I0331 20:21:21.529983 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0331 20:21:21.530168 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0331 20:21:21.530268 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0331 20:21:21.537410 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0331 20:21:21.537992 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0331 20:21:21.538076 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0331 20:21:21.538126 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0331 20:21:21.542085 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0331 20:21:21.558463 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0331 20:21:21.563389 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0331 20:21:21.567394 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0331 20:21:21.567462 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0331 20:21:21.567470 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0331 20:21:21.572461 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0331 20:21:21.576806 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0331 20:21:21.581080 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0331 20:21:21.581119 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0331 20:21:21.581212 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0331 20:21:21.584063 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0331 20:21:21.586866 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0331 20:21:21.588746 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0331 20:21:21.590486 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0331 20:21:21.592256 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0331 20:21:21.598978 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0331 20:21:21.602897 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0331 20:21:21.602931 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0331 20:21:21.602979 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0331 20:21:21.605114 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0331 20:21:21.607156 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0331 20:21:21.609064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0331 20:21:21.610822 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0331 20:21:21.612560 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0331 20:21:21.615828 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0331 20:21:21.617445 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:21:21.618007 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:21:21.620263 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:21:21.621489 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:21:21.635424 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:21:21.648534 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:21:21.669993 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:21:21.686538 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:21:21.706556 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:21:21.706727 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0331 20:21:33.599670 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-31 20:21:33.599649229 +0000 UTC m=+12.103175252 I0331 20:21:34.311859 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:21:34.311918 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-31 20:21:34.311910236 +0000 UTC m=+12.815436239 I0331 20:21:34.312247 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 20:21:34.312242015 +0000 UTC m=+12.815768018 E0331 20:21:34.324889 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 20:21:34.325003 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-31 20:21:34.324992125 +0000 UTC m=+12.828518158 E0331 20:21:34.325047 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 20:21:34.327985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:21:34.328241 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-31 20:21:34.328223334 +0000 UTC m=+12.831749387 E0331 20:21:34.334845 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0331 20:21:34.334945 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 20:21:34.335005 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 20:21:34.335060 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0331 20:21:34.344997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:21:34.369956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f2ksw" condition "Approved" to 2026-03-31 20:21:34.369936948 +0000 UTC m=+12.873462981 I0331 20:21:34.381962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f2ksw" condition "Ready" to 2026-03-31 20:21:34.381945067 +0000 UTC m=+12.885471100 I0331 20:21:34.407859 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:21:34.407841778 +0000 UTC m=+12.911367801 I0331 20:21:34.426691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:21:34.427118 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:21:34.427108046 +0000 UTC m=+12.930634069 I0331 20:21:34.440796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:21:34.441260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:21:34.441482 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:21:34.44147649 +0000 UTC m=+12.945002493 I0331 20:21:39.336444 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:21:39.336386947 +0000 UTC m=+17.839912980 I0331 20:22:02.164796 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-31 20:22:02.164777169 +0000 UTC m=+40.668303202 I0331 20:22:02.165418 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:22:02.165557 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-31 20:22:02.1655462 +0000 UTC m=+40.669072243 I0331 20:22:02.178411 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-31 20:22:02.178391781 +0000 UTC m=+40.681917794 I0331 20:22:02.192061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:22:02.192164 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:22:02.192204 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-31 20:22:02.192196018 +0000 UTC m=+40.695722041 I0331 20:22:02.409666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:22:02.418894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tht7q" condition "Approved" to 2026-03-31 20:22:02.418875714 +0000 UTC m=+40.922401717 I0331 20:22:02.448032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-tht7q" condition "Ready" to 2026-03-31 20:22:02.44801381 +0000 UTC m=+40.951539833 I0331 20:22:02.480233 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:22:02.48021036 +0000 UTC m=+40.983736403 I0331 20:22:02.507226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:22:02.507722 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:22:02.507713342 +0000 UTC m=+41.011239345 I0331 20:22:02.527031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:22:02.527397 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:22:02.52738523 +0000 UTC m=+41.030911233 I0331 20:22:02.529020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:23:48.844532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:23:48.844598 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-31 20:23:48.844576856 +0000 UTC m=+147.348102929 I0331 20:23:48.844727 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-31 20:23:48.8447066 +0000 UTC m=+147.348232633 E0331 20:23:48.859190 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 20:23:48.859262 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-31 20:23:48.859252667 +0000 UTC m=+147.362778680 I0331 20:23:48.859312 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 20:23:48.861101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:23:48.861163 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:23:48.861192 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-31 20:23:48.86118568 +0000 UTC m=+147.364711683 E0331 20:23:48.868670 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0331 20:23:48.868793 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0331 20:23:48.868829 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0331 20:23:48.868882 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0331 20:23:48.872331 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-31 20:23:48.872316435 +0000 UTC m=+147.375842438 I0331 20:23:48.872379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:23:48.872567 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-31 20:23:48.872555651 +0000 UTC m=+147.376081684 I0331 20:23:48.888233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:23:48.888350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:23:48.888390 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-31 20:23:48.888382814 +0000 UTC m=+147.391908817 I0331 20:23:49.100483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-rrvp2" condition "Approved" to 2026-03-31 20:23:49.100468074 +0000 UTC m=+147.603994127 I0331 20:23:49.117137 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-rrvp2" condition "Ready" to 2026-03-31 20:23:49.11712813 +0000 UTC m=+147.620654123 I0331 20:23:49.136230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-djfrd" condition "Approved" to 2026-03-31 20:23:49.136211172 +0000 UTC m=+147.639737195 I0331 20:23:49.167063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-djfrd" condition "Ready" to 2026-03-31 20:23:49.167048885 +0000 UTC m=+147.670574888 I0331 20:23:49.194979 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:23:49.194948148 +0000 UTC m=+147.698474151 I0331 20:23:49.212237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:23:49.212647 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:23:49.212639042 +0000 UTC m=+147.716165045 I0331 20:23:49.227989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:23:53.869877 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:23:53.869862938 +0000 UTC m=+152.373388961 I0331 20:23:53.885538 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-rrvp2" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:23:53.885528437 +0000 UTC m=+152.389054440 I0331 20:23:53.915773 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:23:53.915756603 +0000 UTC m=+152.419282626 I0331 20:23:53.935612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:23:53.936236 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:23:53.936222973 +0000 UTC m=+152.439748996 I0331 20:23:53.959689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:26:26.507799 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:26:26.507856 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Issuing" to 2026-03-31 20:26:26.507836277 +0000 UTC m=+305.011362300 I0331 20:26:26.507852 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-03-31 20:26:26.507820386 +0000 UTC m=+305.011346439 I0331 20:26:26.526525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:26:26.526606 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:26:26.526634 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Issuing" to 2026-03-31 20:26:26.526627192 +0000 UTC m=+305.030153215 I0331 20:26:26.671797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:26:26.681160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-s2xmh" condition "Approved" to 2026-03-31 20:26:26.681134492 +0000 UTC m=+305.184660515 I0331 20:26:26.701142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-s2xmh" condition "Ready" to 2026-03-31 20:26:26.70112415 +0000 UTC m=+305.204650183 I0331 20:26:26.730505 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:26:26.730494076 +0000 UTC m=+305.234020079 I0331 20:26:26.751943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:26:26.752304 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:26:26.752297064 +0000 UTC m=+305.255823067 I0331 20:26:26.765135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:26:26.766734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:26:26.767027 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:26:26.767020598 +0000 UTC m=+305.270546591 I0331 20:27:37.204109 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-31 20:27:37.204086348 +0000 UTC m=+375.707612371 I0331 20:27:37.204291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:27:37.204363 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-31 20:27:37.204351015 +0000 UTC m=+375.707877068 E0331 20:27:37.217603 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 20:27:37.217661 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-31 20:27:37.21765201 +0000 UTC m=+375.721178013 E0331 20:27:37.217717 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0331 20:27:37.218591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:37.218672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:27:37.218702 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-31 20:27:37.218695248 +0000 UTC m=+375.722221271 E0331 20:27:37.229868 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0331 20:27:37.229977 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 20:27:37.230020 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0331 20:27:37.230084 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0331 20:27:37.256119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:37.256345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lblv8" condition "Approved" to 2026-03-31 20:27:37.256325711 +0000 UTC m=+375.759851744 I0331 20:27:37.268964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lblv8" condition "Ready" to 2026-03-31 20:27:37.268951318 +0000 UTC m=+375.772477321 I0331 20:27:37.292920 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:27:37.292901036 +0000 UTC m=+375.796427069 I0331 20:27:37.314529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:37.358803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:27:42.232282 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:27:42.232257646 +0000 UTC m=+380.735783679 I0331 20:28:20.489040 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:28:20.489081 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-31 20:28:20.489073788 +0000 UTC m=+418.992599781 I0331 20:28:20.489545 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-31 20:28:20.489540771 +0000 UTC m=+418.993066774 I0331 20:28:20.489773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:28:20.489788 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-31 20:28:20.489785318 +0000 UTC m=+418.993311311 I0331 20:28:20.489939 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-31 20:28:20.489936352 +0000 UTC m=+418.993462345 I0331 20:28:20.490217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:28:20.490227 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-31 20:28:20.4902245 +0000 UTC m=+418.993750493 I0331 20:28:20.490360 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-31 20:28:20.490357123 +0000 UTC m=+418.993883116 I0331 20:28:20.526622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:20.526704 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-31 20:28:20.526694328 +0000 UTC m=+419.030220351 I0331 20:28:20.558303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:20.558375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:28:20.558399 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-31 20:28:20.558393235 +0000 UTC m=+419.061919238 I0331 20:28:20.560277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:20.560348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:28:20.560374 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-31 20:28:20.560367939 +0000 UTC m=+419.063893942 I0331 20:28:20.738687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:20.770227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9zw74" condition "Approved" to 2026-03-31 20:28:20.770218791 +0000 UTC m=+419.273744784 I0331 20:28:20.779875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:20.783519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hbd2f" condition "Approved" to 2026-03-31 20:28:20.783507105 +0000 UTC m=+419.287033128 I0331 20:28:20.788407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9zw74" condition "Ready" to 2026-03-31 20:28:20.788399768 +0000 UTC m=+419.291925761 I0331 20:28:20.800284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hbd2f" condition "Ready" to 2026-03-31 20:28:20.800271103 +0000 UTC m=+419.303797106 I0331 20:28:20.814609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:20.825323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7wwrv" condition "Approved" to 2026-03-31 20:28:20.825311268 +0000 UTC m=+419.328837271 I0331 20:28:20.826234 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:28:20.826227794 +0000 UTC m=+419.329753797 I0331 20:28:20.832177 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:28:20.832170246 +0000 UTC m=+419.335696249 I0331 20:28:20.941929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7wwrv" condition "Ready" to 2026-03-31 20:28:20.941913319 +0000 UTC m=+419.445439352 I0331 20:28:21.182629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:21.285057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:21.285538 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:28:21.285531071 +0000 UTC m=+419.789057084 I0331 20:28:21.731415 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:28:21.731401381 +0000 UTC m=+420.234927384 I0331 20:28:21.838963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:22.007934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:22.017350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:22.017940 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:28:22.017926131 +0000 UTC m=+420.521452164 I0331 20:28:22.468116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:22.478377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:30.204896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:28:30.204897 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" condition "Ready" to 2026-03-31 20:28:30.204869803 +0000 UTC m=+428.708395816 I0331 20:28:30.204947 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" condition "Issuing" to 2026-03-31 20:28:30.204933884 +0000 UTC m=+428.708459917 I0331 20:28:30.220109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z42lx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:30.220294 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" condition "Ready" to 2026-03-31 20:28:30.220283265 +0000 UTC m=+428.723809298 I0331 20:28:30.662444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z42lx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:30.714296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-z42lx-sfkvd" condition "Approved" to 2026-03-31 20:28:30.714280441 +0000 UTC m=+429.217806444 I0331 20:28:30.741808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-z42lx-sfkvd" condition "Ready" to 2026-03-31 20:28:30.741794954 +0000 UTC m=+429.245320947 I0331 20:28:30.780129 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:28:30.780114593 +0000 UTC m=+429.283640586 I0331 20:28:31.204962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z42lx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:31.205323 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:28:31.205311227 +0000 UTC m=+429.708837230 I0331 20:28:31.785669 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:28:31.785649497 +0000 UTC m=+430.289175530 I0331 20:28:31.795280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z42lx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:31.795328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z42lx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:28:32.018037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z42lx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z42lx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:29:04.734385 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-31 20:29:04.734354352 +0000 UTC m=+463.237880375 I0331 20:29:04.734365 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:29:04.734570 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-31 20:29:04.734564378 +0000 UTC m=+463.238090371 I0331 20:29:04.756550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:29:04.756622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:29:04.756638 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-31 20:29:04.756629911 +0000 UTC m=+463.260155914 I0331 20:29:05.076228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:29:05.092933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6j99z" condition "Approved" to 2026-03-31 20:29:05.092910163 +0000 UTC m=+463.596436186 I0331 20:29:05.113294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-6j99z" condition "Ready" to 2026-03-31 20:29:05.1132815 +0000 UTC m=+463.616807503 I0331 20:29:05.148465 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:29:05.148446693 +0000 UTC m=+463.651972726 I0331 20:29:05.165915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:29:05.166380 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:29:05.166371213 +0000 UTC m=+463.669897206 I0331 20:29:05.189778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:29:05.190197 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:29:05.190185464 +0000 UTC m=+463.693711487 I0331 20:29:05.195517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:31.510204 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-31 20:32:31.51016566 +0000 UTC m=+670.013691743 I0331 20:32:31.510234 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:32:31.510315 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-31 20:32:31.510305514 +0000 UTC m=+670.013831547 I0331 20:32:31.526724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:31.526796 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:32:31.526817 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-31 20:32:31.526811695 +0000 UTC m=+670.030337688 I0331 20:32:31.736261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:31.747079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zzxwh" condition "Approved" to 2026-03-31 20:32:31.747050317 +0000 UTC m=+670.250576350 I0331 20:32:31.769665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zzxwh" condition "Ready" to 2026-03-31 20:32:31.769650235 +0000 UTC m=+670.273176238 I0331 20:32:31.802798 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:32:31.80278076 +0000 UTC m=+670.306306793 I0331 20:32:31.830488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:31.830830 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:32:31.830824107 +0000 UTC m=+670.334350110 I0331 20:32:31.859281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:32:31.859729 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:32:31.859718067 +0000 UTC m=+670.363244070 I0331 20:32:31.860505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:35:11.028968 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:35:11.029076 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-31 20:35:11.029068102 +0000 UTC m=+829.532594105 I0331 20:35:11.029010 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-31 20:35:11.028965079 +0000 UTC m=+829.532491072 I0331 20:35:11.045325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:35:11.045388 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-31 20:35:11.045380537 +0000 UTC m=+829.548906560 I0331 20:35:11.283276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:35:11.313712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-85k65" condition "Approved" to 2026-03-31 20:35:11.313701237 +0000 UTC m=+829.817227240 I0331 20:35:11.336837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-85k65" condition "Ready" to 2026-03-31 20:35:11.336824147 +0000 UTC m=+829.840350170 I0331 20:35:11.367415 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:35:11.367403982 +0000 UTC m=+829.870929985 I0331 20:35:11.386845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:35:11.387460 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:35:11.387452209 +0000 UTC m=+829.890978212 I0331 20:35:11.410623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:36:32.283079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:36:32.283158 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-31 20:36:32.283120483 +0000 UTC m=+910.786646486 I0331 20:36:32.283230 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-31 20:36:32.283158674 +0000 UTC m=+910.786684677 I0331 20:36:32.299466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:36:32.299540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:36:32.299564 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-31 20:36:32.299557482 +0000 UTC m=+910.803083495 I0331 20:36:32.480607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-gsr6x" condition "Approved" to 2026-03-31 20:36:32.48059838 +0000 UTC m=+910.984124383 I0331 20:36:32.498530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-gsr6x" condition "Ready" to 2026-03-31 20:36:32.498518839 +0000 UTC m=+911.002044842 I0331 20:36:32.528638 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:36:32.528628491 +0000 UTC m=+911.032154494 I0331 20:36:32.551467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:36:32.551980 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:36:32.551971217 +0000 UTC m=+911.055497230 I0331 20:36:32.571251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:39:48.719044 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:39:48.719187 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-31 20:39:48.719164654 +0000 UTC m=+1107.222690717 I0331 20:39:48.719244 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-31 20:39:48.719075061 +0000 UTC m=+1107.222601084 I0331 20:39:48.735557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:39:48.735751 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0331 20:39:48.735841 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-31 20:39:48.735769665 +0000 UTC m=+1107.239295668 I0331 20:39:48.855737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4zflq" condition "Approved" to 2026-03-31 20:39:48.855723395 +0000 UTC m=+1107.359249418 I0331 20:39:48.876278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4zflq" condition "Ready" to 2026-03-31 20:39:48.876259993 +0000 UTC m=+1107.379786016 I0331 20:39:48.905978 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:39:48.90596623 +0000 UTC m=+1107.409492233 I0331 20:39:48.939031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:39:48.939551 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-31 20:39:48.939545293 +0000 UTC m=+1107.443071286 I0331 20:39:48.961522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0331 20:39:48.963963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"