057 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 01:55:22.448080 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-27 01:55:22.44807432 +0000 UTC m=+11.803145336 E0327 01:55:22.459894 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0327 01:55:22.460365 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 01:55:22.460517 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 01:55:22.460640 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0327 01:55:22.490145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w44lk" condition "Approved" to 2026-03-27 01:55:22.490121233 +0000 UTC m=+11.845192249 I0327 01:55:22.502432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w44lk" condition "Ready" to 2026-03-27 01:55:22.502417796 +0000 UTC m=+11.857488842 I0327 01:55:22.527902 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:55:22.527884153 +0000 UTC m=+11.882955169 I0327 01:55:22.545059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:55:22.545389 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:55:22.54538199 +0000 UTC m=+11.900453006 I0327 01:55:22.554574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:55:22.561368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:55:27.460889 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:55:27.460876117 +0000 UTC m=+16.815947153 I0327 01:55:46.416266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 01:55:46.416359 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-27 01:55:46.41632333 +0000 UTC m=+35.771394376 I0327 01:55:46.417007 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-27 01:55:46.416178447 +0000 UTC m=+35.771249463 I0327 01:55:46.428560 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-27 01:55:46.428547044 +0000 UTC m=+35.783618090 I0327 01:55:46.445517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:55:46.445613 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-27 01:55:46.445603914 +0000 UTC m=+35.800674930 I0327 01:55:46.609075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:55:46.640937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lrvfx" condition "Approved" to 2026-03-27 01:55:46.640916525 +0000 UTC m=+35.995987571 I0327 01:55:46.674744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lrvfx" condition "Ready" to 2026-03-27 01:55:46.674722857 +0000 UTC m=+36.029793893 I0327 01:55:46.707892 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:55:46.707879553 +0000 UTC m=+36.062950569 I0327 01:55:46.734788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:00:13.196638 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-70.nip.io-tls" condition "Ready" to 2026-03-27 02:00:13.196589349 +0000 UTC m=+302.551660355 I0327 02:00:13.196819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:00:13.196842 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-70.nip.io-tls" condition "Issuing" to 2026-03-27 02:00:13.196838175 +0000 UTC m=+302.551909181 I0327 02:00:13.210741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:00:13.210777 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:00:13.210787 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-70.nip.io-tls" condition "Issuing" to 2026-03-27 02:00:13.210783722 +0000 UTC m=+302.565854728 I0327 02:00:13.534556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:00:13.541585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-70.nip.io-tls-56s6w" condition "Approved" to 2026-03-27 02:00:13.541569928 +0000 UTC m=+302.896640974 I0327 02:00:13.564893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-70.nip.io-tls-56s6w" condition "Ready" to 2026-03-27 02:00:13.564870885 +0000 UTC m=+302.919941881 I0327 02:00:13.599134 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:00:13.599110609 +0000 UTC m=+302.954181645 I0327 02:00:13.616983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:00:13.617421 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:00:13.617412538 +0000 UTC m=+302.972483554 I0327 02:00:13.637572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:19.963732 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:01:19.963788 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-27 02:01:19.963763526 +0000 UTC m=+369.318834542 I0327 02:01:19.963826 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-27 02:01:19.963801247 +0000 UTC m=+369.318872323 E0327 02:01:19.978593 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0327 02:01:19.978625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:19.978709 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:01:19.978663 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-27 02:01:19.978651853 +0000 UTC m=+369.333722889 I0327 02:01:19.978730 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-27 02:01:19.978722604 +0000 UTC m=+369.333793620 E0327 02:01:19.978961 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 02:01:19.989438 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0327 02:01:19.989542 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 02:01:19.989587 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 02:01:19.989638 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0327 02:01:20.017651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xsgqj" condition "Approved" to 2026-03-27 02:01:20.017635222 +0000 UTC m=+369.372706258 I0327 02:01:20.032815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xsgqj" condition "Ready" to 2026-03-27 02:01:20.032795085 +0000 UTC m=+369.387866121 I0327 02:01:20.056201 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:20.056126799 +0000 UTC m=+369.411197815 I0327 02:01:20.070841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:20.071151 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:20.071141069 +0000 UTC m=+369.426212085 I0327 02:01:20.087746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:24.990677 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:24.990660246 +0000 UTC m=+374.345731282 I0327 02:02:03.880531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:02:03.880561 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-27 02:02:03.880554058 +0000 UTC m=+413.235625064 I0327 02:02:03.881600 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-27 02:02:03.881595952 +0000 UTC m=+413.236666948 I0327 02:02:03.882310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:02:03.882334 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-27 02:02:03.882325579 +0000 UTC m=+413.237396585 I0327 02:02:03.882538 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-27 02:02:03.882534774 +0000 UTC m=+413.237605780 I0327 02:02:03.896558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:02:03.896606 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-27 02:02:03.896597622 +0000 UTC m=+413.251668658 I0327 02:02:03.896925 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-27 02:02:03.896921189 +0000 UTC m=+413.251992195 I0327 02:02:03.914640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:03.914686 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:02:03.914718 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-27 02:02:03.914710164 +0000 UTC m=+413.269781180 I0327 02:02:03.917155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:03.917217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:02:03.917299 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-27 02:02:03.917233513 +0000 UTC m=+413.272304509 I0327 02:02:03.917472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:03.917597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:02:03.917662 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-27 02:02:03.917649243 +0000 UTC m=+413.272720259 I0327 02:02:04.128845 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p56qs" condition "Approved" to 2026-03-27 02:02:04.128827216 +0000 UTC m=+413.483898262 I0327 02:02:04.150015 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-p56qs" condition "Ready" to 2026-03-27 02:02:04.15000119 +0000 UTC m=+413.505072206 I0327 02:02:04.169432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:04.174387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dlxht" condition "Approved" to 2026-03-27 02:02:04.174367588 +0000 UTC m=+413.529438614 I0327 02:02:04.178612 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:02:04.178599877 +0000 UTC m=+413.533670893 I0327 02:02:04.195704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-dlxht" condition "Ready" to 2026-03-27 02:02:04.195689675 +0000 UTC m=+413.550760681 I0327 02:02:04.206624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:04.250308 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:02:04.250354 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-27 02:02:04.250345779 +0000 UTC m=+413.605416795 I0327 02:02:04.261436 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:02:04.261425728 +0000 UTC m=+413.616496724 I0327 02:02:04.279560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:04.378643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rk6rk" condition "Approved" to 2026-03-27 02:02:04.37862172 +0000 UTC m=+413.733692736 I0327 02:02:04.569733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:04.569994 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:02:04.569987212 +0000 UTC m=+413.925058218 I0327 02:02:04.733655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rk6rk" condition "Ready" to 2026-03-27 02:02:04.733585806 +0000 UTC m=+414.088656842 I0327 02:02:05.072876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:05.422256 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:02:05.422235222 +0000 UTC m=+414.777306238 I0327 02:02:05.527792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pll6p" condition "Approved" to 2026-03-27 02:02:05.527773112 +0000 UTC m=+414.882844138 I0327 02:02:05.622070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:05.622469 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:02:05.6224625 +0000 UTC m=+414.977533516 I0327 02:02:05.870299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pll6p" condition "Ready" to 2026-03-27 02:02:05.870284377 +0000 UTC m=+415.225355413 I0327 02:02:06.320549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:06.521505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:06.773051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:06.821989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:12.460866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:02:12.460915 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls" condition "Issuing" to 2026-03-27 02:02:12.460907396 +0000 UTC m=+421.815978412 I0327 02:02:12.460918 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls" condition "Ready" to 2026-03-27 02:02:12.460891655 +0000 UTC m=+421.815962691 I0327 02:02:12.481014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:12.481122 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls" condition "Ready" to 2026-03-27 02:02:12.481110477 +0000 UTC m=+421.836181513 I0327 02:02:12.603098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:12.637151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fv2qm-tzkgr" condition "Approved" to 2026-03-27 02:02:12.637131384 +0000 UTC m=+421.992202400 I0327 02:02:12.658083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-fv2qm-tzkgr" condition "Ready" to 2026-03-27 02:02:12.658068602 +0000 UTC m=+422.013139618 I0327 02:02:12.692086 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:02:12.691967433 +0000 UTC m=+422.047038449 I0327 02:02:12.714218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:12.714424 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:02:12.714414956 +0000 UTC m=+422.069485962 I0327 02:02:12.739204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-fv2qm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:36.223518 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-27 02:02:36.223458585 +0000 UTC m=+445.578529621 I0327 02:02:36.223764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:02:36.223829 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-27 02:02:36.223815303 +0000 UTC m=+445.578886339 I0327 02:02:36.240143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:36.240260 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-27 02:02:36.240246978 +0000 UTC m=+445.595318024 I0327 02:02:36.501092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:36.539909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xqcjc" condition "Approved" to 2026-03-27 02:02:36.539879778 +0000 UTC m=+445.894950824 I0327 02:02:36.563477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xqcjc" condition "Ready" to 2026-03-27 02:02:36.56346708 +0000 UTC m=+445.918538126 I0327 02:02:36.597233 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:02:36.597209329 +0000 UTC m=+445.952280345 I0327 02:02:36.620538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:36.620958 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:02:36.620947534 +0000 UTC m=+445.976018550 I0327 02:02:36.632769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:02:36.644841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:51.182238 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-27 02:05:51.182201706 +0000 UTC m=+640.537272752 I0327 02:05:51.182285 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:51.182358 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-27 02:05:51.182348419 +0000 UTC m=+640.537419465 I0327 02:05:51.201221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:51.201303 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-27 02:05:51.201295591 +0000 UTC m=+640.556366627 I0327 02:05:51.344372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:51.379806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7mnb6" condition "Approved" to 2026-03-27 02:05:51.379788846 +0000 UTC m=+640.734859852 I0327 02:05:51.398568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7mnb6" condition "Ready" to 2026-03-27 02:05:51.398549592 +0000 UTC m=+640.753620608 I0327 02:05:51.430442 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:51.430424805 +0000 UTC m=+640.785495801 I0327 02:05:51.458057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:51.458680 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:51.458666852 +0000 UTC m=+640.813737898 I0327 02:05:51.485762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:51.486704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:51.487265 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:51.487255737 +0000 UTC m=+640.842326753 I0327 02:08:12.201787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:08:12.202250 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-27 02:08:12.201879941 +0000 UTC m=+781.556950977 I0327 02:08:12.202465 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-27 02:08:12.201665476 +0000 UTC m=+781.556736512 I0327 02:08:12.224050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:08:12.224230 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-27 02:08:12.224219715 +0000 UTC m=+781.579290721 I0327 02:08:12.308534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:08:12.339495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8xlbm" condition "Approved" to 2026-03-27 02:08:12.339477629 +0000 UTC m=+781.694548675 I0327 02:08:12.357153 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8xlbm" condition "Ready" to 2026-03-27 02:08:12.357136984 +0000 UTC m=+781.712208000 I0327 02:08:12.387064 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:08:12.387047325 +0000 UTC m=+781.742118351 I0327 02:08:12.407091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:08:12.471190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:09:10.230977 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:09:10.231087 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-27 02:09:10.231062124 +0000 UTC m=+839.586133170 I0327 02:09:10.231416 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-27 02:09:10.231402992 +0000 UTC m=+839.586474018 I0327 02:09:10.251558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:09:10.251639 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-27 02:09:10.251630433 +0000 UTC m=+839.606701439 I0327 02:09:10.335657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:09:10.377238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-p926k" condition "Approved" to 2026-03-27 02:09:10.377219262 +0000 UTC m=+839.732290298 I0327 02:09:10.401459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-p926k" condition "Ready" to 2026-03-27 02:09:10.401450359 +0000 UTC m=+839.756521365 I0327 02:09:10.429285 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:09:10.429273531 +0000 UTC m=+839.784344567 I0327 02:09:10.455444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:09:10.509982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:07.423482 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-27 02:12:07.422972245 +0000 UTC m=+1016.778043271 I0327 02:12:07.423826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:12:07.423846 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-27 02:12:07.423842416 +0000 UTC m=+1016.778913432 I0327 02:12:07.440283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:07.440387 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:12:07.440414 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-27 02:12:07.440406024 +0000 UTC m=+1016.795477070 I0327 02:12:07.843811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vf6p5" condition "Approved" to 2026-03-27 02:12:07.843796308 +0000 UTC m=+1017.198867344 I0327 02:12:07.868928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vf6p5" condition "Ready" to 2026-03-27 02:12:07.868907556 +0000 UTC m=+1017.223978572 I0327 02:12:07.902342 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:12:07.90232645 +0000 UTC m=+1017.257397486 I0327 02:12:07.929845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:07.930148 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:12:07.930140131 +0000 UTC m=+1017.285211137 I0327 02:12:07.939090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:07.949545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:07.950532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:07.950785 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:12:07.950779485 +0000 UTC m=+1017.305850501