I0420 21:00:00.355882 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 21:00:00.355982 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 21:00:00.356059 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 21:00:00.361298 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 21:00:00.361689 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 21:00:00.361801 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 21:00:00.361900 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 21:00:00.364517 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 21:00:00.378503 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 21:00:00.381899 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 21:00:00.385912 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 21:00:00.391729 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 21:00:00.394306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 21:00:00.396732 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 21:00:00.396758 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 21:00:00.396810 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 21:00:00.399333 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 21:00:00.401604 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 21:00:00.404218 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 21:00:00.404263 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 21:00:00.408676 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 21:00:00.408772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 21:00:00.413158 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 21:00:00.417525 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 21:00:00.420675 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 21:00:00.420729 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 21:00:00.422648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 21:00:00.424535 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 21:00:00.426337 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 21:00:00.428258 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 21:00:00.429933 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 21:00:00.430040 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 21:00:00.435374 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 21:00:00.437730 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 21:00:00.438640 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 21:00:00.439254 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 21:00:00.439697 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 21:00:00.458011 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 21:00:00.473729 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 21:00:00.488246 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 21:00:00.502571 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 21:00:00.521165 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 21:00:00.524374 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 21:00:11.075502 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 21:00:11.075483528 +0000 UTC m=+10.752513954 I0420 21:00:11.786025 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 21:00:11.786002648 +0000 UTC m=+11.463033094 I0420 21:00:11.787394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:00:11.787480 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 21:00:11.787471605 +0000 UTC m=+11.464502061 E0420 21:00:11.806444 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 21:00:11.806545 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 21:00:11.806535064 +0000 UTC m=+11.483565490 E0420 21:00:11.806572 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 21:00:11.807632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:11.807755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:00:11.807789 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 21:00:11.807779727 +0000 UTC m=+11.484810183 E0420 21:00:11.815547 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 21:00:11.815965 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 21:00:11.816130 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 21:00:11.816252 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 21:00:11.850410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:11.858358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8zp5l" condition "Approved" to 2026-04-20 21:00:11.858343097 +0000 UTC m=+11.535373553 I0420 21:00:11.874400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8zp5l" condition "Ready" to 2026-04-20 21:00:11.874378998 +0000 UTC m=+11.551409454 I0420 21:00:11.897992 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:00:11.897957421 +0000 UTC m=+11.574987847 I0420 21:00:11.915429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:11.917169 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:00:11.917160862 +0000 UTC m=+11.594191288 I0420 21:00:11.934249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:11.934975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:16.817268 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:00:16.817254171 +0000 UTC m=+16.494284627 I0420 21:00:40.693007 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 21:00:40.692992003 +0000 UTC m=+40.370022459 I0420 21:00:40.693074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:00:40.693652 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 21:00:40.693096505 +0000 UTC m=+40.370126951 I0420 21:00:40.704568 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 21:00:40.704554801 +0000 UTC m=+40.381585227 I0420 21:00:40.716095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:40.716257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:00:40.716366 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 21:00:40.716358402 +0000 UTC m=+40.393388838 I0420 21:00:40.849816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:40.862137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zbbp5" condition "Approved" to 2026-04-20 21:00:40.862128421 +0000 UTC m=+40.539158847 I0420 21:00:40.897427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-zbbp5" condition "Ready" to 2026-04-20 21:00:40.897410444 +0000 UTC m=+40.574440890 I0420 21:00:40.929761 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:00:40.929741882 +0000 UTC m=+40.606772308 I0420 21:00:40.952153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:40.952559 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:00:40.95255016 +0000 UTC m=+40.629580586 I0420 21:00:40.959155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:40.974605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:40.978039 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:00:40.978022089 +0000 UTC m=+40.655052545 I0420 21:00:40.983215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:51.816038 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:02:51.816081 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 21:02:51.816071076 +0000 UTC m=+171.493101532 I0420 21:02:51.816236 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 21:02:51.816215769 +0000 UTC m=+171.493246215 E0420 21:02:51.834669 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 21:02:51.834760 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 21:02:51.834753324 +0000 UTC m=+171.511783750 I0420 21:02:51.834839 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 21:02:51.836655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:51.836822 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 21:02:51.836806679 +0000 UTC m=+171.513837125 E0420 21:02:51.846207 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 21:02:51.846479 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 21:02:51.846528 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 21:02:51.846579 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 21:02:51.852801 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 21:02:51.852784671 +0000 UTC m=+171.529815117 I0420 21:02:51.853048 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:02:51.853086 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 21:02:51.853078206 +0000 UTC m=+171.530108632 I0420 21:02:51.867379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:51.867550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:02:51.867617 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 21:02:51.867605334 +0000 UTC m=+171.544635780 I0420 21:02:52.179001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:52.214787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-h5b7f" condition "Approved" to 2026-04-20 21:02:52.214771889 +0000 UTC m=+171.891802315 I0420 21:02:52.256104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-h5b7f" condition "Ready" to 2026-04-20 21:02:52.256092022 +0000 UTC m=+171.933122448 I0420 21:02:52.287338 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:52.287261413 +0000 UTC m=+171.964291839 I0420 21:02:52.308247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:52.401317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-rksjk" condition "Approved" to 2026-04-20 21:02:52.401308636 +0000 UTC m=+172.078339052 I0420 21:02:52.416993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-rksjk" condition "Ready" to 2026-04-20 21:02:52.416975143 +0000 UTC m=+172.094005589 I0420 21:02:56.846823 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:56.846810791 +0000 UTC m=+176.523841247 I0420 21:02:56.864836 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-rksjk" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:56.864821377 +0000 UTC m=+176.541851833 I0420 21:02:56.902452 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:56.902437159 +0000 UTC m=+176.579467615 I0420 21:02:56.925172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:56.925655 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:56.925645263 +0000 UTC m=+176.602675719 I0420 21:02:56.943902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:56.943948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:56.944361 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:56.944345082 +0000 UTC m=+176.621375508 I0420 21:05:29.799310 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready" to 2026-04-20 21:05:29.799292947 +0000 UTC m=+329.476323393 I0420 21:05:29.799751 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:05:29.799808 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-04-20 21:05:29.799797037 +0000 UTC m=+329.476827483 I0420 21:05:29.817892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:05:29.817952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:05:29.817966 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-04-20 21:05:29.817959424 +0000 UTC m=+329.494989850 I0420 21:05:29.959128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-hh7xv" condition "Approved" to 2026-04-20 21:05:29.959106242 +0000 UTC m=+329.636136698 I0420 21:05:29.978030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-hh7xv" condition "Ready" to 2026-04-20 21:05:29.978016263 +0000 UTC m=+329.655046689 I0420 21:05:30.021753 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:05:30.021736564 +0000 UTC m=+329.698767010 I0420 21:05:30.041345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:05:30.041881 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:05:30.041868307 +0000 UTC m=+329.718898753 I0420 21:05:30.065542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:40.558335 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:06:40.558587 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 21:06:40.558571233 +0000 UTC m=+400.235601679 I0420 21:06:40.558610 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 21:06:40.558598594 +0000 UTC m=+400.235629040 E0420 21:06:40.572568 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 21:06:40.572636 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 21:06:40.572622963 +0000 UTC m=+400.249653419 E0420 21:06:40.572721 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 21:06:40.576356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:40.576460 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 21:06:40.576452054 +0000 UTC m=+400.253482510 E0420 21:06:40.586501 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 21:06:40.586637 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 21:06:40.586719 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 21:06:40.586770 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 21:06:40.590859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:40.590948 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 21:06:40.590938971 +0000 UTC m=+400.267969397 I0420 21:06:40.600916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-99h8l" condition "Approved" to 2026-04-20 21:06:40.600895805 +0000 UTC m=+400.277926261 I0420 21:06:40.612147 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-99h8l" condition "Ready" to 2026-04-20 21:06:40.612136342 +0000 UTC m=+400.289166788 I0420 21:06:40.631399 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:06:40.631375018 +0000 UTC m=+400.308405464 I0420 21:06:40.649207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:40.692708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:45.587155 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:06:45.587137411 +0000 UTC m=+405.264167857 I0420 21:07:24.508612 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:07:24.508847 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 21:07:24.50864742 +0000 UTC m=+444.185677846 I0420 21:07:24.509305 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 21:07:24.509300121 +0000 UTC m=+444.186330537 I0420 21:07:24.509506 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:07:24.509527 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 21:07:24.509522815 +0000 UTC m=+444.186553251 I0420 21:07:24.511213 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 21:07:24.508398935 +0000 UTC m=+444.185429351 I0420 21:07:24.511978 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 21:07:24.511972401 +0000 UTC m=+444.189002827 I0420 21:07:24.512177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:07:24.512197 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 21:07:24.512193655 +0000 UTC m=+444.189224081 I0420 21:07:24.541760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:24.541843 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 21:07:24.541836022 +0000 UTC m=+444.218866438 I0420 21:07:24.542104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:24.542906 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 21:07:24.542900422 +0000 UTC m=+444.219930838 I0420 21:07:24.554770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:24.554847 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 21:07:24.554839493 +0000 UTC m=+444.231869909 I0420 21:07:24.611632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:24.654317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8gpbr" condition "Approved" to 2026-04-20 21:07:24.65427899 +0000 UTC m=+444.331309456 I0420 21:07:24.680961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8gpbr" condition "Ready" to 2026-04-20 21:07:24.680942682 +0000 UTC m=+444.357973128 I0420 21:07:24.712460 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:24.712448774 +0000 UTC m=+444.389479190 I0420 21:07:24.743711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:24.744097 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:24.744089729 +0000 UTC m=+444.421120145 I0420 21:07:24.751144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:24.776890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0420 21:07:24.779316 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-l674b\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0420 21:07:24.863683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:24.893934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-56jbs" condition "Approved" to 2026-04-20 21:07:24.893923116 +0000 UTC m=+444.570953532 I0420 21:07:24.915573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-56jbs" condition "Ready" to 2026-04-20 21:07:24.915561326 +0000 UTC m=+444.592591742 I0420 21:07:24.999837 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:24.999826003 +0000 UTC m=+444.676856419 I0420 21:07:25.100105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:25.100511 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:25.100505042 +0000 UTC m=+444.777535458 I0420 21:07:25.396923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:25.498262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:25.552809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:25.701247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z7ckh" condition "Approved" to 2026-04-20 21:07:25.701230039 +0000 UTC m=+445.378260465 I0420 21:07:26.061419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-z7ckh" condition "Ready" to 2026-04-20 21:07:26.061406243 +0000 UTC m=+445.738436669 I0420 21:07:26.251306 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:26.25129272 +0000 UTC m=+445.928323146 I0420 21:07:26.349201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:26.349639 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:26.349628977 +0000 UTC m=+446.026659413 I0420 21:07:26.598501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:26.647960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:32.318126 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:07:32.318172 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls" condition "Issuing" to 2026-04-20 21:07:32.318162448 +0000 UTC m=+451.995192904 I0420 21:07:32.318131 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls" condition "Ready" to 2026-04-20 21:07:32.318118057 +0000 UTC m=+451.995148473 I0420 21:07:32.332596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:32.332663 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls" condition "Ready" to 2026-04-20 21:07:32.332656247 +0000 UTC m=+452.009686673 I0420 21:07:32.492124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:32.515577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mbnqf-68dr2" condition "Approved" to 2026-04-20 21:07:32.515555335 +0000 UTC m=+452.192585761 I0420 21:07:32.534111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mbnqf-68dr2" condition "Ready" to 2026-04-20 21:07:32.534098938 +0000 UTC m=+452.211129364 I0420 21:07:32.563394 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:32.563374299 +0000 UTC m=+452.240404725 I0420 21:07:32.587319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:32.587644 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:32.587636877 +0000 UTC m=+452.264667283 I0420 21:07:32.611912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:32.612253 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mbnqf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:32.612241781 +0000 UTC m=+452.289272207 I0420 21:07:54.348949 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 21:07:54.348923062 +0000 UTC m=+474.025953518 I0420 21:07:54.349576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:07:54.350701 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 21:07:54.350681885 +0000 UTC m=+474.027712371 I0420 21:07:54.369658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:54.369740 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:07:54.369767 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 21:07:54.36975856 +0000 UTC m=+474.046788986 I0420 21:07:54.932958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h5bl7" condition "Approved" to 2026-04-20 21:07:54.93294556 +0000 UTC m=+474.609975986 I0420 21:07:54.950611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h5bl7" condition "Ready" to 2026-04-20 21:07:54.950601619 +0000 UTC m=+474.627632025 I0420 21:07:55.003500 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:55.003478212 +0000 UTC m=+474.680508658 I0420 21:07:55.024960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:55.025514 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:55.025507011 +0000 UTC m=+474.702537437 I0420 21:07:55.052537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:55.052870 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:55.05286119 +0000 UTC m=+474.729891616 I0420 21:11:17.711270 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:11:17.711299 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 21:11:17.711275774 +0000 UTC m=+677.388306200 I0420 21:11:17.711324 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 21:11:17.711311745 +0000 UTC m=+677.388342201 I0420 21:11:17.729609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:11:17.729722 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 21:11:17.729712039 +0000 UTC m=+677.406742495 I0420 21:11:17.997530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:11:18.026980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zgntn" condition "Approved" to 2026-04-20 21:11:18.026962939 +0000 UTC m=+677.703993385 I0420 21:11:18.049079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zgntn" condition "Ready" to 2026-04-20 21:11:18.049066452 +0000 UTC m=+677.726096878 I0420 21:11:18.082217 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:11:18.082203093 +0000 UTC m=+677.759233519 I0420 21:11:18.105989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:11:18.106482 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:11:18.106471547 +0000 UTC m=+677.783501973 I0420 21:11:18.125591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:13:50.994073 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 21:13:50.99402983 +0000 UTC m=+830.671060286 I0420 21:13:50.994624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:13:50.994684 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 21:13:50.994678271 +0000 UTC m=+830.671708727 I0420 21:13:51.013695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:13:51.013740 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 21:13:51.013735728 +0000 UTC m=+830.690766154 I0420 21:13:51.198056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:13:51.450237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-z75hg" condition "Approved" to 2026-04-20 21:13:51.450225001 +0000 UTC m=+831.127255427 I0420 21:13:51.478386 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-z75hg" condition "Ready" to 2026-04-20 21:13:51.478375327 +0000 UTC m=+831.155405743 I0420 21:13:51.726585 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" resource_name="barbican-api-certs" resource_namespace="openstack" resource_kind="Certificate" resource_version="v1" resource_name="barbican-api-certs-z75hg" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" resource_name="barbican-api-certs-2jwb5" resource_namespace="openstack" resource_kind="Secret" resource_version="v1" I0420 21:13:51.760689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-l2gqx" condition "Approved" to 2026-04-20 21:13:51.760671841 +0000 UTC m=+831.437702267 I0420 21:13:51.775383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-l2gqx" condition "Ready" to 2026-04-20 21:13:51.775369436 +0000 UTC m=+831.452399862 I0420 21:13:51.801856 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:13:51.80184385 +0000 UTC m=+831.478874276 I0420 21:13:51.829470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:13:51.829911 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:13:51.829903455 +0000 UTC m=+831.506933861 I0420 21:13:51.848879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:13:51.849346 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:13:51.849333257 +0000 UTC m=+831.526363703 I0420 21:13:51.854860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:15:01.013434 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 21:15:01.013417768 +0000 UTC m=+900.690448224 I0420 21:15:01.013953 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:15:01.014013 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 21:15:01.014006938 +0000 UTC m=+900.691037394 I0420 21:15:01.036228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:15:01.036302 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:15:01.036329 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 21:15:01.036321466 +0000 UTC m=+900.713351922 I0420 21:15:01.186948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:15:01.190816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vpwpk" condition "Approved" to 2026-04-20 21:15:01.190805921 +0000 UTC m=+900.867836347 I0420 21:15:01.207826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vpwpk" condition "Ready" to 2026-04-20 21:15:01.207813949 +0000 UTC m=+900.884844375 I0420 21:15:01.244255 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:15:01.244240409 +0000 UTC m=+900.921270835 I0420 21:15:01.266480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:15:01.266910 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:15:01.266898073 +0000 UTC m=+900.943928519 I0420 21:15:01.286176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:15:01.286637 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:15:01.286623461 +0000 UTC m=+900.963653907 I0420 21:18:09.716689 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 21:18:09.716649648 +0000 UTC m=+1089.393680074 I0420 21:18:09.716857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:18:09.717089 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 21:18:09.717048305 +0000 UTC m=+1089.394078751 I0420 21:18:09.734300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:18:09.734415 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:18:09.734446 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 21:18:09.734436529 +0000 UTC m=+1089.411466975 I0420 21:18:09.914210 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-hq57z" condition "Approved" to 2026-04-20 21:18:09.914197052 +0000 UTC m=+1089.591227498 I0420 21:18:09.939238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-hq57z" condition "Ready" to 2026-04-20 21:18:09.939231537 +0000 UTC m=+1089.616261963 I0420 21:18:09.969478 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:18:09.969463049 +0000 UTC m=+1089.646493475 I0420 21:18:09.994776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:18:09.995187 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:18:09.995177678 +0000 UTC m=+1089.672208104 I0420 21:18:10.000393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:18:10.020038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"