I0403 02:26:36.876559 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0403 02:26:36.876709 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0403 02:26:36.876876 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0403 02:26:36.882264 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0403 02:26:36.882815 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0403 02:26:36.882874 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0403 02:26:36.882878 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0403 02:26:36.887327 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0403 02:26:36.903583 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0403 02:26:36.909293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0403 02:26:36.915244 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0403 02:26:36.915283 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0403 02:26:36.915325 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0403 02:26:36.918023 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0403 02:26:36.918184 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0403 02:26:36.921036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0403 02:26:36.923787 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0403 02:26:36.925809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0403 02:26:36.927677 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0403 02:26:36.933275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0403 02:26:36.937099 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0403 02:26:36.937183 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0403 02:26:36.940090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0403 02:26:36.942141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0403 02:26:36.944237 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0403 02:26:36.946016 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0403 02:26:36.946036 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0403 02:26:36.946153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0403 02:26:36.948062 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0403 02:26:36.950229 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0403 02:26:36.955818 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0403 02:26:36.958559 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0403 02:26:36.961311 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0403 02:26:36.964283 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:36.964689 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:36.964828 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:36.965260 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:36.985370 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:37.003378 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:37.022192 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:37.043197 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:37.056299 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:37.067371 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:51.818857 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-03 02:26:51.818839576 +0000 UTC m=+14.978914949 I0403 02:26:52.526392 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:26:52.526524 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-03 02:26:52.526515758 +0000 UTC m=+15.686591131 I0403 02:26:52.526525 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-03 02:26:52.526506738 +0000 UTC m=+15.686582151 E0403 02:26:52.575747 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 02:26:52.575889 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-03 02:26:52.575880929 +0000 UTC m=+15.735956302 E0403 02:26:52.575960 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 02:26:52.579370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:26:52.579457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:26:52.579482 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-03 02:26:52.579475233 +0000 UTC m=+15.739550606 E0403 02:26:52.686546 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0403 02:26:52.686707 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 02:26:52.686755 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 02:26:52.686807 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0403 02:26:54.002390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:26:54.002957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-msvzt" condition "Approved" to 2026-04-03 02:26:54.002938376 +0000 UTC m=+17.163013799 I0403 02:26:54.085083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-msvzt" condition "Ready" to 2026-04-03 02:26:54.085069071 +0000 UTC m=+17.245144464 I0403 02:26:54.375660 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:26:54.375632347 +0000 UTC m=+17.535707720 I0403 02:26:54.442391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:26:54.442743 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:26:54.442733232 +0000 UTC m=+17.602808635 I0403 02:26:54.469963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:26:54.471627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:26:57.687299 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:26:57.6872723 +0000 UTC m=+20.847347703 I0403 02:27:27.214889 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-03 02:27:27.214872044 +0000 UTC m=+50.374947417 I0403 02:27:27.215197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:27:27.215259 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-03 02:27:27.215249733 +0000 UTC m=+50.375325106 I0403 02:27:27.226171 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-03 02:27:27.226162508 +0000 UTC m=+50.386237881 I0403 02:27:27.244047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:27:27.244116 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-03 02:27:27.244110678 +0000 UTC m=+50.404186051 I0403 02:27:27.377210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:27:27.415544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-th2ps" condition "Approved" to 2026-04-03 02:27:27.415528423 +0000 UTC m=+50.575603786 I0403 02:27:27.444342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-th2ps" condition "Ready" to 2026-04-03 02:27:27.444329956 +0000 UTC m=+50.604405329 I0403 02:27:27.478198 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:27:27.478181377 +0000 UTC m=+50.638256770 I0403 02:27:27.499372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:27:27.499788 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:27:27.499776792 +0000 UTC m=+50.659852165 I0403 02:27:27.508152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:27:27.525089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:29:16.329779 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-03 02:29:16.329761796 +0000 UTC m=+159.489837169 I0403 02:29:16.329771 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:29:16.329854 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-03 02:29:16.329842118 +0000 UTC m=+159.489917511 I0403 02:29:16.369775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:29:16.369906 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-03 02:29:16.369894643 +0000 UTC m=+159.529970006 E0403 02:29:16.374242 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0403 02:29:16.374331 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-03 02:29:16.374316586 +0000 UTC m=+159.534391999 I0403 02:29:16.374411 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0403 02:29:16.397524 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0403 02:29:16.398223 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0403 02:29:16.398312 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0403 02:29:16.398423 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0403 02:29:16.399461 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-03 02:29:16.399445344 +0000 UTC m=+159.559520737 I0403 02:29:16.399734 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:29:16.399789 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-03 02:29:16.399774711 +0000 UTC m=+159.559850114 I0403 02:29:16.421288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:29:16.421424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:29:16.421532 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-03 02:29:16.421451116 +0000 UTC m=+159.581526509 I0403 02:29:16.736193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:29:16.736479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:29:16.841674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-tfvns" condition "Approved" to 2026-04-03 02:29:16.841652341 +0000 UTC m=+160.001727734 I0403 02:29:16.938332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-tfvns" condition "Ready" to 2026-04-03 02:29:16.938313038 +0000 UTC m=+160.098388431 I0403 02:29:16.941021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gjvsv" condition "Approved" to 2026-04-03 02:29:16.941010751 +0000 UTC m=+160.101086144 I0403 02:29:17.005084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gjvsv" condition "Ready" to 2026-04-03 02:29:17.005072898 +0000 UTC m=+160.165148271 I0403 02:29:17.116457 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:29:17.116430149 +0000 UTC m=+160.276505552 I0403 02:29:17.138959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:29:17.139363 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:29:17.139350644 +0000 UTC m=+160.299426017 I0403 02:29:17.543815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:29:17.598470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:29:21.398674 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:29:21.398664401 +0000 UTC m=+164.558739764 I0403 02:29:21.421566 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-tfvns" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:29:21.421549885 +0000 UTC m=+164.581625288 I0403 02:29:21.454638 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:29:21.454609257 +0000 UTC m=+164.614684650 I0403 02:29:21.480373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:29:21.480864 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:29:21.48085583 +0000 UTC m=+164.640931233 I0403 02:29:21.498695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:29:21.499285 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:29:21.49927013 +0000 UTC m=+164.659345503 I0403 02:29:21.506117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:32:05.569292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-38.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:32:05.569326 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Issuing" to 2026-04-03 02:32:05.569318505 +0000 UTC m=+328.729393878 I0403 02:32:05.569349 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready" to 2026-04-03 02:32:05.569323565 +0000 UTC m=+328.729398968 I0403 02:32:05.587084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:32:05.587152 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready" to 2026-04-03 02:32:05.587144052 +0000 UTC m=+328.747219425 I0403 02:32:05.729430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:32:05.763865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-zksgs" condition "Approved" to 2026-04-03 02:32:05.763853894 +0000 UTC m=+328.923929267 I0403 02:32:05.782881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-38.nip.io-tls-zksgs" condition "Ready" to 2026-04-03 02:32:05.78286937 +0000 UTC m=+328.942944743 I0403 02:32:05.811160 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:32:05.811137973 +0000 UTC m=+328.971213366 I0403 02:32:05.840659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:32:05.841469 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:32:05.841458834 +0000 UTC m=+329.001534207 I0403 02:32:05.851281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:32:05.861895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:32:05.862176 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-38.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:32:05.862167049 +0000 UTC m=+329.022242422 I0403 02:32:05.863968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-38.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-38.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:17.469020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:33:17.469071 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-03 02:33:17.469057951 +0000 UTC m=+400.629133344 I0403 02:33:17.469730 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-03 02:33:17.469718666 +0000 UTC m=+400.629794059 E0403 02:33:17.482994 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 02:33:17.483040 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-03 02:33:17.483030839 +0000 UTC m=+400.643106242 E0403 02:33:17.483111 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 02:33:17.484685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:17.484854 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-03 02:33:17.484841131 +0000 UTC m=+400.644916524 E0403 02:33:17.495606 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0403 02:33:17.495687 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 02:33:17.495722 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 02:33:17.495750 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0403 02:33:17.499649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:17.499724 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-03 02:33:17.49971564 +0000 UTC m=+400.659790993 I0403 02:33:17.513081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:17.539629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fhtvd" condition "Approved" to 2026-04-03 02:33:17.539606764 +0000 UTC m=+400.699682127 I0403 02:33:17.562097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fhtvd" condition "Ready" to 2026-04-03 02:33:17.562086901 +0000 UTC m=+400.722162264 I0403 02:33:17.583026 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:33:17.583008431 +0000 UTC m=+400.743083824 I0403 02:33:17.602910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:17.603241 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:33:17.603226595 +0000 UTC m=+400.763301988 I0403 02:33:17.617685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:17.618851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:17.619276 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:33:17.61926513 +0000 UTC m=+400.779340503 I0403 02:33:17.621148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:22.496948 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:33:22.496930635 +0000 UTC m=+405.657006028 I0403 02:34:00.389076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:34:00.389140 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-03 02:34:00.389134006 +0000 UTC m=+443.549209369 I0403 02:34:00.389225 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-03 02:34:00.389202508 +0000 UTC m=+443.549277871 I0403 02:34:00.400952 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-03 02:34:00.400938472 +0000 UTC m=+443.561013835 I0403 02:34:00.401484 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:34:00.401528 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-03 02:34:00.401519266 +0000 UTC m=+443.561594639 I0403 02:34:00.402210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:34:00.402232 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-03 02:34:00.402229202 +0000 UTC m=+443.562304565 I0403 02:34:00.402431 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-03 02:34:00.402428307 +0000 UTC m=+443.562503670 I0403 02:34:00.416933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:00.417085 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-03 02:34:00.417074431 +0000 UTC m=+443.577149814 I0403 02:34:00.423555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:00.423703 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-03 02:34:00.423692115 +0000 UTC m=+443.583767508 I0403 02:34:00.423813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:00.423913 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-03 02:34:00.42390372 +0000 UTC m=+443.583979083 I0403 02:34:00.616577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:00.629094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:00.645602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mh5ss" condition "Approved" to 2026-04-03 02:34:00.645574004 +0000 UTC m=+443.805649407 I0403 02:34:00.672586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9l2v8" condition "Approved" to 2026-04-03 02:34:00.672568207 +0000 UTC m=+443.832643580 I0403 02:34:00.670014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mh5ss" condition "Ready" to 2026-04-03 02:34:00.669991056 +0000 UTC m=+443.830066449 I0403 02:34:00.702165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9l2v8" condition "Ready" to 2026-04-03 02:34:00.702142709 +0000 UTC m=+443.862218112 I0403 02:34:00.730137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:34:00.730258 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-03 02:34:00.730245908 +0000 UTC m=+443.890321311 I0403 02:34:00.733255 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:34:00.733239839 +0000 UTC m=+443.893315212 I0403 02:34:00.742006 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:34:00.741986903 +0000 UTC m=+443.902062266 I0403 02:34:00.743968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:00.760153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:00.760543 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:34:00.760535107 +0000 UTC m=+443.920610480 I0403 02:34:00.874494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:00.920623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:00.921432 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:34:00.921416087 +0000 UTC m=+444.081491490 I0403 02:34:01.330985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qshbz" condition "Approved" to 2026-04-03 02:34:01.330963973 +0000 UTC m=+444.491039366 I0403 02:34:01.377257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0403 02:34:01.422872 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-z6q2k\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0403 02:34:01.528081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7zjv9" condition "Approved" to 2026-04-03 02:34:01.528057061 +0000 UTC m=+444.688132434 I0403 02:34:01.584751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qshbz" condition "Ready" to 2026-04-03 02:34:01.584713908 +0000 UTC m=+444.744789281 I0403 02:34:01.984405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7zjv9" condition "Ready" to 2026-04-03 02:34:01.984384883 +0000 UTC m=+445.144460256 I0403 02:34:02.423309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:02.604239 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:34:02.604149014 +0000 UTC m=+445.764224407 I0403 02:34:02.777095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:02.777738 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:34:02.777725421 +0000 UTC m=+445.937800824 I0403 02:34:02.922995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:03.275129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:03.381258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:03.423768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:17.028251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:34:17.028294 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls" condition "Issuing" to 2026-04-03 02:34:17.028281458 +0000 UTC m=+460.188356831 I0403 02:34:17.028642 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls" condition "Ready" to 2026-04-03 02:34:17.028612645 +0000 UTC m=+460.188688038 I0403 02:34:17.134683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:17.134807 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls" condition "Ready" to 2026-04-03 02:34:17.134795163 +0000 UTC m=+460.294870526 I0403 02:34:17.326877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:17.363763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hfrs7-zsbxm" condition "Approved" to 2026-04-03 02:34:17.363741478 +0000 UTC m=+460.523816851 I0403 02:34:17.388038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-hfrs7-zsbxm" condition "Ready" to 2026-04-03 02:34:17.388015647 +0000 UTC m=+460.548091030 I0403 02:34:17.415120 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:34:17.415101901 +0000 UTC m=+460.575177274 I0403 02:34:17.432325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:17.432624 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:34:17.432619552 +0000 UTC m=+460.592694925 I0403 02:34:17.444904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:17.456023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-hfrs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:44.281766 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-03 02:34:44.281744881 +0000 UTC m=+487.441820254 I0403 02:34:44.281844 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:34:44.281899 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-03 02:34:44.281883314 +0000 UTC m=+487.441958717 I0403 02:34:44.295823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:44.295901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:34:44.295922 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-03 02:34:44.295915864 +0000 UTC m=+487.455991237 I0403 02:34:44.498958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:44.510090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4lmg2" condition "Approved" to 2026-04-03 02:34:44.510062778 +0000 UTC m=+487.670138161 I0403 02:34:44.530972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4lmg2" condition "Ready" to 2026-04-03 02:34:44.53095078 +0000 UTC m=+487.691026153 I0403 02:34:44.561326 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:34:44.561297504 +0000 UTC m=+487.721372887 I0403 02:34:44.644129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:44.644557 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:34:44.64454852 +0000 UTC m=+487.804623883 I0403 02:34:44.664259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:38:01.107569 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-03 02:38:01.107544311 +0000 UTC m=+684.267619714 I0403 02:38:01.107944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:38:01.107987 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-03 02:38:01.107983992 +0000 UTC m=+684.268059355 I0403 02:38:01.126113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:38:01.126303 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-03 02:38:01.126293653 +0000 UTC m=+684.286369026 I0403 02:38:01.208912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:38:01.243854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hbpzj" condition "Approved" to 2026-04-03 02:38:01.243837151 +0000 UTC m=+684.403912524 I0403 02:38:01.261460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hbpzj" condition "Ready" to 2026-04-03 02:38:01.261447786 +0000 UTC m=+684.421523159 I0403 02:38:01.291058 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:38:01.291035433 +0000 UTC m=+684.451110816 I0403 02:38:01.317733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:40:22.915330 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-03 02:40:22.915305451 +0000 UTC m=+826.075380854 I0403 02:40:22.915410 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:40:22.915487 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-03 02:40:22.915476185 +0000 UTC m=+826.075551588 I0403 02:40:22.932933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:40:22.933080 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-03 02:40:22.93306659 +0000 UTC m=+826.093141993 I0403 02:40:23.386976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:40:23.425378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-b4tq5" condition "Approved" to 2026-04-03 02:40:23.425362604 +0000 UTC m=+826.585437967 I0403 02:40:23.447352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-b4tq5" condition "Ready" to 2026-04-03 02:40:23.447336823 +0000 UTC m=+826.607412226 I0403 02:40:23.473236 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:40:23.473220314 +0000 UTC m=+826.633295687 I0403 02:40:23.490517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:41:43.034587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:41:43.034665 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-03 02:41:43.034655279 +0000 UTC m=+906.194730672 I0403 02:41:43.035178 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-03 02:41:43.035168711 +0000 UTC m=+906.195244114 I0403 02:41:43.053198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:41:43.053625 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-03 02:41:43.053614267 +0000 UTC m=+906.213689660 I0403 02:41:43.292943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:41:43.342595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-jk5z5" condition "Approved" to 2026-04-03 02:41:43.34257664 +0000 UTC m=+906.502652043 I0403 02:41:43.364246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-jk5z5" condition "Ready" to 2026-04-03 02:41:43.364237082 +0000 UTC m=+906.524312455 I0403 02:41:43.402342 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:41:43.40232712 +0000 UTC m=+906.562402493 I0403 02:41:43.428007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:41:43.428445 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:41:43.428435367 +0000 UTC m=+906.588510740 I0403 02:41:43.433372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:41:43.454814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:41:43.455225 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:41:43.455213869 +0000 UTC m=+906.615289252 I0403 02:44:48.957042 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:44:48.957110 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-03 02:44:48.957101995 +0000 UTC m=+1092.117177368 I0403 02:44:48.957326 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-03 02:44:48.95731833 +0000 UTC m=+1092.117393723 I0403 02:44:48.972393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:44:48.972489 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:44:48.972520 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-03 02:44:48.972510051 +0000 UTC m=+1092.132585454 I0403 02:44:49.260096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:44:49.268290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-z9fw2" condition "Approved" to 2026-04-03 02:44:49.268282025 +0000 UTC m=+1092.428357388 I0403 02:44:49.287194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-z9fw2" condition "Ready" to 2026-04-03 02:44:49.287184853 +0000 UTC m=+1092.447260226 I0403 02:44:49.317470 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:44:49.317457981 +0000 UTC m=+1092.477533354 I0403 02:44:49.335585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:44:49.336001 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:44:49.335992171 +0000 UTC m=+1092.496067574 I0403 02:44:49.359683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"