I0413 06:10:25.467304 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0413 06:10:25.467452 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0413 06:10:25.467540 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0413 06:10:25.473536 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0413 06:10:25.474230 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0413 06:10:25.474250 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0413 06:10:25.474286 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0413 06:10:25.478405 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0413 06:10:25.495961 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0413 06:10:25.501114 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0413 06:10:25.501241 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0413 06:10:25.504195 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0413 06:10:25.506622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0413 06:10:25.512632 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0413 06:10:25.516705 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0413 06:10:25.519294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0413 06:10:25.521498 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0413 06:10:25.523507 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0413 06:10:25.523540 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0413 06:10:25.523556 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0413 06:10:25.523670 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0413 06:10:25.525930 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0413 06:10:25.527699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0413 06:10:25.534122 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0413 06:10:25.538009 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0413 06:10:25.540559 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0413 06:10:25.540648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0413 06:10:25.543162 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0413 06:10:25.543319 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0413 06:10:25.545685 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0413 06:10:25.548142 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0413 06:10:25.550176 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0413 06:10:25.552400 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0413 06:10:25.558200 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 06:10:25.558624 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 06:10:25.559317 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 06:10:25.559326 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 06:10:25.559684 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 06:10:25.559785 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 06:10:25.559836 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 06:10:25.560110 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 06:10:25.561082 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 06:10:25.652645 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0413 06:10:38.947035 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-13 06:10:38.94701095 +0000 UTC m=+13.517140921 I0413 06:10:39.632076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:10:39.632157 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 06:10:39.632144872 +0000 UTC m=+14.202274853 I0413 06:10:39.632134 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-13 06:10:39.632112502 +0000 UTC m=+14.202242483 E0413 06:10:39.646336 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 06:10:39.646388 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-13 06:10:39.646382029 +0000 UTC m=+14.216511980 E0413 06:10:39.646411 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 06:10:39.649757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:10:39.649929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:10:39.649990 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-13 06:10:39.649976628 +0000 UTC m=+14.220106619 E0413 06:10:39.657672 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0413 06:10:39.658580 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 06:10:39.658732 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 06:10:39.658821 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0413 06:10:39.688458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dmk6h" condition "Approved" to 2026-04-13 06:10:39.688444006 +0000 UTC m=+14.258573957 I0413 06:10:39.702226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-dmk6h" condition "Ready" to 2026-04-13 06:10:39.702216184 +0000 UTC m=+14.272346135 I0413 06:10:39.730789 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:10:39.730768568 +0000 UTC m=+14.300898519 I0413 06:10:39.774590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:10:39.774971 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:10:39.774962827 +0000 UTC m=+14.345092778 I0413 06:10:39.787502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:10:39.787933 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:10:39.787920619 +0000 UTC m=+14.358050600 I0413 06:10:39.789210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:10:44.659242 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:10:44.659225565 +0000 UTC m=+19.229355536 I0413 06:11:05.679512 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-13 06:11:05.679491437 +0000 UTC m=+40.249621388 I0413 06:11:05.679854 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:11:05.679991 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 06:11:05.679980727 +0000 UTC m=+40.250110678 I0413 06:11:05.694246 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-13 06:11:05.694228682 +0000 UTC m=+40.264358633 I0413 06:11:05.705390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:11:05.705721 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:11:05.705867 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-13 06:11:05.705828805 +0000 UTC m=+40.275958786 I0413 06:11:05.913158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ppdgj" condition "Approved" to 2026-04-13 06:11:05.913118958 +0000 UTC m=+40.483248939 I0413 06:11:05.946799 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ppdgj" condition "Ready" to 2026-04-13 06:11:05.946786967 +0000 UTC m=+40.516916908 I0413 06:11:05.987877 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:11:05.987855808 +0000 UTC m=+40.557985759 I0413 06:11:06.017341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:11:06.017818 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:11:06.017806195 +0000 UTC m=+40.587936176 I0413 06:11:06.035533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:11:06.036075 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:11:06.036062937 +0000 UTC m=+40.606192888 I0413 06:11:06.036678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:12:55.019647 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-13 06:12:55.019627772 +0000 UTC m=+149.589757753 I0413 06:12:55.020249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:12:55.020314 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-13 06:12:55.020277014 +0000 UTC m=+149.590406995 E0413 06:12:55.038622 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 06:12:55.038696 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-13 06:12:55.038681905 +0000 UTC m=+149.608811886 I0413 06:12:55.038778 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 06:12:55.038933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:12:55.039065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:12:55.039101 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-13 06:12:55.039093583 +0000 UTC m=+149.609223534 E0413 06:12:55.053243 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0413 06:12:55.053430 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0413 06:12:55.053499 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0413 06:12:55.053563 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0413 06:12:55.054453 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:12:55.054517 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-13 06:12:55.054506897 +0000 UTC m=+149.624636838 I0413 06:12:55.054622 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-13 06:12:55.054607019 +0000 UTC m=+149.624736990 I0413 06:12:55.074660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:12:55.074766 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:12:55.074790 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-13 06:12:55.074780722 +0000 UTC m=+149.644910673 I0413 06:12:55.237708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:12:55.238114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:12:55.244541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-l7kls" condition "Approved" to 2026-04-13 06:12:55.244516423 +0000 UTC m=+149.814646404 I0413 06:12:55.247373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-52bp5" condition "Approved" to 2026-04-13 06:12:55.247354118 +0000 UTC m=+149.817484069 I0413 06:12:55.265347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-52bp5" condition "Ready" to 2026-04-13 06:12:55.265325399 +0000 UTC m=+149.835455350 I0413 06:12:55.274342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-l7kls" condition "Ready" to 2026-04-13 06:12:55.274327431 +0000 UTC m=+149.844457382 I0413 06:12:55.306632 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:12:55.306609015 +0000 UTC m=+149.876738986 I0413 06:12:55.325993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:12:55.376308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:13:00.054456 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:13:00.054445179 +0000 UTC m=+154.624575140 I0413 06:13:00.067668 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-52bp5" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:13:00.06765063 +0000 UTC m=+154.637780561 I0413 06:13:00.095185 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:13:00.095170624 +0000 UTC m=+154.665300575 I0413 06:13:00.116092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:13:00.116722 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:13:00.116711123 +0000 UTC m=+154.686841094 I0413 06:13:00.134600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:13:00.141556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:15:37.265136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-43.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:15:37.265190 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-43.nip.io-tls" condition "Issuing" to 2026-04-13 06:15:37.265177577 +0000 UTC m=+311.835307568 I0413 06:15:37.265250 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-43.nip.io-tls" condition "Ready" to 2026-04-13 06:15:37.265229227 +0000 UTC m=+311.835359178 I0413 06:15:37.281906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-43.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-43.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:15:37.282002 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-43.nip.io-tls" condition "Ready" to 2026-04-13 06:15:37.281993878 +0000 UTC m=+311.852123829 I0413 06:15:37.630636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-43.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-43.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:15:37.661750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-43.nip.io-tls-ktflh" condition "Approved" to 2026-04-13 06:15:37.661725266 +0000 UTC m=+312.231855217 I0413 06:15:37.696764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-43.nip.io-tls-ktflh" condition "Ready" to 2026-04-13 06:15:37.696744096 +0000 UTC m=+312.266874067 I0413 06:15:37.724210 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-43.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:15:37.72419164 +0000 UTC m=+312.294321621 I0413 06:15:37.748952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-43.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-43.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:15:37.749681 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-43.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:15:37.749671427 +0000 UTC m=+312.319801378 I0413 06:15:37.769755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-43.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-43.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:15:37.770713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-43.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-43.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:15:37.771077 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-43.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:15:37.771064316 +0000 UTC m=+312.341194287 I0413 06:15:37.776000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-43.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-43.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:16:50.697860 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 06:16:50.697837563 +0000 UTC m=+385.267967514 I0413 06:16:50.697881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:16:50.698045 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-13 06:16:50.698032518 +0000 UTC m=+385.268162469 E0413 06:16:50.712802 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 06:16:50.712863 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-13 06:16:50.712853039 +0000 UTC m=+385.282983010 E0413 06:16:50.712930 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0413 06:16:50.716222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:16:50.716566 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-13 06:16:50.7165459 +0000 UTC m=+385.286675941 E0413 06:16:50.727705 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0413 06:16:50.727894 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 06:16:50.727980 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0413 06:16:50.728060 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0413 06:16:50.732244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:16:50.760482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rzcf4" condition "Approved" to 2026-04-13 06:16:50.760451835 +0000 UTC m=+385.330581806 I0413 06:16:50.775104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rzcf4" condition "Ready" to 2026-04-13 06:16:50.775084454 +0000 UTC m=+385.345214435 I0413 06:16:50.811617 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:16:50.811596918 +0000 UTC m=+385.381726899 I0413 06:16:50.828270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:16:50.828591 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:16:50.828583901 +0000 UTC m=+385.398713882 I0413 06:16:50.835064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:16:50.841716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:16:50.843065 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:16:50.843034826 +0000 UTC m=+385.413165037 I0413 06:16:55.728643 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:16:55.728627769 +0000 UTC m=+390.298757740 I0413 06:17:36.433405 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-13 06:17:36.433386558 +0000 UTC m=+431.003516509 I0413 06:17:36.433461 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:17:36.434566 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 06:17:36.43455457 +0000 UTC m=+431.004684511 I0413 06:17:36.433779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:17:36.434957 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-13 06:17:36.434951938 +0000 UTC m=+431.005081879 I0413 06:17:36.433845 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 06:17:36.433824167 +0000 UTC m=+431.003954118 I0413 06:17:36.443724 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:17:36.443776 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-13 06:17:36.443762267 +0000 UTC m=+431.013892218 I0413 06:17:36.444367 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-13 06:17:36.444360247 +0000 UTC m=+431.014490198 I0413 06:17:36.476664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:36.476748 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:36.476769 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-13 06:17:36.476751308 +0000 UTC m=+431.046881239 I0413 06:17:36.476665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:36.476827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:17:36.476857 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-13 06:17:36.47685204 +0000 UTC m=+431.046981991 I0413 06:17:36.477029 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:17:36.477050 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-13 06:17:36.477046724 +0000 UTC m=+431.047176675 I0413 06:17:36.993367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:36.995714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f5rfs" condition "Approved" to 2026-04-13 06:17:36.995687467 +0000 UTC m=+431.565817448 I0413 06:17:37.021103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-f5rfs" condition "Ready" to 2026-04-13 06:17:37.021091373 +0000 UTC m=+431.591221304 I0413 06:17:37.045588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9fsz7" condition "Approved" to 2026-04-13 06:17:37.045570872 +0000 UTC m=+431.615700843 I0413 06:17:37.061116 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:17:37.061110419 +0000 UTC m=+431.631240380 I0413 06:17:37.065440 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9fsz7" condition "Ready" to 2026-04-13 06:17:37.065426052 +0000 UTC m=+431.635556003 I0413 06:17:37.104413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:37.105191 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:17:37.105178342 +0000 UTC m=+431.675308303 I0413 06:17:37.129995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:37.162765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:37.281551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gzqpx" condition "Approved" to 2026-04-13 06:17:37.281527166 +0000 UTC m=+431.851657117 I0413 06:17:37.493384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gzqpx" condition "Ready" to 2026-04-13 06:17:37.49336837 +0000 UTC m=+432.063498311 I0413 06:17:37.728850 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:37.928008 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:17:37.927991656 +0000 UTC m=+432.498121627 I0413 06:17:38.028092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:38.028856 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:17:38.028843086 +0000 UTC m=+432.598973067 I0413 06:17:38.229455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:44.486579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:17:44.486627 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls" condition "Issuing" to 2026-04-13 06:17:44.486615862 +0000 UTC m=+439.056745813 I0413 06:17:44.486779 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls" condition "Ready" to 2026-04-13 06:17:44.486757355 +0000 UTC m=+439.056887336 I0413 06:17:44.504192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:44.504272 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls" condition "Ready" to 2026-04-13 06:17:44.50426456 +0000 UTC m=+439.074394511 I0413 06:17:45.098060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:45.134123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5dzxl-vcjpk" condition "Approved" to 2026-04-13 06:17:45.134106322 +0000 UTC m=+439.704236263 I0413 06:17:45.154268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5dzxl-vcjpk" condition "Ready" to 2026-04-13 06:17:45.154253997 +0000 UTC m=+439.724383948 I0413 06:17:45.184944 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:17:45.184920644 +0000 UTC m=+439.755050595 I0413 06:17:45.207660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:45.208101 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:17:45.208087307 +0000 UTC m=+439.778217258 I0413 06:17:45.229303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:17:45.238518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5dzxl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:18:05.558968 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-13 06:18:05.55894342 +0000 UTC m=+460.129073371 I0413 06:18:05.559394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:18:05.559419 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 06:18:05.559414519 +0000 UTC m=+460.129544470 I0413 06:18:05.574463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:18:05.574522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:18:05.574539 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-13 06:18:05.574535068 +0000 UTC m=+460.144665009 I0413 06:18:05.840877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4m2g5" condition "Approved" to 2026-04-13 06:18:05.840855654 +0000 UTC m=+460.410985595 I0413 06:18:05.860678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4m2g5" condition "Ready" to 2026-04-13 06:18:05.860660783 +0000 UTC m=+460.430790744 I0413 06:18:05.889745 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:18:05.889723599 +0000 UTC m=+460.459853570 I0413 06:18:05.910733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:18:05.911047 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:18:05.911035757 +0000 UTC m=+460.481165708 I0413 06:18:05.919161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:18:05.930218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:21:32.067537 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:21:32.067584 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-13 06:21:32.067573064 +0000 UTC m=+666.637703035 I0413 06:21:32.067591 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 06:21:32.067565853 +0000 UTC m=+666.637695824 I0413 06:21:32.086571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:21:32.086650 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-13 06:21:32.086639894 +0000 UTC m=+666.656769835 I0413 06:21:32.421268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:21:32.454579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sw7xl" condition "Approved" to 2026-04-13 06:21:32.454562649 +0000 UTC m=+667.024692600 I0413 06:21:32.474939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sw7xl" condition "Ready" to 2026-04-13 06:21:32.474921474 +0000 UTC m=+667.045051445 I0413 06:21:32.508406 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:21:32.508391697 +0000 UTC m=+667.078521648 I0413 06:21:32.538119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:21:32.538527 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:21:32.538518278 +0000 UTC m=+667.108648219 I0413 06:21:32.557915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:21:32.558250 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:21:32.558238231 +0000 UTC m=+667.128368182 I0413 06:24:01.300575 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-13 06:24:01.300558615 +0000 UTC m=+815.870688596 I0413 06:24:01.300884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:24:01.301077 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-13 06:24:01.301065674 +0000 UTC m=+815.871195655 I0413 06:24:01.319832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:24:01.319920 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:24:01.319946 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-13 06:24:01.319940317 +0000 UTC m=+815.890070288 I0413 06:24:01.475566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:24:01.483442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-79c54" condition "Approved" to 2026-04-13 06:24:01.483426327 +0000 UTC m=+816.053556268 I0413 06:24:01.500839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-79c54" condition "Ready" to 2026-04-13 06:24:01.500825523 +0000 UTC m=+816.070955474 I0413 06:24:01.528431 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:24:01.528421909 +0000 UTC m=+816.098551860 I0413 06:24:01.551955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:25:11.119480 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-13 06:25:11.119461615 +0000 UTC m=+885.689591586 I0413 06:25:11.119664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:25:11.119729 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-13 06:25:11.11971492 +0000 UTC m=+885.689844911 I0413 06:25:11.144140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:25:11.144252 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:25:11.144280 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-13 06:25:11.144269959 +0000 UTC m=+885.714399910 I0413 06:25:11.351024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:25:11.359269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zwkjh" condition "Approved" to 2026-04-13 06:25:11.359246234 +0000 UTC m=+885.929376205 I0413 06:25:11.377556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zwkjh" condition "Ready" to 2026-04-13 06:25:11.377533746 +0000 UTC m=+885.947663697 I0413 06:25:11.413219 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:25:11.413203563 +0000 UTC m=+885.983333504 I0413 06:25:11.440722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:25:11.515395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:28:23.116516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:28:23.116598 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-13 06:28:23.116590185 +0000 UTC m=+1077.686720166 I0413 06:28:23.116511 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-13 06:28:23.116492913 +0000 UTC m=+1077.686622894 I0413 06:28:23.135137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:28:23.135239 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0413 06:28:23.135265 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-13 06:28:23.135255263 +0000 UTC m=+1077.705385214 I0413 06:28:23.381986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-qfp8j" condition "Approved" to 2026-04-13 06:28:23.381972304 +0000 UTC m=+1077.952102255 I0413 06:28:23.408350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-qfp8j" condition "Ready" to 2026-04-13 06:28:23.408333406 +0000 UTC m=+1077.978463357 I0413 06:28:23.438715 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:28:23.438701662 +0000 UTC m=+1078.008831613 I0413 06:28:23.462168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:28:23.462726 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-13 06:28:23.462673469 +0000 UTC m=+1078.032803430 I0413 06:28:23.476866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0413 06:28:23.495659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"