I0325 21:09:00.890693 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0325 21:09:00.890886 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0325 21:09:00.891047 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0325 21:09:00.896427 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0325 21:09:00.896788 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0325 21:09:00.897003 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0325 21:09:00.897121 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0325 21:09:00.898967 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0325 21:09:00.913891 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0325 21:09:00.919116 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0325 21:09:00.922997 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0325 21:09:00.926474 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0325 21:09:00.929100 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0325 21:09:00.929135 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0325 21:09:00.929164 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0325 21:09:00.930917 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0325 21:09:00.932639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0325 21:09:00.934707 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0325 21:09:00.936777 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0325 21:09:00.938528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0325 21:09:00.940579 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0325 21:09:00.940931 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0325 21:09:00.946258 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0325 21:09:00.950217 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0325 21:09:00.953865 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0325 21:09:00.953909 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0325 21:09:00.953958 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0325 21:09:00.955758 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0325 21:09:00.957540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0325 21:09:00.959381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0325 21:09:00.961341 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0325 21:09:00.963011 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0325 21:09:00.963138 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0325 21:09:00.965636 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 21:09:00.965636 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 21:09:00.966451 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 21:09:00.984489 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 21:09:01.052889 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 21:09:01.068625 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 21:09:01.069489 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 21:09:01.070789 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 21:09:01.071136 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 21:09:01.072785 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0325 21:09:19.571080 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-25 21:09:19.571067799 +0000 UTC m=+18.711057125 I0325 21:09:20.261446 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-25 21:09:20.261429563 +0000 UTC m=+19.401418909 I0325 21:09:20.261576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:09:20.261710 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-25 21:09:20.261639758 +0000 UTC m=+19.401629104 I0325 21:09:20.275977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:09:20.276056 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-25 21:09:20.276048667 +0000 UTC m=+19.416037983 E0325 21:09:20.276921 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0325 21:09:20.277002 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-25 21:09:20.27699166 +0000 UTC m=+19.416980986 E0325 21:09:20.277080 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 21:09:20.289050 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0325 21:09:20.289212 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 21:09:20.289255 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 21:09:20.289293 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0325 21:09:20.291648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:09:20.314775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5npl7" condition "Approved" to 2026-03-25 21:09:20.314763492 +0000 UTC m=+19.454752808 I0325 21:09:20.326809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5npl7" condition "Ready" to 2026-03-25 21:09:20.326796482 +0000 UTC m=+19.466785828 I0325 21:09:20.353545 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:09:20.353532069 +0000 UTC m=+19.493521395 I0325 21:09:20.369046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:09:20.369299 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:09:20.369291822 +0000 UTC m=+19.509281148 I0325 21:09:20.384614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:09:20.389377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:09:20.389799 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:09:20.389786683 +0000 UTC m=+19.529776029 I0325 21:09:25.290093 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:09:25.29008011 +0000 UTC m=+24.430069466 I0325 21:09:51.526750 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-25 21:09:51.526727567 +0000 UTC m=+50.666716923 I0325 21:09:51.526786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:09:51.526990 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-25 21:09:51.526980995 +0000 UTC m=+50.666970321 I0325 21:09:51.535419 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-25 21:09:51.535409055 +0000 UTC m=+50.675398381 I0325 21:09:51.547475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:09:51.547565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:09:51.547593 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-25 21:09:51.547587008 +0000 UTC m=+50.687576334 I0325 21:09:51.804183 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rnkcs" condition "Approved" to 2026-03-25 21:09:51.804169946 +0000 UTC m=+50.944159272 I0325 21:09:51.836396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rnkcs" condition "Ready" to 2026-03-25 21:09:51.836382828 +0000 UTC m=+50.976372174 I0325 21:09:51.870920 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:09:51.870907189 +0000 UTC m=+51.010896535 I0325 21:09:51.893895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:09:51.894311 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:09:51.894303883 +0000 UTC m=+51.034293209 I0325 21:09:51.910584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:09:51.913216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:09:51.913576 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:09:51.913554233 +0000 UTC m=+51.053543559 I0325 21:12:04.688246 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:12:04.688317 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-25 21:12:04.688308091 +0000 UTC m=+183.828297417 I0325 21:12:04.688312 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-25 21:12:04.688292731 +0000 UTC m=+183.828282077 E0325 21:12:04.704135 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0325 21:12:04.704207 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-25 21:12:04.704200209 +0000 UTC m=+183.844189535 I0325 21:12:04.704249 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0325 21:12:04.706353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:12:04.706558 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-25 21:12:04.706546795 +0000 UTC m=+183.846536121 E0325 21:12:04.716093 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0325 21:12:04.716202 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0325 21:12:04.716241 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0325 21:12:04.716273 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0325 21:12:04.716318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:12:04.716355 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-25 21:12:04.716346679 +0000 UTC m=+183.856336005 I0325 21:12:04.716513 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-25 21:12:04.716491732 +0000 UTC m=+183.856481058 I0325 21:12:04.740565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:12:04.740629 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-25 21:12:04.740622946 +0000 UTC m=+183.880612262 I0325 21:12:04.956121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:12:04.989712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-tv4k6" condition "Approved" to 2026-03-25 21:12:04.989695568 +0000 UTC m=+184.129684894 I0325 21:12:05.009430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-tv4k6" condition "Ready" to 2026-03-25 21:12:05.009415047 +0000 UTC m=+184.149404393 I0325 21:12:05.096544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:12:05.124161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-w7mnn" condition "Approved" to 2026-03-25 21:12:05.12415163 +0000 UTC m=+184.264140946 I0325 21:12:05.151009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-w7mnn" condition "Ready" to 2026-03-25 21:12:05.15099876 +0000 UTC m=+184.290988106 I0325 21:12:05.181066 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:12:05.181054725 +0000 UTC m=+184.321044051 I0325 21:12:05.200560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:12:05.203200 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:12:05.203180782 +0000 UTC m=+184.343170108 I0325 21:12:05.215905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:12:05.224342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:12:05.224908 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:12:05.224895919 +0000 UTC m=+184.364885245 I0325 21:12:09.717696 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:12:09.717682599 +0000 UTC m=+188.857671945 I0325 21:12:09.732009 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-tv4k6" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:12:09.73199711 +0000 UTC m=+188.871986436 I0325 21:12:09.762922 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:12:09.762907786 +0000 UTC m=+188.902897102 I0325 21:12:09.783215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:12:09.786353 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:12:09.786344585 +0000 UTC m=+188.926333911 I0325 21:12:09.789701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:12:09.805563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:12:09.806161 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:12:09.806152386 +0000 UTC m=+188.946141722 I0325 21:14:46.782410 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Ready" to 2026-03-25 21:14:46.782396452 +0000 UTC m=+345.922385768 I0325 21:14:46.782530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-244.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:14:46.782614 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Issuing" to 2026-03-25 21:14:46.782603657 +0000 UTC m=+345.922593003 I0325 21:14:46.799154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:14:46.799323 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Ready" to 2026-03-25 21:14:46.799311841 +0000 UTC m=+345.939301167 I0325 21:14:47.089792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:14:47.119315 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-244.nip.io-tls-lq6bk" condition "Approved" to 2026-03-25 21:14:47.119300371 +0000 UTC m=+346.259289717 I0325 21:14:47.143426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-244.nip.io-tls-lq6bk" condition "Ready" to 2026-03-25 21:14:47.143406 +0000 UTC m=+346.283395366 I0325 21:14:47.171499 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:14:47.171479301 +0000 UTC m=+346.311468657 I0325 21:14:47.195901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:14:47.247691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:15:58.784672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:15:58.784717 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-25 21:15:58.784706731 +0000 UTC m=+417.924696057 I0325 21:15:58.784831 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-25 21:15:58.784806173 +0000 UTC m=+417.924795519 E0325 21:15:58.801195 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0325 21:15:58.801244 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-25 21:15:58.801235015 +0000 UTC m=+417.941224371 E0325 21:15:58.801310 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0325 21:15:58.804937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:15:58.804993 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-25 21:15:58.804987775 +0000 UTC m=+417.944977101 E0325 21:15:58.811525 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0325 21:15:58.812464 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 21:15:58.812548 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0325 21:15:58.812581 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0325 21:15:58.824042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:15:58.851917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wzptm" condition "Approved" to 2026-03-25 21:15:58.851900924 +0000 UTC m=+417.991890280 I0325 21:15:58.864693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wzptm" condition "Ready" to 2026-03-25 21:15:58.864678558 +0000 UTC m=+418.004667904 I0325 21:15:58.885548 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:15:58.885525206 +0000 UTC m=+418.025514562 I0325 21:15:58.905351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:03.812444 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:16:03.812422606 +0000 UTC m=+422.952411962 I0325 21:16:43.040789 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-25 21:16:43.040773689 +0000 UTC m=+462.180763005 I0325 21:16:43.041124 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:16:43.041226 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-25 21:16:43.04121516 +0000 UTC m=+462.181204506 I0325 21:16:43.043125 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-25 21:16:43.043109364 +0000 UTC m=+462.183098680 I0325 21:16:43.043283 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:16:43.043308 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-25 21:16:43.043304529 +0000 UTC m=+462.183293845 I0325 21:16:43.049408 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-25 21:16:43.049401265 +0000 UTC m=+462.189390581 I0325 21:16:43.049874 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:16:43.049900 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-25 21:16:43.049893967 +0000 UTC m=+462.189883273 I0325 21:16:43.073181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:43.073293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:16:43.073325 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-25 21:16:43.073317067 +0000 UTC m=+462.213306393 I0325 21:16:43.076458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:43.076576 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-25 21:16:43.076563514 +0000 UTC m=+462.216552870 I0325 21:16:43.078450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:43.078586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:16:43.078623 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-25 21:16:43.078613714 +0000 UTC m=+462.218603040 I0325 21:16:43.220965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:43.232486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-p4t25" condition "Approved" to 2026-03-25 21:16:43.232467922 +0000 UTC m=+462.372457268 I0325 21:16:43.253906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-p4t25" condition "Ready" to 2026-03-25 21:16:43.253889295 +0000 UTC m=+462.393878651 I0325 21:16:43.268937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:43.285215 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:16:43.284939866 +0000 UTC m=+462.424929222 I0325 21:16:43.314176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:43.314615 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:16:43.314606055 +0000 UTC m=+462.454595371 I0325 21:16:43.321781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xgf54" condition "Approved" to 2026-03-25 21:16:43.321766987 +0000 UTC m=+462.461756323 I0325 21:16:43.345433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xgf54" condition "Ready" to 2026-03-25 21:16:43.345422112 +0000 UTC m=+462.485411438 I0325 21:16:43.346411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0325 21:16:43.350046 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-x2nxb\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0325 21:16:43.430171 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:16:43.430152448 +0000 UTC m=+462.570141774 I0325 21:16:43.575404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:43.796922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f4mbk" condition "Approved" to 2026-03-25 21:16:43.796906195 +0000 UTC m=+462.936895521 I0325 21:16:43.891178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f4mbk" condition "Ready" to 2026-03-25 21:16:43.891162069 +0000 UTC m=+463.031151395 I0325 21:16:44.529182 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:16:44.529162372 +0000 UTC m=+463.669151728 I0325 21:16:44.579554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:44.697325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:44.697927 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:16:44.697915916 +0000 UTC m=+463.837905272 I0325 21:16:44.878573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:51.250419 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" condition "Ready" to 2026-03-25 21:16:51.250397928 +0000 UTC m=+470.390387284 I0325 21:16:51.250483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:16:51.250524 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" condition "Issuing" to 2026-03-25 21:16:51.2505135 +0000 UTC m=+470.390502826 I0325 21:16:51.263959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:51.264065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:16:51.264100 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" condition "Issuing" to 2026-03-25 21:16:51.264091415 +0000 UTC m=+470.404080751 I0325 21:16:51.529024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sbq2g-xvb8n" condition "Approved" to 2026-03-25 21:16:51.529003559 +0000 UTC m=+470.668992905 I0325 21:16:51.546440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-sbq2g-xvb8n" condition "Ready" to 2026-03-25 21:16:51.546428276 +0000 UTC m=+470.686417602 I0325 21:16:51.575791 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:16:51.575770577 +0000 UTC m=+470.715759923 I0325 21:16:51.597287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:51.597629 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:16:51.597619759 +0000 UTC m=+470.737609075 I0325 21:16:51.604588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:51.615873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:16:51.616194 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:16:51.616185553 +0000 UTC m=+470.756174879 I0325 21:16:51.617753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-sbq2g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:17:16.798647 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-25 21:17:16.798628774 +0000 UTC m=+495.938618100 I0325 21:17:16.798829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:17:16.798881 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-25 21:17:16.79886841 +0000 UTC m=+495.938857736 I0325 21:17:16.817052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:17:16.817113 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:17:16.817127 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-25 21:17:16.817121757 +0000 UTC m=+495.957111083 I0325 21:17:16.977569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c52kt" condition "Approved" to 2026-03-25 21:17:16.977552272 +0000 UTC m=+496.117541588 I0325 21:17:17.005302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-c52kt" condition "Ready" to 2026-03-25 21:17:17.005290195 +0000 UTC m=+496.145279521 I0325 21:17:17.039666 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:17:17.039646346 +0000 UTC m=+496.179635702 I0325 21:17:17.061504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:17:17.061864 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:17:17.061852607 +0000 UTC m=+496.201841943 I0325 21:17:17.082099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:20:46.565411 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-25 21:20:46.565398768 +0000 UTC m=+705.705388094 I0325 21:20:46.565547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:20:46.565781 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-25 21:20:46.565774677 +0000 UTC m=+705.705764003 I0325 21:20:46.584775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:20:46.584897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:20:46.584932 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-25 21:20:46.584922524 +0000 UTC m=+705.724911870 I0325 21:20:46.736257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-g5gpj" condition "Approved" to 2026-03-25 21:20:46.736247032 +0000 UTC m=+705.876236368 I0325 21:20:46.755466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-g5gpj" condition "Ready" to 2026-03-25 21:20:46.755456711 +0000 UTC m=+705.895446037 I0325 21:20:46.787054 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:20:46.787012403 +0000 UTC m=+705.927026979 I0325 21:20:46.819030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:20:46.819621 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:20:46.81961323 +0000 UTC m=+705.959602556 I0325 21:20:46.822643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:20:46.840037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:20:46.842355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:20:46.842798 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:20:46.842787692 +0000 UTC m=+705.982777048 I0325 21:23:15.928468 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:23:15.928584 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-25 21:23:15.928570265 +0000 UTC m=+855.068559641 I0325 21:23:15.928621 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-25 21:23:15.928594846 +0000 UTC m=+855.068584192 I0325 21:23:15.945994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:23:15.946062 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:23:15.946091 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-25 21:23:15.946083762 +0000 UTC m=+855.086073088 I0325 21:23:16.124395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:23:16.133820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-75vbx" condition "Approved" to 2026-03-25 21:23:16.133809948 +0000 UTC m=+855.273799264 I0325 21:23:16.150205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-75vbx" condition "Ready" to 2026-03-25 21:23:16.150192519 +0000 UTC m=+855.290181825 I0325 21:23:16.181742 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:23:16.181730941 +0000 UTC m=+855.321720267 I0325 21:23:16.200840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:23:16.201277 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:23:16.201269276 +0000 UTC m=+855.341258612 I0325 21:23:16.227290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:24:24.414679 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-25 21:24:24.414659326 +0000 UTC m=+923.554648652 I0325 21:24:24.415005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:24:24.415057 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-25 21:24:24.415045675 +0000 UTC m=+923.555035061 I0325 21:24:24.435772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:24:24.435867 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-25 21:24:24.435858341 +0000 UTC m=+923.575847667 I0325 21:24:24.671561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:24:24.707292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-hz462" condition "Approved" to 2026-03-25 21:24:24.707273417 +0000 UTC m=+923.847262773 I0325 21:24:24.727534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-hz462" condition "Ready" to 2026-03-25 21:24:24.72752243 +0000 UTC m=+923.867511736 I0325 21:24:24.762752 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:24:24.762734208 +0000 UTC m=+923.902723534 I0325 21:24:24.787032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:24:24.787289 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:24:24.787281143 +0000 UTC m=+923.927270469 I0325 21:24:24.815936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:27:35.521138 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-25 21:27:35.521121731 +0000 UTC m=+1114.661111087 I0325 21:27:35.521155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0325 21:27:35.521269 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-25 21:27:35.521255324 +0000 UTC m=+1114.661244700 I0325 21:27:35.541711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:27:35.541814 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-25 21:27:35.541803794 +0000 UTC m=+1114.681793140 I0325 21:27:35.815407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0325 21:27:35.849832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wxrkq" condition "Approved" to 2026-03-25 21:27:35.849820058 +0000 UTC m=+1114.989809364 I0325 21:27:35.866577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wxrkq" condition "Ready" to 2026-03-25 21:27:35.866564268 +0000 UTC m=+1115.006553584 I0325 21:27:35.902595 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-25 21:27:35.902579087 +0000 UTC m=+1115.042568413 I0325 21:27:35.920597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"