I0418 09:13:11.026861 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0418 09:13:11.027124 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0418 09:13:11.027270 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0418 09:13:11.032808 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0418 09:13:11.033292 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0418 09:13:11.033360 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0418 09:13:11.033358 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0418 09:13:11.035878 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0418 09:13:11.057901 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0418 09:13:11.058196 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0418 09:13:11.064688 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0418 09:13:11.064799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0418 09:13:11.072702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0418 09:13:11.076873 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0418 09:13:11.079560 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0418 09:13:11.082953 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0418 09:13:11.085550 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0418 09:13:11.087469 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0418 09:13:11.093603 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0418 09:13:11.096497 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0418 09:13:11.099198 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0418 09:13:11.101586 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0418 09:13:11.103535 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0418 09:13:11.105904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0418 09:13:11.107391 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0418 09:13:11.109406 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0418 09:13:11.116167 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0418 09:13:11.116221 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0418 09:13:11.116366 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0418 09:13:11.119615 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0418 09:13:11.122014 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0418 09:13:11.122042 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0418 09:13:11.122581 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0418 09:13:11.124745 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:13:11.124898 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:13:11.126077 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:13:11.145922 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:13:11.159790 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:13:11.178037 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:13:11.196185 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:13:11.213007 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:13:11.213543 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:13:11.238614 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:13:23.715249 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-18 09:13:23.715233296 +0000 UTC m=+12.724396967 I0418 09:13:24.409789 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:24.409824 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 09:13:24.409806139 +0000 UTC m=+13.418969800 I0418 09:13:24.409880 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 09:13:24.40986981 +0000 UTC m=+13.419033481 E0418 09:13:24.436649 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:13:24.436772 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-18 09:13:24.436756392 +0000 UTC m=+13.445920053 E0418 09:13:24.436820 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:13:24.438198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:24.438378 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:24.438414 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 09:13:24.438403693 +0000 UTC m=+13.447567354 E0418 09:13:24.457279 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0418 09:13:24.457481 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:13:24.457689 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:13:24.457828 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0418 09:13:24.508248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x8ltr" condition "Approved" to 2026-04-18 09:13:24.508233608 +0000 UTC m=+13.517397249 I0418 09:13:24.537839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x8ltr" condition "Ready" to 2026-04-18 09:13:24.537821351 +0000 UTC m=+13.546985022 I0418 09:13:24.564134 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:24.564122453 +0000 UTC m=+13.573286094 I0418 09:13:24.586371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:24.586788 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:24.586778186 +0000 UTC m=+13.595941847 I0418 09:13:24.604886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:24.605188 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:24.605179881 +0000 UTC m=+13.614343552 I0418 09:13:29.458014 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:29.457998077 +0000 UTC m=+18.467161718 I0418 09:13:50.415150 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-18 09:13:50.415129156 +0000 UTC m=+39.424292827 I0418 09:13:50.415183 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:50.415231 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 09:13:50.415218988 +0000 UTC m=+39.424382659 I0418 09:13:50.425405 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-18 09:13:50.425396227 +0000 UTC m=+39.434559868 I0418 09:13:50.438207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:50.438374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:13:50.438675 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 09:13:50.438663343 +0000 UTC m=+39.447826984 I0418 09:13:50.613076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cc4wg" condition "Approved" to 2026-04-18 09:13:50.613057759 +0000 UTC m=+39.622221400 I0418 09:13:50.648211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cc4wg" condition "Ready" to 2026-04-18 09:13:50.648197133 +0000 UTC m=+39.657360784 I0418 09:13:50.685163 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:50.685142279 +0000 UTC m=+39.694305920 I0418 09:13:50.711155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:50.711582 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:13:50.711570591 +0000 UTC m=+39.720734242 I0418 09:13:50.725235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:13:50.736473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:36.576703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:15:36.576760 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-18 09:15:36.576749786 +0000 UTC m=+145.585913477 I0418 09:15:36.576721 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-18 09:15:36.576701645 +0000 UTC m=+145.585865316 E0418 09:15:36.596516 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 09:15:36.596578 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-18 09:15:36.596570384 +0000 UTC m=+145.605734025 I0418 09:15:36.596617 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 09:15:36.598048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:36.598145 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-18 09:15:36.598135223 +0000 UTC m=+145.607298894 E0418 09:15:36.612986 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0418 09:15:36.613100 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 09:15:36.613135 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0418 09:15:36.613184 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0418 09:15:36.616669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:15:36.616695 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-18 09:15:36.616690789 +0000 UTC m=+145.625854420 I0418 09:15:36.616899 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-18 09:15:36.616894203 +0000 UTC m=+145.626057844 I0418 09:15:36.643209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:36.643319 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-18 09:15:36.643309714 +0000 UTC m=+145.652473355 I0418 09:15:36.784388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:36.801709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:36.820974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pvrpn" condition "Approved" to 2026-04-18 09:15:36.820962909 +0000 UTC m=+145.830126550 I0418 09:15:36.830772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-j9k7g" condition "Approved" to 2026-04-18 09:15:36.830761412 +0000 UTC m=+145.839925043 I0418 09:15:36.845734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pvrpn" condition "Ready" to 2026-04-18 09:15:36.84572308 +0000 UTC m=+145.854886711 I0418 09:15:36.847001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-j9k7g" condition "Ready" to 2026-04-18 09:15:36.846981874 +0000 UTC m=+145.856145545 I0418 09:15:36.882188 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:15:36.882177129 +0000 UTC m=+145.891340780 I0418 09:15:36.897373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:36.898196 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:15:36.898188747 +0000 UTC m=+145.907352378 I0418 09:15:36.915535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:36.920331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:41.614154 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:15:41.614138509 +0000 UTC m=+150.623302180 I0418 09:15:41.628879 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-j9k7g" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:15:41.628867282 +0000 UTC m=+150.638030923 I0418 09:15:41.656393 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:15:41.656379325 +0000 UTC m=+150.665542996 I0418 09:15:41.676430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:41.676885 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:15:41.676873036 +0000 UTC m=+150.686036707 I0418 09:15:41.679786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:41.692712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:41.694596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:15:41.695072 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:15:41.695060065 +0000 UTC m=+150.704223736 I0418 09:18:08.128478 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready" to 2026-04-18 09:18:08.12845711 +0000 UTC m=+297.137620741 I0418 09:18:08.128812 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:18:08.128890 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-04-18 09:18:08.128855267 +0000 UTC m=+297.138018938 I0418 09:18:08.147548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:08.147668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:18:08.147698 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-04-18 09:18:08.147690369 +0000 UTC m=+297.156854000 I0418 09:18:08.284657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:08.292534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-psgrb" condition "Approved" to 2026-04-18 09:18:08.292512209 +0000 UTC m=+297.301675880 I0418 09:18:08.314876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-psgrb" condition "Ready" to 2026-04-18 09:18:08.314862466 +0000 UTC m=+297.324026127 I0418 09:18:08.367697 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:18:08.367677081 +0000 UTC m=+297.376840732 I0418 09:18:08.418919 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:08.419298 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:18:08.419289664 +0000 UTC m=+297.428453315 I0418 09:18:08.434257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:08.434650 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:18:08.4346385 +0000 UTC m=+297.443802151 I0418 09:19:20.426665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:19:20.426706 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 09:19:20.426686216 +0000 UTC m=+369.435849857 I0418 09:19:20.426728 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 09:19:20.426716646 +0000 UTC m=+369.435880307 E0418 09:19:20.439973 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:19:20.440027 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-18 09:19:20.440018585 +0000 UTC m=+369.449182256 E0418 09:19:20.440106 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:19:20.443120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:20.443497 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:19:20.443534 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 09:19:20.443522751 +0000 UTC m=+369.452686412 E0418 09:19:20.451477 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0418 09:19:20.451887 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:19:20.451913 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:19:20.451971 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0418 09:19:20.477458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:20.482635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7fdx5" condition "Approved" to 2026-04-18 09:19:20.482616321 +0000 UTC m=+369.491779992 I0418 09:19:20.494507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7fdx5" condition "Ready" to 2026-04-18 09:19:20.494484453 +0000 UTC m=+369.503648124 I0418 09:19:20.520765 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:19:20.520749604 +0000 UTC m=+369.529913275 I0418 09:19:20.538663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:20.539282 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:19:20.53927504 +0000 UTC m=+369.548438691 I0418 09:19:20.553494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:20.553807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:20.553941 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:19:20.553922805 +0000 UTC m=+369.563086446 I0418 09:19:25.452681 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:19:25.452662228 +0000 UTC m=+374.461825889 I0418 09:20:04.968447 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:20:04.968508 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 09:20:04.968496168 +0000 UTC m=+413.977659809 I0418 09:20:04.969101 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-18 09:20:04.96909257 +0000 UTC m=+413.978256221 I0418 09:20:04.969444 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:20:04.969473 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 09:20:04.969467467 +0000 UTC m=+413.978631118 I0418 09:20:04.969514 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:20:04.969569 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 09:20:04.969560899 +0000 UTC m=+413.978724540 I0418 09:20:04.969760 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-18 09:20:04.969753942 +0000 UTC m=+413.978917613 I0418 09:20:04.970063 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 09:20:04.970057408 +0000 UTC m=+413.979221049 I0418 09:20:04.995675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:04.995754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:20:04.995778 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 09:20:04.99577227 +0000 UTC m=+414.004935901 I0418 09:20:04.996243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:04.996633 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:20:04.996711 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 09:20:04.996663666 +0000 UTC m=+414.005827297 I0418 09:20:05.003974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:05.004064 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 09:20:05.004055375 +0000 UTC m=+414.013219006 I0418 09:20:05.235757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fwjjq" condition "Approved" to 2026-04-18 09:20:05.235722378 +0000 UTC m=+414.244886039 I0418 09:20:05.257169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fwjjq" condition "Ready" to 2026-04-18 09:20:05.257149889 +0000 UTC m=+414.266313530 I0418 09:20:05.261905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:05.297754 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:20:05.29773411 +0000 UTC m=+414.306897741 I0418 09:20:05.305106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kb2r2" condition "Approved" to 2026-04-18 09:20:05.305092288 +0000 UTC m=+414.314255919 I0418 09:20:05.326875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:05.327235 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:20:05.327223052 +0000 UTC m=+414.336386703 I0418 09:20:05.330234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kb2r2" condition "Ready" to 2026-04-18 09:20:05.33022254 +0000 UTC m=+414.339386181 I0418 09:20:05.353974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:05.366197 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:20:05.366176903 +0000 UTC m=+414.375340574 I0418 09:20:05.407105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:05.805764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cwwpc" condition "Approved" to 2026-04-18 09:20:05.805743522 +0000 UTC m=+414.814907163 I0418 09:20:06.170644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cwwpc" condition "Ready" to 2026-04-18 09:20:06.170627402 +0000 UTC m=+415.179791033 I0418 09:20:06.354443 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:20:06.354429967 +0000 UTC m=+415.363593598 I0418 09:20:06.453685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:06.454072 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:20:06.454060544 +0000 UTC m=+415.463224205 I0418 09:20:06.703419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:06.755836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:14.070042 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-25bt8-tls" condition "Ready" to 2026-04-18 09:20:14.070023871 +0000 UTC m=+423.079187512 I0418 09:20:14.070089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-25bt8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:20:14.070143 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-25bt8-tls" condition "Issuing" to 2026-04-18 09:20:14.070129313 +0000 UTC m=+423.079292974 I0418 09:20:14.088191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-25bt8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-25bt8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:14.088349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-25bt8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:20:14.088391 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-25bt8-tls" condition "Issuing" to 2026-04-18 09:20:14.088378035 +0000 UTC m=+423.097541706 I0418 09:20:14.273015 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-25bt8-sq64j" condition "Approved" to 2026-04-18 09:20:14.272995676 +0000 UTC m=+423.282159307 I0418 09:20:14.293651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-25bt8-sq64j" condition "Ready" to 2026-04-18 09:20:14.293639122 +0000 UTC m=+423.302802763 I0418 09:20:14.322360 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-25bt8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:20:14.3223375 +0000 UTC m=+423.331501171 I0418 09:20:14.340850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-25bt8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-25bt8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:14.341268 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-25bt8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:20:14.341257415 +0000 UTC m=+423.350421056 I0418 09:20:14.365599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-25bt8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-25bt8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:38.161631 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-18 09:20:38.161614072 +0000 UTC m=+447.170777713 I0418 09:20:38.161749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:20:38.161803 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 09:20:38.161792326 +0000 UTC m=+447.170955977 I0418 09:20:38.178599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:38.178766 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:20:38.178807 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 09:20:38.178794395 +0000 UTC m=+447.187958036 I0418 09:20:38.419506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ldfcr" condition "Approved" to 2026-04-18 09:20:38.419490766 +0000 UTC m=+447.428654387 I0418 09:20:38.443308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ldfcr" condition "Ready" to 2026-04-18 09:20:38.443291633 +0000 UTC m=+447.452455294 I0418 09:20:38.473213 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:20:38.473190353 +0000 UTC m=+447.482354024 I0418 09:20:38.495534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:38.496049 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:20:38.496040031 +0000 UTC m=+447.505203682 I0418 09:20:38.548766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:38.549133 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:20:38.549122416 +0000 UTC m=+447.558286057 I0418 09:20:38.549923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:23:57.322789 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:23:57.322872 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-18 09:23:57.322863872 +0000 UTC m=+646.332027513 I0418 09:23:57.322940 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 09:23:57.322913073 +0000 UTC m=+646.332076734 I0418 09:23:57.340620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:23:57.340690 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 09:23:57.340684958 +0000 UTC m=+646.349848599 I0418 09:23:57.476844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:23:57.504302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4v8cl" condition "Approved" to 2026-04-18 09:23:57.50429062 +0000 UTC m=+646.513454261 I0418 09:23:57.525206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-4v8cl" condition "Ready" to 2026-04-18 09:23:57.525196694 +0000 UTC m=+646.534360325 I0418 09:23:57.549234 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:23:57.549218168 +0000 UTC m=+646.558381799 I0418 09:23:57.574675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:23:57.575100 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:23:57.575089555 +0000 UTC m=+646.584253196 I0418 09:23:57.592679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:23:57.592992 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:23:57.592981632 +0000 UTC m=+646.602145283 I0418 09:26:27.489761 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-18 09:26:27.48974089 +0000 UTC m=+796.498904561 I0418 09:26:27.489830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:26:27.489935 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-18 09:26:27.489926464 +0000 UTC m=+796.499090105 I0418 09:26:27.507412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:26:27.507613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:26:27.507636 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-18 09:26:27.507628989 +0000 UTC m=+796.516792630 I0418 09:26:27.703015 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-w5r6l" condition "Approved" to 2026-04-18 09:26:27.703005384 +0000 UTC m=+796.712169015 I0418 09:26:27.722071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-w5r6l" condition "Ready" to 2026-04-18 09:26:27.722059425 +0000 UTC m=+796.731223066 I0418 09:26:27.744830 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:26:27.744813475 +0000 UTC m=+796.753977136 I0418 09:26:27.762270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:26:27.762507 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:26:27.7625016 +0000 UTC m=+796.771665231 I0418 09:26:27.780317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:26:27.786879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:27:33.571594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:27:33.571644 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-18 09:27:33.571630646 +0000 UTC m=+862.580794277 I0418 09:27:33.572285 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-18 09:27:33.572260667 +0000 UTC m=+862.581424338 I0418 09:27:33.589548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:27:33.589650 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-18 09:27:33.589639535 +0000 UTC m=+862.598803176 I0418 09:27:33.697911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:27:33.727475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9kfx6" condition "Approved" to 2026-04-18 09:27:33.727455293 +0000 UTC m=+862.736618964 I0418 09:27:33.744448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9kfx6" condition "Ready" to 2026-04-18 09:27:33.744431874 +0000 UTC m=+862.753595515 I0418 09:27:33.771009 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:27:33.770988426 +0000 UTC m=+862.780152067 I0418 09:27:33.790116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:27:33.790440 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:27:33.790430134 +0000 UTC m=+862.799593775 I0418 09:27:33.809854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:30:33.844489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:30:33.844576 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-18 09:30:33.844566211 +0000 UTC m=+1042.853729872 I0418 09:30:33.844587 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-18 09:30:33.844576321 +0000 UTC m=+1042.853739962 I0418 09:30:33.860945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:30:33.861009 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:30:33.861022 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-18 09:30:33.861018732 +0000 UTC m=+1042.870182353 I0418 09:30:33.956143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:30:33.968065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mrjzf" condition "Approved" to 2026-04-18 09:30:33.968056726 +0000 UTC m=+1042.977220357 I0418 09:30:33.987678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mrjzf" condition "Ready" to 2026-04-18 09:30:33.987670287 +0000 UTC m=+1042.996833918 I0418 09:30:34.013715 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:30:34.0137019 +0000 UTC m=+1043.022865541 I0418 09:30:34.035789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"