I0409 02:07:23.399894 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0409 02:07:23.400069 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0409 02:07:23.400173 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0409 02:07:23.407773 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0409 02:07:23.408754 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0409 02:07:23.408838 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0409 02:07:23.408879 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0409 02:07:23.413088 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0409 02:07:23.426959 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0409 02:07:23.433571 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0409 02:07:23.436304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0409 02:07:23.440838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0409 02:07:23.445926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0409 02:07:23.449245 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0409 02:07:23.449301 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0409 02:07:23.451849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0409 02:07:23.454429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0409 02:07:23.456977 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0409 02:07:23.459941 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0409 02:07:23.459967 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0409 02:07:23.460082 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0409 02:07:23.461923 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0409 02:07:23.462088 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0409 02:07:23.468041 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0409 02:07:23.471053 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0409 02:07:23.473555 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0409 02:07:23.476106 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0409 02:07:23.476148 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0409 02:07:23.476198 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0409 02:07:23.478871 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0409 02:07:23.481215 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0409 02:07:23.483339 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0409 02:07:23.485286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0409 02:07:23.487266 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:23.488363 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:23.488408 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:23.506150 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:23.518289 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:23.541768 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:23.554886 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:23.574058 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:23.574914 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:23.592677 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:37.258981 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 02:07:37.258929727 +0000 UTC m=+13.894856447 I0409 02:07:38.007372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:38.007438 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 02:07:38.007425958 +0000 UTC m=+14.643352678 I0409 02:07:38.007540 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 02:07:38.007518021 +0000 UTC m=+14.643444751 I0409 02:07:38.078614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:38.078705 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 02:07:38.078697773 +0000 UTC m=+14.714624463 E0409 02:07:38.080577 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:07:38.080707 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 02:07:38.080694087 +0000 UTC m=+14.716620797 E0409 02:07:38.080756 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:07:38.108981 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0409 02:07:38.109157 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:07:38.109211 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:07:38.109260 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0409 02:07:38.112057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:38.178931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nq9sw" condition "Approved" to 2026-04-09 02:07:38.178918809 +0000 UTC m=+14.814845499 I0409 02:07:38.236959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nq9sw" condition "Ready" to 2026-04-09 02:07:38.236942923 +0000 UTC m=+14.872869643 I0409 02:07:38.434439 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:38.43442907 +0000 UTC m=+15.070355750 I0409 02:07:38.571534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:38.571947 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:38.57193108 +0000 UTC m=+15.207857800 I0409 02:07:38.615837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:38.624627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:43.110393 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:43.110371171 +0000 UTC m=+19.746297901 I0409 02:08:09.508200 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 02:08:09.508170758 +0000 UTC m=+46.144097478 I0409 02:08:09.508821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:08:09.508861 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 02:08:09.50885407 +0000 UTC m=+46.144780790 I0409 02:08:09.521100 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 02:08:09.521082639 +0000 UTC m=+46.157009339 I0409 02:08:09.536896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:08:09.537037 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 02:08:09.537023695 +0000 UTC m=+46.172950405 I0409 02:08:09.752839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:08:09.805341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dhk48" condition "Approved" to 2026-04-09 02:08:09.80532991 +0000 UTC m=+46.441256590 I0409 02:08:09.888022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dhk48" condition "Ready" to 2026-04-09 02:08:09.888004293 +0000 UTC m=+46.523931013 I0409 02:08:09.955458 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:08:09.955441399 +0000 UTC m=+46.591368089 I0409 02:08:09.974415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:08:09.974708 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:08:09.974702655 +0000 UTC m=+46.610629335 I0409 02:08:10.007076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:08:10.007536 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:08:10.007527294 +0000 UTC m=+46.643453984 I0409 02:10:36.984438 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:10:36.984484 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-09 02:10:36.984479612 +0000 UTC m=+193.620406282 I0409 02:10:36.984815 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-09 02:10:36.984812173 +0000 UTC m=+193.620738853 I0409 02:10:36.997058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:10:36.997181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:10:36.997221 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-09 02:10:36.997211822 +0000 UTC m=+193.633138532 E0409 02:10:36.997238 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 02:10:36.997313 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-09 02:10:36.997304875 +0000 UTC m=+193.633231585 I0409 02:10:36.997341 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0409 02:10:37.006656 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0409 02:10:37.006947 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 02:10:37.007019 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0409 02:10:37.007329 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0409 02:10:37.011964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:10:37.011988 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-09 02:10:37.011973165 +0000 UTC m=+193.647899855 I0409 02:10:37.011999 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-09 02:10:37.011989366 +0000 UTC m=+193.647916056 I0409 02:10:37.025542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:10:37.025627 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:10:37.025652 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-09 02:10:37.025645244 +0000 UTC m=+193.661571934 I0409 02:10:37.188358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pk76h" condition "Approved" to 2026-04-09 02:10:37.188344841 +0000 UTC m=+193.824271551 I0409 02:10:37.208349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:10:37.216364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pk76h" condition "Ready" to 2026-04-09 02:10:37.21635374 +0000 UTC m=+193.852280430 I0409 02:10:37.219947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bpz46" condition "Approved" to 2026-04-09 02:10:37.219936812 +0000 UTC m=+193.855863512 I0409 02:10:37.237599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bpz46" condition "Ready" to 2026-04-09 02:10:37.237581136 +0000 UTC m=+193.873507866 I0409 02:10:37.246283 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:10:37.246273389 +0000 UTC m=+193.882200079 I0409 02:10:37.267798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:10:37.268360 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:10:37.268344701 +0000 UTC m=+193.904271411 I0409 02:10:37.277426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:10:37.284275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:10:42.008138 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:10:42.008124045 +0000 UTC m=+198.644050765 I0409 02:10:42.022013 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-bpz46" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:10:42.021998441 +0000 UTC m=+198.657925131 I0409 02:10:42.050962 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:10:42.050945119 +0000 UTC m=+198.686871839 I0409 02:10:42.067193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:10:42.068067 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:10:42.068055976 +0000 UTC m=+198.703982696 I0409 02:10:42.083581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:12.056613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-74.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:13:12.056667 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Issuing" to 2026-04-09 02:13:12.056651809 +0000 UTC m=+348.692578499 I0409 02:13:12.056702 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready" to 2026-04-09 02:13:12.05668055 +0000 UTC m=+348.692607260 I0409 02:13:12.073627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:12.073685 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-74.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:13:12.073704 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Issuing" to 2026-04-09 02:13:12.073697433 +0000 UTC m=+348.709624123 I0409 02:13:12.254383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-74.nip.io-tls-8nkgj" condition "Approved" to 2026-04-09 02:13:12.254365282 +0000 UTC m=+348.890291982 I0409 02:13:12.275234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-74.nip.io-tls-8nkgj" condition "Ready" to 2026-04-09 02:13:12.275218538 +0000 UTC m=+348.911145248 I0409 02:13:12.304640 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:13:12.304623487 +0000 UTC m=+348.940550177 I0409 02:13:12.330438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:12.372583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:22.670814 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:22.670848 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 02:14:22.670829365 +0000 UTC m=+419.306756045 I0409 02:14:22.670891 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 02:14:22.670880676 +0000 UTC m=+419.306807386 E0409 02:14:22.685219 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:14:22.685262 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-09 02:14:22.685254212 +0000 UTC m=+419.321180902 E0409 02:14:22.685307 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:14:22.687212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:22.687323 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 02:14:22.687314349 +0000 UTC m=+419.323241039 E0409 02:14:22.695395 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0409 02:14:22.695679 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:14:22.695750 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:14:22.695839 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0409 02:14:22.706918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:22.729057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4mxxp" condition "Approved" to 2026-04-09 02:14:22.72904332 +0000 UTC m=+419.364970010 I0409 02:14:22.741237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4mxxp" condition "Ready" to 2026-04-09 02:14:22.741222604 +0000 UTC m=+419.377149324 I0409 02:14:22.766523 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:22.766503893 +0000 UTC m=+419.402430613 I0409 02:14:22.795814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:22.796223 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:22.796215615 +0000 UTC m=+419.432142305 I0409 02:14:22.813836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:22.814235 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:22.814222598 +0000 UTC m=+419.450149318 I0409 02:14:27.696162 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:27.696142704 +0000 UTC m=+424.332069424 I0409 02:15:07.941376 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 02:15:07.941362543 +0000 UTC m=+464.577289233 I0409 02:15:07.941541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:15:07.941613 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 02:15:07.941605781 +0000 UTC m=+464.577532461 I0409 02:15:07.941862 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 02:15:07.941856289 +0000 UTC m=+464.577782999 I0409 02:15:07.941936 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:15:07.941975 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 02:15:07.941966732 +0000 UTC m=+464.577893402 I0409 02:15:07.942258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:15:07.942277 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 02:15:07.942274272 +0000 UTC m=+464.578200952 I0409 02:15:07.942590 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 02:15:07.942586022 +0000 UTC m=+464.578512692 I0409 02:15:07.993650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:07.993776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:07.993854 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:15:07.993871 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 02:15:07.9938666 +0000 UTC m=+464.629793280 I0409 02:15:07.994160 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 02:15:07.994156289 +0000 UTC m=+464.630082969 I0409 02:15:07.995675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:07.995727 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:15:07.995739 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 02:15:07.99573659 +0000 UTC m=+464.631663270 I0409 02:15:08.135063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:08.221177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-s6hd4" condition "Approved" to 2026-04-09 02:15:08.221164099 +0000 UTC m=+464.857090779 I0409 02:15:08.250891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-s6hd4" condition "Ready" to 2026-04-09 02:15:08.250882528 +0000 UTC m=+464.886809208 I0409 02:15:08.292597 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:08.29258359 +0000 UTC m=+464.928510290 I0409 02:15:08.317184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:08.337843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:08.344757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kdlpx" condition "Approved" to 2026-04-09 02:15:08.344743655 +0000 UTC m=+464.980670335 I0409 02:15:08.369848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kdlpx" condition "Ready" to 2026-04-09 02:15:08.369834247 +0000 UTC m=+465.005760937 I0409 02:15:08.386088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:08.404007 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:08.403985907 +0000 UTC m=+465.039912597 I0409 02:15:08.421370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:08.421883 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:08.421871248 +0000 UTC m=+465.057797968 I0409 02:15:08.722576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:08.772209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:08.976906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lz2pd" condition "Approved" to 2026-04-09 02:15:08.976888073 +0000 UTC m=+465.612814753 I0409 02:15:09.197429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lz2pd" condition "Ready" to 2026-04-09 02:15:09.197412866 +0000 UTC m=+465.833339576 I0409 02:15:09.567120 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:09.567102962 +0000 UTC m=+466.203029642 I0409 02:15:09.623075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:09.623543 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:09.623533734 +0000 UTC m=+466.259460444 I0409 02:15:09.874140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:09.922800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:19.590499 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" condition "Ready" to 2026-04-09 02:15:19.590485232 +0000 UTC m=+476.226411912 I0409 02:15:19.590879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:15:19.590901 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" condition "Issuing" to 2026-04-09 02:15:19.590896045 +0000 UTC m=+476.226822725 I0409 02:15:19.603446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:19.603507 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" condition "Ready" to 2026-04-09 02:15:19.603501927 +0000 UTC m=+476.239428617 I0409 02:15:20.314478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:20.505606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xqgxm-r2n9n" condition "Approved" to 2026-04-09 02:15:20.505593417 +0000 UTC m=+477.141520097 I0409 02:15:20.521448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xqgxm-r2n9n" condition "Ready" to 2026-04-09 02:15:20.521436412 +0000 UTC m=+477.157363102 I0409 02:15:20.764362 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" resource_name="kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="kube-prometheus-stack-prometheus-node-exporter-xqgxm-r2n9n" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls-rth5c" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0409 02:15:20.790174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xqgxm-4dx9v" condition "Approved" to 2026-04-09 02:15:20.790155616 +0000 UTC m=+477.426082306 I0409 02:15:20.806967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xqgxm-4dx9v" condition "Ready" to 2026-04-09 02:15:20.806951582 +0000 UTC m=+477.442878302 I0409 02:15:20.842878 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:20.842861179 +0000 UTC m=+477.478787869 I0409 02:15:20.866911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:20.867219 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:20.867212316 +0000 UTC m=+477.503139006 I0409 02:15:20.891340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:20.891693 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xqgxm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:20.891687958 +0000 UTC m=+477.527614638 I0409 02:15:47.795576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:15:47.795600 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 02:15:47.795579381 +0000 UTC m=+504.431506101 I0409 02:15:47.795635 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 02:15:47.795622082 +0000 UTC m=+504.431548802 I0409 02:15:47.808908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:47.808963 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:15:47.808978 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 02:15:47.808973358 +0000 UTC m=+504.444900048 I0409 02:15:47.889589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:47.898984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-28jzg" condition "Approved" to 2026-04-09 02:15:47.898966331 +0000 UTC m=+504.534893021 I0409 02:15:47.915948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-28jzg" condition "Ready" to 2026-04-09 02:15:47.915932144 +0000 UTC m=+504.551858864 I0409 02:15:47.943462 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:47.943448461 +0000 UTC m=+504.579375151 I0409 02:15:47.961060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:47.961498 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:47.96148887 +0000 UTC m=+504.597415590 I0409 02:15:47.976820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:19:06.405915 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 02:19:06.405895354 +0000 UTC m=+703.041822074 I0409 02:19:06.405983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:19:06.406013 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 02:19:06.406006778 +0000 UTC m=+703.041933468 I0409 02:19:06.422109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:19:06.422196 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 02:19:06.422185755 +0000 UTC m=+703.058112445 I0409 02:19:06.843701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:19:06.876270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9dbkz" condition "Approved" to 2026-04-09 02:19:06.876250947 +0000 UTC m=+703.512177637 I0409 02:19:06.895017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9dbkz" condition "Ready" to 2026-04-09 02:19:06.895005238 +0000 UTC m=+703.530931928 I0409 02:19:06.920612 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:19:06.920593377 +0000 UTC m=+703.556520067 I0409 02:19:06.943788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:19:06.991979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:27.660893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:21:27.660959 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-09 02:21:27.660952909 +0000 UTC m=+844.296879599 I0409 02:21:27.661046 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-09 02:21:27.66103106 +0000 UTC m=+844.296957780 I0409 02:21:27.684953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:27.685003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:21:27.685016 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-09 02:21:27.685010019 +0000 UTC m=+844.320936699 I0409 02:21:27.883515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6qznm" condition "Approved" to 2026-04-09 02:21:27.883503202 +0000 UTC m=+844.519429902 I0409 02:21:27.899957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6qznm" condition "Ready" to 2026-04-09 02:21:27.899946382 +0000 UTC m=+844.535873072 I0409 02:21:27.994993 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:21:27.994974263 +0000 UTC m=+844.630900983 I0409 02:21:28.040190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:28.040773 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:21:28.040763375 +0000 UTC m=+844.676690065 I0409 02:21:28.057706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:28.059618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:28.059979 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:21:28.059970035 +0000 UTC m=+844.695896725 I0409 02:22:42.603903 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-09 02:22:42.603890193 +0000 UTC m=+919.239816883 I0409 02:22:42.604152 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:22:42.604180 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-09 02:22:42.604174282 +0000 UTC m=+919.240100962 I0409 02:22:42.619867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:22:42.619928 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-09 02:22:42.619922502 +0000 UTC m=+919.255849182 I0409 02:22:42.864805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:22:42.891121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8gdxj" condition "Approved" to 2026-04-09 02:22:42.891105504 +0000 UTC m=+919.527032194 I0409 02:22:42.908371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8gdxj" condition "Ready" to 2026-04-09 02:22:42.908362212 +0000 UTC m=+919.544288892 I0409 02:22:42.933147 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:22:42.933136429 +0000 UTC m=+919.569063119 I0409 02:22:42.950554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:25:46.081125 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:25:46.081259 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-09 02:25:46.081249295 +0000 UTC m=+1102.717175975 I0409 02:25:46.081128 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-09 02:25:46.0811039 +0000 UTC m=+1102.717030620 I0409 02:25:46.101464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:25:46.101684 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:25:46.101723 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-09 02:25:46.101711627 +0000 UTC m=+1102.737638337 I0409 02:25:46.342605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xs78w" condition "Approved" to 2026-04-09 02:25:46.342594249 +0000 UTC m=+1102.978520939 I0409 02:25:46.358697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xs78w" condition "Ready" to 2026-04-09 02:25:46.358686842 +0000 UTC m=+1102.994613532 I0409 02:25:46.385982 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:25:46.385973742 +0000 UTC m=+1103.021900432 I0409 02:25:46.403305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:25:46.403631 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:25:46.403624045 +0000 UTC m=+1103.039550735 I0409 02:25:46.429238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:25:46.429747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"