I0320 10:13:46.966718 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0320 10:13:46.966811 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0320 10:13:46.966875 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0320 10:13:46.970201 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0320 10:13:46.970506 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0320 10:13:46.970588 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0320 10:13:46.970591 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0320 10:13:46.973072 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0320 10:13:46.987644 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0320 10:13:46.992633 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0320 10:13:46.997816 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0320 10:13:47.000140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0320 10:13:47.002659 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0320 10:13:47.002690 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0320 10:13:47.002699 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0320 10:13:47.002708 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0320 10:13:47.002717 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0320 10:13:47.002770 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0320 10:13:47.005173 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0320 10:13:47.007567 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0320 10:13:47.009918 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0320 10:13:47.013007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0320 10:13:47.016450 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0320 10:13:47.018171 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0320 10:13:47.019874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0320 10:13:47.021481 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0320 10:13:47.023773 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0320 10:13:47.025598 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0320 10:13:47.027120 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0320 10:13:47.027164 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0320 10:13:47.028963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0320 10:13:47.034937 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0320 10:13:47.038640 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0320 10:13:47.040670 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:13:47.041575 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:13:47.041963 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:13:47.042227 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:13:47.042445 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:13:47.042629 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:13:47.042738 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:13:47.042776 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:13:47.042882 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:13:47.077368 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:13:55.581983 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-20 10:13:55.581966084 +0000 UTC m=+8.647279712 I0320 10:13:56.247383 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-20 10:13:56.247368421 +0000 UTC m=+9.312682049 I0320 10:13:56.247464 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:13:56.247573 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-20 10:13:56.247559364 +0000 UTC m=+9.312873002 E0320 10:13:56.262394 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0320 10:13:56.262479 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-20 10:13:56.262469936 +0000 UTC m=+9.327783554 E0320 10:13:56.262503 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0320 10:13:56.265462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:13:56.265564 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-20 10:13:56.265555923 +0000 UTC m=+9.330869531 E0320 10:13:56.271404 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0320 10:13:56.271503 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 10:13:56.271536 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 10:13:56.271571 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0320 10:13:56.277947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:13:56.278009 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-20 10:13:56.278001451 +0000 UTC m=+9.343315059 I0320 10:13:56.281514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:13:56.286506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6tdk7" condition "Approved" to 2026-03-20 10:13:56.286497277 +0000 UTC m=+9.351810875 I0320 10:13:56.297053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6tdk7" condition "Ready" to 2026-03-20 10:13:56.297042219 +0000 UTC m=+9.362355837 I0320 10:13:56.320066 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:13:56.32005347 +0000 UTC m=+9.385367108 I0320 10:13:56.336621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:13:56.337031 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:13:56.33702071 +0000 UTC m=+9.402334348 I0320 10:13:56.352290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:13:56.353780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:13:56.354167 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:13:56.354155394 +0000 UTC m=+9.419469032 I0320 10:14:01.273783 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:14:01.273772324 +0000 UTC m=+14.339085932 I0320 10:14:18.568509 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-20 10:14:18.568495073 +0000 UTC m=+31.633808681 I0320 10:14:18.568889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:14:18.568950 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-20 10:14:18.568938471 +0000 UTC m=+31.634252109 I0320 10:14:18.581461 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-20 10:14:18.581438999 +0000 UTC m=+31.646752607 I0320 10:14:18.593022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:14:18.593107 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:14:18.593134 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-20 10:14:18.593123213 +0000 UTC m=+31.658436851 I0320 10:14:18.791769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:14:18.805385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tf8f9" condition "Approved" to 2026-03-20 10:14:18.805368867 +0000 UTC m=+31.870682505 I0320 10:14:18.836728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tf8f9" condition "Ready" to 2026-03-20 10:14:18.83671112 +0000 UTC m=+31.902024728 I0320 10:14:18.867351 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:14:18.86730791 +0000 UTC m=+31.932621518 I0320 10:14:18.888884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:14:18.939229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:51.631256 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-20 10:15:51.631232875 +0000 UTC m=+124.696546493 I0320 10:15:51.631296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:15:51.631327 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-20 10:15:51.631319857 +0000 UTC m=+124.696633495 E0320 10:15:51.645419 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0320 10:15:51.645462 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-20 10:15:51.645453978 +0000 UTC m=+124.710767606 I0320 10:15:51.645511 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0320 10:15:51.648155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:51.648208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:15:51.648227 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-20 10:15:51.648222953 +0000 UTC m=+124.713536561 E0320 10:15:51.654471 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0320 10:15:51.654709 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0320 10:15:51.654823 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0320 10:15:51.654915 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0320 10:15:51.661112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:15:51.661131 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-20 10:15:51.66111947 +0000 UTC m=+124.726433078 I0320 10:15:51.661146 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-20 10:15:51.661136991 +0000 UTC m=+124.726450599 I0320 10:15:51.678146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:51.678263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:15:51.678332 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-20 10:15:51.678320273 +0000 UTC m=+124.743633911 I0320 10:15:51.975425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:51.981492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-8xx7x" condition "Approved" to 2026-03-20 10:15:51.981464739 +0000 UTC m=+125.046778387 I0320 10:15:51.993792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-42v6g" condition "Approved" to 2026-03-20 10:15:51.993775005 +0000 UTC m=+125.059088623 I0320 10:15:52.008158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-8xx7x" condition "Ready" to 2026-03-20 10:15:52.008146621 +0000 UTC m=+125.073460229 I0320 10:15:52.013527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-42v6g" condition "Ready" to 2026-03-20 10:15:52.013496117 +0000 UTC m=+125.078809725 I0320 10:15:52.034085 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:15:52.034069987 +0000 UTC m=+125.099383615 I0320 10:15:52.052046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:52.052626 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:15:52.052616547 +0000 UTC m=+125.117930155 I0320 10:15:52.060161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:52.072720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:52.073098 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:15:52.073088154 +0000 UTC m=+125.138401762 I0320 10:15:56.656069 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:15:56.656055613 +0000 UTC m=+129.721369241 I0320 10:15:56.670031 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-42v6g" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:15:56.670012741 +0000 UTC m=+129.735326349 I0320 10:15:56.696507 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:15:56.696496238 +0000 UTC m=+129.761809846 I0320 10:15:56.713741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:56.714305 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:15:56.714290423 +0000 UTC m=+129.779604051 I0320 10:15:56.733758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:18:22.862936 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready" to 2026-03-20 10:18:22.862921832 +0000 UTC m=+275.928235450 I0320 10:18:22.863117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:18:22.863167 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Issuing" to 2026-03-20 10:18:22.863157736 +0000 UTC m=+275.928471354 I0320 10:18:22.879011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:18:22.879099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:18:22.879121 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Issuing" to 2026-03-20 10:18:22.879114825 +0000 UTC m=+275.944428433 I0320 10:18:23.195064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-5rmjs" condition "Approved" to 2026-03-20 10:18:23.1950337 +0000 UTC m=+276.260347328 I0320 10:18:23.212694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-5rmjs" condition "Ready" to 2026-03-20 10:18:23.212679762 +0000 UTC m=+276.277993390 I0320 10:18:23.237863 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:18:23.237849833 +0000 UTC m=+276.303163441 I0320 10:18:23.261998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:18:23.308584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:19:32.756345 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-20 10:19:32.756330367 +0000 UTC m=+345.821643975 I0320 10:19:32.756440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:19:32.756496 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-20 10:19:32.75648219 +0000 UTC m=+345.821795818 I0320 10:19:32.767043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:19:32.767205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:19:32.767266 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-20 10:19:32.767255354 +0000 UTC m=+345.832568982 E0320 10:19:32.769054 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0320 10:19:32.769095 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-20 10:19:32.76908744 +0000 UTC m=+345.834401048 E0320 10:19:32.769204 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 10:19:32.778742 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0320 10:19:32.778842 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 10:19:32.778878 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 10:19:32.778918 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0320 10:19:32.803685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:19:32.804106 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dpdjq" condition "Approved" to 2026-03-20 10:19:32.804090015 +0000 UTC m=+345.869403623 I0320 10:19:32.814948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dpdjq" condition "Ready" to 2026-03-20 10:19:32.81493818 +0000 UTC m=+345.880251788 I0320 10:19:32.835728 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:19:32.835708312 +0000 UTC m=+345.901021920 I0320 10:19:32.850232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:19:32.850566 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:19:32.850554997 +0000 UTC m=+345.915868605 I0320 10:19:32.858012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:19:32.864021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:19:32.864375 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:19:32.86436426 +0000 UTC m=+345.929677888 I0320 10:19:32.867064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:19:37.779560 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:19:37.779546826 +0000 UTC m=+350.844860454 I0320 10:20:13.684185 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-20 10:20:13.6841666 +0000 UTC m=+386.749480198 I0320 10:20:13.684895 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:20:13.684920 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-20 10:20:13.684916915 +0000 UTC m=+386.750230513 I0320 10:20:13.690978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:20:13.691026 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-20 10:20:13.691017566 +0000 UTC m=+386.756331164 I0320 10:20:13.691130 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:20:13.691226 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-20 10:20:13.69121711 +0000 UTC m=+386.756530708 I0320 10:20:13.691383 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-20 10:20:13.691378893 +0000 UTC m=+386.756692491 I0320 10:20:13.691295 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-20 10:20:13.691277571 +0000 UTC m=+386.756591199 I0320 10:20:13.711227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:13.711336 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-20 10:20:13.711323031 +0000 UTC m=+386.776636629 I0320 10:20:13.717002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:13.719942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:20:13.720032 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-20 10:20:13.719975684 +0000 UTC m=+386.785289282 I0320 10:20:13.727279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:13.727440 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-20 10:20:13.727430351 +0000 UTC m=+386.792743959 I0320 10:20:13.875307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:13.884654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:13.926303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4cppv" condition "Approved" to 2026-03-20 10:20:13.926286351 +0000 UTC m=+386.991599999 I0320 10:20:13.927732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m4vcc" condition "Approved" to 2026-03-20 10:20:13.92771355 +0000 UTC m=+386.993027148 I0320 10:20:13.953472 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m4vcc" condition "Ready" to 2026-03-20 10:20:13.953455312 +0000 UTC m=+387.018768930 I0320 10:20:13.960707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4cppv" condition "Ready" to 2026-03-20 10:20:13.960691297 +0000 UTC m=+387.026004925 I0320 10:20:13.992914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:13.999394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f8j95" condition "Approved" to 2026-03-20 10:20:13.999378176 +0000 UTC m=+387.064691814 I0320 10:20:14.014901 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:20:14.014877376 +0000 UTC m=+387.080191004 I0320 10:20:14.015421 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:20:14.015404396 +0000 UTC m=+387.080718034 I0320 10:20:14.019964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f8j95" condition "Ready" to 2026-03-20 10:20:14.019949847 +0000 UTC m=+387.085263475 I0320 10:20:14.429726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:14.430099 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:20:14.430090654 +0000 UTC m=+387.495404262 I0320 10:20:14.476534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:14.476920 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:20:14.476913486 +0000 UTC m=+387.542227094 I0320 10:20:14.884744 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:20:14.884727247 +0000 UTC m=+387.950040855 I0320 10:20:14.932700 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:20:14.932675572 +0000 UTC m=+387.997989200 I0320 10:20:14.978430 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:20:14.978411803 +0000 UTC m=+388.043725431 I0320 10:20:15.076908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:15.127911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:15.178075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:15.261354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:15.277814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:15.378742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:15.379311 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:20:15.379301485 +0000 UTC m=+388.444615123 I0320 10:20:15.725413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:15.777444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:21.941121 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6pv56-tls" condition "Ready" to 2026-03-20 10:20:21.94110428 +0000 UTC m=+395.006417888 I0320 10:20:21.941169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pv56-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:20:21.941208 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6pv56-tls" condition "Issuing" to 2026-03-20 10:20:21.941197682 +0000 UTC m=+395.006511290 I0320 10:20:21.955901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pv56-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6pv56-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:21.955957 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pv56-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:20:21.955979 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6pv56-tls" condition "Issuing" to 2026-03-20 10:20:21.955968107 +0000 UTC m=+395.021281705 I0320 10:20:22.253651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pv56-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6pv56-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:22.262604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6pv56-9rqzd" condition "Approved" to 2026-03-20 10:20:22.262594512 +0000 UTC m=+395.327908110 I0320 10:20:22.280401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6pv56-9rqzd" condition "Ready" to 2026-03-20 10:20:22.280390737 +0000 UTC m=+395.345704345 I0320 10:20:22.311930 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6pv56-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:20:22.311916685 +0000 UTC m=+395.377230283 I0320 10:20:22.334473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pv56-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6pv56-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:22.374213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6pv56-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6pv56-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:56.043091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:20:56.043127 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-20 10:20:56.043118425 +0000 UTC m=+429.108432033 I0320 10:20:56.043280 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-20 10:20:56.043265038 +0000 UTC m=+429.108578706 I0320 10:20:56.061679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:56.061846 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-20 10:20:56.061836007 +0000 UTC m=+429.127149615 I0320 10:20:56.176486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:20:56.200058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cm7j8" condition "Approved" to 2026-03-20 10:20:56.2000478 +0000 UTC m=+429.265361408 I0320 10:20:56.216393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cm7j8" condition "Ready" to 2026-03-20 10:20:56.216382235 +0000 UTC m=+429.281695843 I0320 10:20:56.244362 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:20:56.244346352 +0000 UTC m=+429.309659980 I0320 10:20:56.262096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:24:07.931821 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-20 10:24:07.931809378 +0000 UTC m=+620.997122986 I0320 10:24:07.931832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:24:07.932155 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-20 10:24:07.932138754 +0000 UTC m=+620.997452402 I0320 10:24:07.950775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:24:07.950861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:24:07.950881 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-20 10:24:07.950874648 +0000 UTC m=+621.016188256 I0320 10:24:08.256271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nsf5k" condition "Approved" to 2026-03-20 10:24:08.256257295 +0000 UTC m=+621.321570903 I0320 10:24:08.272844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-nsf5k" condition "Ready" to 2026-03-20 10:24:08.272833605 +0000 UTC m=+621.338147213 I0320 10:24:08.306586 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:24:08.306574856 +0000 UTC m=+621.371888464 I0320 10:24:08.328582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:24:08.328839 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:24:08.328832849 +0000 UTC m=+621.394146447 I0320 10:24:08.340984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:24:08.345942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:26:27.047287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:26:27.047356 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-20 10:26:27.04734932 +0000 UTC m=+760.112662928 I0320 10:26:27.047544 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-20 10:26:27.047539734 +0000 UTC m=+760.112853332 I0320 10:26:27.067387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:26:27.067543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:26:27.067584 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-20 10:26:27.067574622 +0000 UTC m=+760.132888220 I0320 10:26:27.208846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:26:27.212559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-t67dp" condition "Approved" to 2026-03-20 10:26:27.212546221 +0000 UTC m=+760.277859819 I0320 10:26:27.237218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-t67dp" condition "Ready" to 2026-03-20 10:26:27.237206411 +0000 UTC m=+760.302520019 I0320 10:26:27.275424 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:26:27.275406059 +0000 UTC m=+760.340719677 I0320 10:26:27.304983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:26:27.305561 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:26:27.305550437 +0000 UTC m=+760.370864065 I0320 10:26:27.320120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:26:27.354787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:27:29.022215 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-20 10:27:29.022202387 +0000 UTC m=+822.087515985 I0320 10:27:29.022265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:27:29.022284 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-20 10:27:29.022281259 +0000 UTC m=+822.087594857 I0320 10:27:29.048079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:27:29.048174 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-20 10:27:29.048161222 +0000 UTC m=+822.113474860 I0320 10:27:29.220830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:27:29.251597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vqp9d" condition "Approved" to 2026-03-20 10:27:29.251582052 +0000 UTC m=+822.316895650 I0320 10:27:29.273061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vqp9d" condition "Ready" to 2026-03-20 10:27:29.273048229 +0000 UTC m=+822.338361827 I0320 10:27:29.304535 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:27:29.304523084 +0000 UTC m=+822.369836692 I0320 10:27:29.327334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:30:32.391824 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-20 10:30:32.39180889 +0000 UTC m=+1005.457122508 I0320 10:30:32.392148 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:30:32.392231 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-20 10:30:32.392222518 +0000 UTC m=+1005.457536126 I0320 10:30:32.409627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:30:32.409720 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:30:32.409739 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-20 10:30:32.409732328 +0000 UTC m=+1005.475045936 I0320 10:30:32.681836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-fbjvx" condition "Approved" to 2026-03-20 10:30:32.681821498 +0000 UTC m=+1005.747135136 I0320 10:30:32.702763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-fbjvx" condition "Ready" to 2026-03-20 10:30:32.702749814 +0000 UTC m=+1005.768063422 I0320 10:30:32.726949 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:30:32.726939227 +0000 UTC m=+1005.792252845 I0320 10:30:32.749469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:30:32.749916 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:30:32.749907514 +0000 UTC m=+1005.815221122 I0320 10:30:32.764861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:30:32.766284 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:30:32.76626537 +0000 UTC m=+1005.831578978