I0324 14:54:42.280289 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0324 14:54:42.280569 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0324 14:54:42.280714 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0324 14:54:42.285866 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0324 14:54:42.286508 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0324 14:54:42.286587 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0324 14:54:42.286595 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0324 14:54:42.288448 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0324 14:54:42.308948 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0324 14:54:42.309223 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0324 14:54:42.309279 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0324 14:54:42.316556 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0324 14:54:42.319119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0324 14:54:42.321570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0324 14:54:42.324017 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0324 14:54:42.325826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0324 14:54:42.327757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0324 14:54:42.331599 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0324 14:54:42.335350 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0324 14:54:42.338870 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0324 14:54:42.338990 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0324 14:54:42.341102 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0324 14:54:42.342896 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0324 14:54:42.344765 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0324 14:54:42.346326 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0324 14:54:42.346345 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0324 14:54:42.346404 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0324 14:54:42.348221 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0324 14:54:42.353344 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0324 14:54:42.357095 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0324 14:54:42.359627 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0324 14:54:42.361877 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0324 14:54:42.362009 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0324 14:54:42.365505 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:42.365822 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:42.366275 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:42.366308 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:42.390569 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:42.398582 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:42.408990 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:42.416817 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:42.448087 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:42.466012 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:55:00.118241 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-24 14:55:00.118194264 +0000 UTC m=+17.866611581 I0324 14:55:00.821666 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-24 14:55:00.821649363 +0000 UTC m=+18.570066680 I0324 14:55:00.821866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:55:00.821989 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-24 14:55:00.821975861 +0000 UTC m=+18.570393178 E0324 14:55:00.837749 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0324 14:55:00.837844 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-24 14:55:00.837833267 +0000 UTC m=+18.586250564 E0324 14:55:00.837895 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0324 14:55:00.839684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:55:00.839751 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-24 14:55:00.839742922 +0000 UTC m=+18.588160219 E0324 14:55:00.847951 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0324 14:55:00.848383 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 14:55:00.848423 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 14:55:00.848527 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0324 14:55:00.857893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:55:00.878558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x85s8" condition "Approved" to 2026-03-24 14:55:00.878541836 +0000 UTC m=+18.626959153 I0324 14:55:00.893309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-x85s8" condition "Ready" to 2026-03-24 14:55:00.893291355 +0000 UTC m=+18.641708672 I0324 14:55:00.924582 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:55:00.924571586 +0000 UTC m=+18.672988873 I0324 14:55:00.944512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:55:00.944964 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:55:00.944954722 +0000 UTC m=+18.693372049 I0324 14:55:00.962064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:55:05.849358 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:55:05.84934358 +0000 UTC m=+23.597760897 I0324 14:55:25.967367 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:55:25.967548 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-24 14:55:25.967538935 +0000 UTC m=+43.715956232 I0324 14:55:25.967387 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-24 14:55:25.967354151 +0000 UTC m=+43.715771468 I0324 14:55:25.976433 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-24 14:55:25.976425624 +0000 UTC m=+43.724842921 I0324 14:55:25.993540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:55:25.993625 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-24 14:55:25.99361797 +0000 UTC m=+43.742035257 I0324 14:55:26.117078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:55:26.313936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-94rt6" condition "Approved" to 2026-03-24 14:55:26.313919591 +0000 UTC m=+44.062336908 I0324 14:55:26.341588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-94rt6" condition "Ready" to 2026-03-24 14:55:26.341568392 +0000 UTC m=+44.089985689 E0324 14:55:26.341699 1 selfsigned.go:127] "Referenced secret openstack/rabbitmq-messaging-topology-operator-webhook-gthdz not found" err="secret \"rabbitmq-messaging-topology-operator-webhook-gthdz\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="rabbitmq-messaging-topology-operator-webhook-94rt6" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" E0324 14:55:26.367445 1 selfsigned.go:127] "Referenced secret openstack/rabbitmq-messaging-topology-operator-webhook-gthdz not found" err="secret \"rabbitmq-messaging-topology-operator-webhook-gthdz\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="rabbitmq-messaging-topology-operator-webhook-94rt6" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" I0324 14:55:26.529061 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" resource_name="rabbitmq-messaging-topology-operator-webhook" resource_namespace="openstack" resource_kind="Certificate" resource_version="v1" resource_name="rabbitmq-messaging-topology-operator-webhook-94rt6" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" resource_name="rabbitmq-messaging-topology-operator-webhook-gthdz" resource_namespace="openstack" resource_kind="Secret" resource_version="v1" I0324 14:55:26.555502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rts7t" condition "Approved" to 2026-03-24 14:55:26.555476673 +0000 UTC m=+44.303893990 I0324 14:55:26.577973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rts7t" condition "Ready" to 2026-03-24 14:55:26.577962218 +0000 UTC m=+44.326379545 I0324 14:55:26.609598 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:55:26.609581778 +0000 UTC m=+44.357999075 I0324 14:55:26.634174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:55:26.634561 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:55:26.634552518 +0000 UTC m=+44.382969805 I0324 14:55:26.655743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:55:26.656048 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:55:26.656040141 +0000 UTC m=+44.404457438 I0324 14:59:58.503937 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-31.nip.io-tls" condition "Ready" to 2026-03-24 14:59:58.503789297 +0000 UTC m=+316.252206614 I0324 14:59:58.505126 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-31.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:59:58.505167 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-31.nip.io-tls" condition "Issuing" to 2026-03-24 14:59:58.505158505 +0000 UTC m=+316.253575822 I0324 14:59:58.529942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-31.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-31.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:59:58.530053 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-31.nip.io-tls" condition "Ready" to 2026-03-24 14:59:58.530044898 +0000 UTC m=+316.278462185 I0324 14:59:58.766119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-31.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-31.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:59:58.797447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-31.nip.io-tls-j9jkk" condition "Approved" to 2026-03-24 14:59:58.797422844 +0000 UTC m=+316.545840141 I0324 14:59:58.827712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-31.nip.io-tls-j9jkk" condition "Ready" to 2026-03-24 14:59:58.827687089 +0000 UTC m=+316.576104416 I0324 14:59:58.859963 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-31.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:59:58.859942836 +0000 UTC m=+316.608360133 I0324 14:59:58.878920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-31.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-31.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:06.685301 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-24 15:01:06.685282407 +0000 UTC m=+384.433699704 I0324 15:01:06.685480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:06.685538 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-24 15:01:06.685525742 +0000 UTC m=+384.433943039 E0324 15:01:06.703235 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0324 15:01:06.704244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:06.704498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:06.704531 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-24 15:01:06.704523151 +0000 UTC m=+384.452940478 I0324 15:01:06.703316 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-24 15:01:06.703304747 +0000 UTC m=+384.451722074 E0324 15:01:06.704953 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 15:01:06.716486 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0324 15:01:06.716538 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 15:01:06.716562 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 15:01:06.716580 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0324 15:01:06.737962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:06.742048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z8gm2" condition "Approved" to 2026-03-24 15:01:06.742030751 +0000 UTC m=+384.490448078 I0324 15:01:06.760752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-z8gm2" condition "Ready" to 2026-03-24 15:01:06.760735743 +0000 UTC m=+384.509153050 I0324 15:01:06.785242 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:06.785226935 +0000 UTC m=+384.533644252 I0324 15:01:06.802529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:06.847970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:11.717854 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:11.717843616 +0000 UTC m=+389.466260893 I0324 15:01:51.291832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:51.291871 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-24 15:01:51.291861234 +0000 UTC m=+429.040278531 I0324 15:01:51.292228 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-24 15:01:51.292221661 +0000 UTC m=+429.040638948 I0324 15:01:51.299099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:51.299177 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-24 15:01:51.299169224 +0000 UTC m=+429.047586521 I0324 15:01:51.299663 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-24 15:01:51.299645304 +0000 UTC m=+429.048062591 I0324 15:01:51.303685 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-24 15:01:51.303668093 +0000 UTC m=+429.052085380 I0324 15:01:51.304111 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:51.304132 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-24 15:01:51.304129093 +0000 UTC m=+429.052546380 I0324 15:01:51.326186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:51.326241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:51.326257 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-24 15:01:51.326251999 +0000 UTC m=+429.074669286 I0324 15:01:51.336742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:51.336826 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-24 15:01:51.336816682 +0000 UTC m=+429.085233979 I0324 15:01:51.339558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:51.339639 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-24 15:01:51.339629484 +0000 UTC m=+429.088046771 I0324 15:01:51.558419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:51.566900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-x8ww8" condition "Approved" to 2026-03-24 15:01:51.566882498 +0000 UTC m=+429.315299815 I0324 15:01:51.575447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:51.588038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-x8ww8" condition "Ready" to 2026-03-24 15:01:51.588030403 +0000 UTC m=+429.336447690 I0324 15:01:51.615502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lzwrh" condition "Approved" to 2026-03-24 15:01:51.615485016 +0000 UTC m=+429.363902333 I0324 15:01:51.621030 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:51.621010058 +0000 UTC m=+429.369427375 I0324 15:01:51.647693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lzwrh" condition "Ready" to 2026-03-24 15:01:51.647677994 +0000 UTC m=+429.396095291 I0324 15:01:51.657585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:51.657852 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:51.657845097 +0000 UTC m=+429.406262394 I0324 15:01:51.680527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0324 15:01:51.684454 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-t9nqf\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0324 15:01:51.703049 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:51.70303617 +0000 UTC m=+429.451453457 I0324 15:01:51.896952 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:51.896932693 +0000 UTC m=+429.645349990 I0324 15:01:51.937447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:51.988571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:52.142884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:52.297909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x7c92" condition "Approved" to 2026-03-24 15:01:52.297883795 +0000 UTC m=+430.046301112 I0324 15:01:52.449344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-x7c92" condition "Ready" to 2026-03-24 15:01:52.449324653 +0000 UTC m=+430.197741980 I0324 15:01:52.838314 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:52.838292793 +0000 UTC m=+430.586710110 I0324 15:01:52.938617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:52.939073 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:52.939061948 +0000 UTC m=+430.687479245 I0324 15:01:53.202089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:01.163906 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:02:01.163963 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls" condition "Issuing" to 2026-03-24 15:02:01.163946464 +0000 UTC m=+438.912363781 I0324 15:02:01.164029 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls" condition "Ready" to 2026-03-24 15:02:01.163823402 +0000 UTC m=+438.912240689 I0324 15:02:01.181015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:01.181169 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls" condition "Ready" to 2026-03-24 15:02:01.181159983 +0000 UTC m=+438.929577260 I0324 15:02:01.358727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:01.400616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8ls2c-nhr28" condition "Approved" to 2026-03-24 15:02:01.400594305 +0000 UTC m=+439.149011602 I0324 15:02:01.421338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8ls2c-nhr28" condition "Ready" to 2026-03-24 15:02:01.421323971 +0000 UTC m=+439.169741268 I0324 15:02:01.455360 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:01.455343329 +0000 UTC m=+439.203760626 I0324 15:02:01.474068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:01.528013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8ls2c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:34.275367 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:02:34.275400 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-24 15:02:34.275380928 +0000 UTC m=+472.023798225 I0324 15:02:34.275411 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-24 15:02:34.275401459 +0000 UTC m=+472.023818746 I0324 15:02:34.292587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:34.292663 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-24 15:02:34.292656818 +0000 UTC m=+472.041074115 I0324 15:02:34.402600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:34.438836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2fldm" condition "Approved" to 2026-03-24 15:02:34.438816461 +0000 UTC m=+472.187233748 I0324 15:02:34.461771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2fldm" condition "Ready" to 2026-03-24 15:02:34.461760365 +0000 UTC m=+472.210177652 I0324 15:02:34.495772 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:34.495755392 +0000 UTC m=+472.244172719 I0324 15:02:34.517974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:34.518292 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:34.518285367 +0000 UTC m=+472.266702664 I0324 15:02:34.533349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:34.537682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:05:44.743668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:05:44.744083 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-24 15:05:44.743496092 +0000 UTC m=+662.491913389 I0324 15:05:44.744134 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-24 15:05:44.743829189 +0000 UTC m=+662.492246516 I0324 15:05:44.765149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:05:44.765237 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:05:44.765274 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-24 15:05:44.765266186 +0000 UTC m=+662.513683483 I0324 15:05:45.130275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:05:45.142120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bf28n" condition "Approved" to 2026-03-24 15:05:45.142095353 +0000 UTC m=+662.890512680 I0324 15:05:45.160647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-bf28n" condition "Ready" to 2026-03-24 15:05:45.160630216 +0000 UTC m=+662.909047513 I0324 15:05:45.198173 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:05:45.198154225 +0000 UTC m=+662.946571512 I0324 15:05:45.219447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:05:45.219889 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:05:45.219878638 +0000 UTC m=+662.968295935 I0324 15:05:45.244518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:05:45.245003 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:05:45.244990186 +0000 UTC m=+662.993407503 I0324 15:05:45.246899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:08:08.208390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:08:08.208492 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-24 15:08:08.208484531 +0000 UTC m=+805.956901818 I0324 15:08:08.208582 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-24 15:08:08.208558613 +0000 UTC m=+805.956975910 I0324 15:08:08.229999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:08:08.230280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:08:08.230317 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-24 15:08:08.230308868 +0000 UTC m=+805.978726165 I0324 15:08:08.451612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:08:08.459276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-vxlzm" condition "Approved" to 2026-03-24 15:08:08.459265236 +0000 UTC m=+806.207682533 I0324 15:08:08.479873 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-vxlzm" condition "Ready" to 2026-03-24 15:08:08.479857317 +0000 UTC m=+806.228274614 I0324 15:08:08.508887 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:08:08.508867046 +0000 UTC m=+806.257284333 I0324 15:08:08.532893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:08:08.533420 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:08:08.53341001 +0000 UTC m=+806.281827307 I0324 15:08:08.551768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:08:08.552369 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:08:08.552353724 +0000 UTC m=+806.300771051 I0324 15:09:11.117035 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:09:11.117088 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-24 15:09:11.117077261 +0000 UTC m=+868.865494578 I0324 15:09:11.117145 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-24 15:09:11.117065441 +0000 UTC m=+868.865482758 I0324 15:09:11.141310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:09:11.141398 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-24 15:09:11.141390915 +0000 UTC m=+868.889808232 I0324 15:09:11.343675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:09:11.378624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-hqzdp" condition "Approved" to 2026-03-24 15:09:11.378432951 +0000 UTC m=+869.126850268 I0324 15:09:11.403958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-hqzdp" condition "Ready" to 2026-03-24 15:09:11.403935311 +0000 UTC m=+869.152352638 I0324 15:09:11.442301 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:09:11.442281047 +0000 UTC m=+869.190698374 I0324 15:09:11.472629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:09:11.472893 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:09:11.472883536 +0000 UTC m=+869.221300833 I0324 15:09:11.479458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:09:11.506062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:20.765487 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-24 15:12:20.765366774 +0000 UTC m=+1058.513784091 I0324 15:12:20.765691 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:12:20.765781 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-24 15:12:20.765770872 +0000 UTC m=+1058.514188169 I0324 15:12:20.792206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:20.792309 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-24 15:12:20.792297756 +0000 UTC m=+1058.540715063 I0324 15:12:20.914754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:20.956436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-dpj92" condition "Approved" to 2026-03-24 15:12:20.956420699 +0000 UTC m=+1058.704837986 I0324 15:12:20.980177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-dpj92" condition "Ready" to 2026-03-24 15:12:20.980161552 +0000 UTC m=+1058.728578869 I0324 15:12:21.010641 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:12:21.010632782 +0000 UTC m=+1058.759050069 I0324 15:12:21.034413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:21.034933 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:12:21.034922488 +0000 UTC m=+1058.783339815 I0324 15:12:21.061185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:21.061523 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:12:21.061513313 +0000 UTC m=+1058.809930610