I0320 05:32:45.458677 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0320 05:32:45.458926 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0320 05:32:45.459096 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0320 05:32:45.465755 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0320 05:32:45.466341 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0320 05:32:45.466366 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0320 05:32:45.466442 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0320 05:32:45.469317 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0320 05:32:45.493749 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0320 05:32:45.498502 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0320 05:32:45.498616 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0320 05:32:45.498665 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0320 05:32:45.498570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0320 05:32:45.503235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0320 05:32:45.510285 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0320 05:32:45.514299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0320 05:32:45.517067 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0320 05:32:45.519410 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0320 05:32:45.521814 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0320 05:32:45.523934 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0320 05:32:45.525727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0320 05:32:45.530186 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0320 05:32:45.533484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0320 05:32:45.538009 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0320 05:32:45.539641 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0320 05:32:45.539666 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0320 05:32:45.539795 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0320 05:32:45.541491 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0320 05:32:45.541544 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0320 05:32:45.543508 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0320 05:32:45.545223 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0320 05:32:45.546877 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0320 05:32:45.549728 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0320 05:32:45.554414 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 05:32:45.554737 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 05:32:45.554885 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 05:32:45.555167 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 05:32:45.555369 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 05:32:45.555514 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 05:32:45.555590 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 05:32:45.555851 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 05:32:45.556549 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 05:32:45.583734 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 05:32:55.705494 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-20 05:32:55.705475759 +0000 UTC m=+10.274485270 I0320 05:32:56.494864 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:32:56.494869 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-20 05:32:56.494853272 +0000 UTC m=+11.063862773 I0320 05:32:56.494928 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-20 05:32:56.494917143 +0000 UTC m=+11.063926654 I0320 05:32:56.598670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:32:56.598802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:32:56.598826 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-20 05:32:56.598818504 +0000 UTC m=+11.167828015 E0320 05:32:56.609499 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0320 05:32:56.609610 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-20 05:32:56.609599237 +0000 UTC m=+11.178608748 E0320 05:32:56.609647 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 05:32:56.762330 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0320 05:32:56.762469 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 05:32:56.762520 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 05:32:56.762575 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0320 05:32:56.842463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:32:56.856400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-z9n8c" condition "Approved" to 2026-03-20 05:32:56.856384981 +0000 UTC m=+11.425394462 I0320 05:32:56.873463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-z9n8c" condition "Ready" to 2026-03-20 05:32:56.87344979 +0000 UTC m=+11.442459261 I0320 05:32:56.897567 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:32:56.897557147 +0000 UTC m=+11.466566618 I0320 05:32:56.914144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:32:56.956320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:33:01.763585 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:33:01.76354376 +0000 UTC m=+16.332553261 I0320 05:33:30.287347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:33:30.287513 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-20 05:33:30.287499627 +0000 UTC m=+44.856509128 I0320 05:33:30.287363 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-20 05:33:30.287334894 +0000 UTC m=+44.856344395 I0320 05:33:30.296986 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-20 05:33:30.296970578 +0000 UTC m=+44.865980059 I0320 05:33:30.305060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:33:30.305186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:33:30.305237 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-20 05:33:30.305222467 +0000 UTC m=+44.874231988 I0320 05:33:30.489090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:33:30.498086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kw7g7" condition "Approved" to 2026-03-20 05:33:30.49807152 +0000 UTC m=+45.067081021 I0320 05:33:30.526484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kw7g7" condition "Ready" to 2026-03-20 05:33:30.526472245 +0000 UTC m=+45.095481726 I0320 05:33:30.555457 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:33:30.555439092 +0000 UTC m=+45.124448573 I0320 05:33:30.574681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:33:30.575617 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:33:30.575603749 +0000 UTC m=+45.144613260 I0320 05:33:30.596755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:37:51.252618 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-115.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:37:51.252681 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Issuing" to 2026-03-20 05:37:51.252672524 +0000 UTC m=+305.821682005 I0320 05:37:51.252684 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready" to 2026-03-20 05:37:51.252657624 +0000 UTC m=+305.821667135 I0320 05:37:51.269607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:37:51.269671 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready" to 2026-03-20 05:37:51.269667087 +0000 UTC m=+305.838676568 I0320 05:37:51.395809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:37:51.425548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-115.nip.io-tls-blqq7" condition "Approved" to 2026-03-20 05:37:51.425533071 +0000 UTC m=+305.994542582 I0320 05:37:51.455934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-115.nip.io-tls-blqq7" condition "Ready" to 2026-03-20 05:37:51.455923951 +0000 UTC m=+306.024933432 I0320 05:37:51.487972 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-115.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:37:51.487949792 +0000 UTC m=+306.056959293 I0320 05:37:51.507496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-115.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-115.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:38:56.566885 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-20 05:38:56.566865973 +0000 UTC m=+371.135875484 I0320 05:38:56.567033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:38:56.567108 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-20 05:38:56.567096997 +0000 UTC m=+371.136106508 E0320 05:38:56.577786 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0320 05:38:56.577837 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-20 05:38:56.577831356 +0000 UTC m=+371.146840837 E0320 05:38:56.577880 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0320 05:38:56.581712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:38:56.581828 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:38:56.581859 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-20 05:38:56.581850301 +0000 UTC m=+371.150859802 E0320 05:38:56.587399 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0320 05:38:56.588462 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 05:38:56.588504 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 05:38:56.588593 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0320 05:38:56.614339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xdpz2" condition "Approved" to 2026-03-20 05:38:56.614318662 +0000 UTC m=+371.183328163 I0320 05:38:56.627778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xdpz2" condition "Ready" to 2026-03-20 05:38:56.627747701 +0000 UTC m=+371.196757202 I0320 05:38:56.646665 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:38:56.646645611 +0000 UTC m=+371.215655122 I0320 05:38:56.664645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:38:56.664910 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:38:56.664899869 +0000 UTC m=+371.233909350 I0320 05:38:56.700019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:38:56.700388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:01.588067 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:39:01.58805376 +0000 UTC m=+376.157063261 I0320 05:39:37.738318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:39:37.738357 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-20 05:39:37.738348925 +0000 UTC m=+412.307358406 I0320 05:39:37.738676 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-20 05:39:37.738671391 +0000 UTC m=+412.307680872 I0320 05:39:37.744108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:39:37.744129 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-20 05:39:37.744125982 +0000 UTC m=+412.313135453 I0320 05:39:37.744255 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-20 05:39:37.744239154 +0000 UTC m=+412.313248625 I0320 05:39:37.768423 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:39:37.775964 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-20 05:39:37.775941793 +0000 UTC m=+412.344951274 I0320 05:39:37.785974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:37.786061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:37.786229 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:39:37.786256 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-20 05:39:37.786250644 +0000 UTC m=+412.355260115 I0320 05:39:37.786569 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-20 05:39:37.78656549 +0000 UTC m=+412.355574961 I0320 05:39:37.786832 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-20 05:39:37.786829305 +0000 UTC m=+412.355838776 I0320 05:39:37.836798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:37.836872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:39:37.836901 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-20 05:39:37.836891964 +0000 UTC m=+412.405901475 I0320 05:39:37.937482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:37.972818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-k9thb" condition "Approved" to 2026-03-20 05:39:37.972806927 +0000 UTC m=+412.541816408 I0320 05:39:37.999157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:38.002062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-k9thb" condition "Ready" to 2026-03-20 05:39:38.00204873 +0000 UTC m=+412.571058211 I0320 05:39:38.008606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rgnts" condition "Approved" to 2026-03-20 05:39:38.008592412 +0000 UTC m=+412.577601883 I0320 05:39:38.012471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cb498" condition "Approved" to 2026-03-20 05:39:38.012455043 +0000 UTC m=+412.581464534 I0320 05:39:38.024401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rgnts" condition "Ready" to 2026-03-20 05:39:38.024384385 +0000 UTC m=+412.593393866 I0320 05:39:38.030093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-cb498" condition "Ready" to 2026-03-20 05:39:38.030087751 +0000 UTC m=+412.599097212 I0320 05:39:38.066315 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:39:38.066293543 +0000 UTC m=+412.635303024 I0320 05:39:38.381571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:38.382248 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:39:38.382230568 +0000 UTC m=+412.951240069 I0320 05:39:38.489580 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:39:38.48954564 +0000 UTC m=+413.058555121 I0320 05:39:38.576918 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:39:38.576905832 +0000 UTC m=+413.145915303 I0320 05:39:38.828933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:38.829325 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:39:38.829315868 +0000 UTC m=+413.398325379 I0320 05:39:38.931095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:38.931967 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:39:38.931952203 +0000 UTC m=+413.500961684 I0320 05:39:38.980450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:39.484383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:39.529941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:39.580025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:39.629227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:45.978024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vwdqx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:39:45.978064 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vwdqx-tls" condition "Issuing" to 2026-03-20 05:39:45.978054877 +0000 UTC m=+420.547064388 I0320 05:39:45.978066 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vwdqx-tls" condition "Ready" to 2026-03-20 05:39:45.978050957 +0000 UTC m=+420.547060468 I0320 05:39:46.003724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vwdqx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vwdqx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:46.003811 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vwdqx-tls" condition "Ready" to 2026-03-20 05:39:46.003803454 +0000 UTC m=+420.572812965 I0320 05:39:46.362681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vwdqx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vwdqx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:39:46.392865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vwdqx-g7xpl" condition "Approved" to 2026-03-20 05:39:46.392851077 +0000 UTC m=+420.961860558 I0320 05:39:46.412761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vwdqx-g7xpl" condition "Ready" to 2026-03-20 05:39:46.412751796 +0000 UTC m=+420.981761267 I0320 05:39:46.444207 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vwdqx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:39:46.44419231 +0000 UTC m=+421.013201781 I0320 05:39:46.468295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vwdqx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vwdqx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:40:13.960054 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-20 05:40:13.960038812 +0000 UTC m=+448.529048293 I0320 05:40:13.961190 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:40:13.961211 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-20 05:40:13.961206674 +0000 UTC m=+448.530216155 I0320 05:40:13.976435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:40:13.976568 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:40:13.976600 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-20 05:40:13.97659157 +0000 UTC m=+448.545601041 I0320 05:40:14.230717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9x468" condition "Approved" to 2026-03-20 05:40:14.230700606 +0000 UTC m=+448.799710087 I0320 05:40:14.251245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9x468" condition "Ready" to 2026-03-20 05:40:14.251229068 +0000 UTC m=+448.820238579 I0320 05:40:14.281348 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:40:14.281324796 +0000 UTC m=+448.850334267 I0320 05:40:14.297802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:40:14.298246 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:40:14.29823485 +0000 UTC m=+448.867244331 I0320 05:40:14.316980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:40:14.324496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:43:34.911383 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-20 05:43:34.911349096 +0000 UTC m=+649.480358567 I0320 05:43:34.911394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:43:34.911471 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-20 05:43:34.911461149 +0000 UTC m=+649.480470650 I0320 05:43:34.930094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:43:34.930179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:43:34.930205 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-20 05:43:34.930199569 +0000 UTC m=+649.499209040 I0320 05:43:35.172980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:43:35.186157 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5c7rm" condition "Approved" to 2026-03-20 05:43:35.186143912 +0000 UTC m=+649.755153423 I0320 05:43:35.207020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5c7rm" condition "Ready" to 2026-03-20 05:43:35.207007873 +0000 UTC m=+649.776017354 I0320 05:43:35.233282 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:43:35.233268515 +0000 UTC m=+649.802278016 I0320 05:43:35.255625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:43:35.255951 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:43:35.25594449 +0000 UTC m=+649.824953971 I0320 05:43:35.272580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:43:35.272915 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:43:35.272907177 +0000 UTC m=+649.841916658 I0320 05:45:54.087120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:45:54.087127 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-20 05:45:54.087080861 +0000 UTC m=+788.656090342 I0320 05:45:54.087172 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-20 05:45:54.087161292 +0000 UTC m=+788.656170793 I0320 05:45:54.102879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:45:54.102974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:45:54.103001 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-20 05:45:54.102991716 +0000 UTC m=+788.672001227 I0320 05:45:54.479644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:45:54.487004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-vgvw6" condition "Approved" to 2026-03-20 05:45:54.486978424 +0000 UTC m=+789.055987905 I0320 05:45:54.506878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-vgvw6" condition "Ready" to 2026-03-20 05:45:54.506866444 +0000 UTC m=+789.075875925 I0320 05:45:54.535393 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:45:54.535379253 +0000 UTC m=+789.104388754 I0320 05:45:54.569507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:45:54.569909 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:45:54.569900234 +0000 UTC m=+789.138909745 I0320 05:45:54.589453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:45:54.589881 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:45:54.589871194 +0000 UTC m=+789.158880685 I0320 05:46:56.175395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:46:56.175471 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-20 05:46:56.175461266 +0000 UTC m=+850.744470777 I0320 05:46:56.175733 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-20 05:46:56.175717102 +0000 UTC m=+850.744726583 I0320 05:46:56.192223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:46:56.192276 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:46:56.192308 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-20 05:46:56.192302549 +0000 UTC m=+850.761312030 I0320 05:46:56.335870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-wmmvf" condition "Approved" to 2026-03-20 05:46:56.335850134 +0000 UTC m=+850.904859635 I0320 05:46:56.360334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-wmmvf" condition "Ready" to 2026-03-20 05:46:56.360318188 +0000 UTC m=+850.929327669 I0320 05:46:56.392199 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:46:56.392171239 +0000 UTC m=+850.961180750 I0320 05:46:56.416367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:46:56.416645 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:46:56.416635404 +0000 UTC m=+850.985644885 I0320 05:46:56.426545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:46:56.439800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:46:56.440281 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:46:56.440266502 +0000 UTC m=+851.009275983 I0320 05:49:59.315653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 05:49:59.315718 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-20 05:49:59.315710869 +0000 UTC m=+1033.884720350 I0320 05:49:59.315690 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-20 05:49:59.315665878 +0000 UTC m=+1033.884675429 I0320 05:49:59.330871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:49:59.331042 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-20 05:49:59.331031991 +0000 UTC m=+1033.900041502 I0320 05:49:59.536514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:49:59.575878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xgwxp" condition "Approved" to 2026-03-20 05:49:59.575863172 +0000 UTC m=+1034.144872653 I0320 05:49:59.603603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xgwxp" condition "Ready" to 2026-03-20 05:49:59.603545013 +0000 UTC m=+1034.172554484 I0320 05:49:59.633019 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:49:59.633004797 +0000 UTC m=+1034.202014268 I0320 05:49:59.663745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:49:59.664155 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:49:59.664148202 +0000 UTC m=+1034.233157663 I0320 05:49:59.667810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:49:59.679724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 05:49:59.680067 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 05:49:59.680060186 +0000 UTC m=+1034.249069667