I0407 12:58:21.340108 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 12:58:21.340255 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 12:58:21.340372 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 12:58:21.346194 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 12:58:21.346733 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 12:58:21.346805 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 12:58:21.346789 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 12:58:21.349330 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 12:58:21.364897 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 12:58:21.370134 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 12:58:21.370242 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 12:58:21.376807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 12:58:21.379539 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 12:58:21.382193 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 12:58:21.384644 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 12:58:21.386585 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 12:58:21.388647 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 12:58:21.393293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 12:58:21.397618 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 12:58:21.400293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 12:58:21.402714 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 12:58:21.405208 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 12:58:21.407557 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 12:58:21.407673 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 12:58:21.409443 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 12:58:21.411337 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 12:58:21.416648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 12:58:21.421375 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 12:58:21.421433 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 12:58:21.421447 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 12:58:21.421460 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 12:58:21.421510 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 12:58:21.424783 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 12:58:21.428134 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:58:21.428186 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:58:21.428357 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:58:21.428304 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:58:21.428732 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:58:21.429125 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:58:21.429442 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:58:21.429979 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:58:21.430554 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:58:21.517658 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:58:32.757002 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 12:58:32.756989975 +0000 UTC m=+11.451872088 I0407 12:58:33.421219 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 12:58:33.421201045 +0000 UTC m=+12.116083188 I0407 12:58:33.421465 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 12:58:33.421545 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 12:58:33.421532244 +0000 UTC m=+12.116414377 I0407 12:58:33.436994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 12:58:33.437091 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 12:58:33.43707266 +0000 UTC m=+12.131954773 E0407 12:58:33.437281 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 12:58:33.437384 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 12:58:33.437372178 +0000 UTC m=+12.132254321 E0407 12:58:33.437439 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 12:58:33.452608 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 12:58:33.452723 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 12:58:33.452782 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 12:58:33.452819 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 12:58:33.454090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 12:58:33.478346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nm6ts" condition "Approved" to 2026-04-07 12:58:33.478327337 +0000 UTC m=+12.173209480 I0407 12:58:33.492463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-nm6ts" condition "Ready" to 2026-04-07 12:58:33.492449318 +0000 UTC m=+12.187331431 I0407 12:58:33.522700 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:58:33.522686961 +0000 UTC m=+12.217569074 I0407 12:58:33.542807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 12:58:33.543164 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:58:33.54315618 +0000 UTC m=+12.238038323 I0407 12:58:33.545071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 12:58:33.555077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 12:58:33.555256 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:58:33.555249182 +0000 UTC m=+12.250131295 I0407 12:58:38.453437 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:58:38.453423504 +0000 UTC m=+17.148305617 I0407 12:58:58.682478 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 12:58:58.682521 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 12:58:58.682511441 +0000 UTC m=+37.377393554 I0407 12:58:58.682605 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 12:58:58.682587863 +0000 UTC m=+37.377469976 I0407 12:58:58.692689 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 12:58:58.692677955 +0000 UTC m=+37.387560068 I0407 12:58:58.707899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 12:58:58.708028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 12:58:58.708076 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 12:58:58.708064758 +0000 UTC m=+37.402946901 I0407 12:58:59.059031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 12:58:59.064783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7bhpp" condition "Approved" to 2026-04-07 12:58:59.064771721 +0000 UTC m=+37.759653834 I0407 12:58:59.093593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7bhpp" condition "Ready" to 2026-04-07 12:58:59.093582938 +0000 UTC m=+37.788465051 I0407 12:58:59.127414 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:58:59.127403321 +0000 UTC m=+37.822285434 I0407 12:58:59.152143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 12:58:59.152438 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:58:59.152431195 +0000 UTC m=+37.847313308 I0407 12:58:59.165565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 12:58:59.168813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 12:58:59.169094 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 12:58:59.16908384 +0000 UTC m=+37.863965973 I0407 12:58:59.169388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:40.843865 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:00:40.843904 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 13:00:40.843898672 +0000 UTC m=+139.538780785 I0407 13:00:40.843830 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 13:00:40.843787489 +0000 UTC m=+139.538669602 E0407 13:00:40.858766 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 13:00:40.858816 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-07 13:00:40.858807781 +0000 UTC m=+139.553689894 I0407 13:00:40.858879 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 13:00:40.860126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:40.860196 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 13:00:40.860188875 +0000 UTC m=+139.555070998 E0407 13:00:40.870359 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0407 13:00:40.870443 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 13:00:40.870464 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 13:00:40.870488 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0407 13:00:40.873448 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 13:00:40.873436733 +0000 UTC m=+139.568318846 I0407 13:00:40.873186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:00:40.874026 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 13:00:40.874006597 +0000 UTC m=+139.568888840 I0407 13:00:40.890954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:40.891074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:00:40.891102 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 13:00:40.891093339 +0000 UTC m=+139.585975482 I0407 13:00:40.984827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:41.011225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gmlbc" condition "Approved" to 2026-04-07 13:00:41.011204159 +0000 UTC m=+139.706086292 I0407 13:00:41.042971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gmlbc" condition "Ready" to 2026-04-07 13:00:41.042958695 +0000 UTC m=+139.737840808 I0407 13:00:41.070719 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:41.07070364 +0000 UTC m=+139.765585743 I0407 13:00:41.094426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:41.094832 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:41.094824787 +0000 UTC m=+139.789706900 I0407 13:00:41.110050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:41.110388 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:41.110379492 +0000 UTC m=+139.805261605 I0407 13:00:41.110804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-cqsnm" condition "Approved" to 2026-04-07 13:00:41.110798592 +0000 UTC m=+139.805680705 I0407 13:00:41.129505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-cqsnm" condition "Ready" to 2026-04-07 13:00:41.129490114 +0000 UTC m=+139.824372227 I0407 13:00:45.871788 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:45.871775439 +0000 UTC m=+144.566657572 I0407 13:00:45.884095 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-cqsnm" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:45.884085734 +0000 UTC m=+144.578967837 I0407 13:00:45.911367 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:45.911348577 +0000 UTC m=+144.606230700 I0407 13:00:45.934076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:45.934696 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:45.934681835 +0000 UTC m=+144.629563998 I0407 13:00:45.939280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:45.950317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:45.953302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:45.953686 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:45.953677305 +0000 UTC m=+144.648559408 I0407 13:03:12.100532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-19.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:03:12.100575 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready" to 2026-04-07 13:03:12.100517059 +0000 UTC m=+290.795399202 I0407 13:03:12.100610 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Issuing" to 2026-04-07 13:03:12.10059356 +0000 UTC m=+290.795475703 I0407 13:03:12.117089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:03:12.117177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-19.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:03:12.117200 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Issuing" to 2026-04-07 13:03:12.117192865 +0000 UTC m=+290.812075008 I0407 13:03:12.293171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:03:12.300497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-19.nip.io-tls-lnjst" condition "Approved" to 2026-04-07 13:03:12.300483018 +0000 UTC m=+290.995365131 I0407 13:03:12.320119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-19.nip.io-tls-lnjst" condition "Ready" to 2026-04-07 13:03:12.320096027 +0000 UTC m=+291.014978140 I0407 13:03:12.347871 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:03:12.34785786 +0000 UTC m=+291.042739973 I0407 13:03:12.371030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:03:12.371298 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-19.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:03:12.371292986 +0000 UTC m=+291.066175099 I0407 13:03:12.391983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-19.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-19.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:04:56.793988 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:04:56.794048 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 13:04:56.794020434 +0000 UTC m=+395.488902537 I0407 13:04:56.794103 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 13:04:56.794081315 +0000 UTC m=+395.488963458 I0407 13:04:56.807495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:04:56.807544 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 13:04:56.807538801 +0000 UTC m=+395.502420914 E0407 13:04:56.812511 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:04:56.812549 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 13:04:56.812541686 +0000 UTC m=+395.507423799 E0407 13:04:56.812598 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:04:56.821878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0407 13:04:56.823940 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 13:04:56.824041 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:04:56.824085 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:04:56.824138 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 13:04:56.841877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q7jwf" condition "Approved" to 2026-04-07 13:04:56.841860148 +0000 UTC m=+395.536742261 I0407 13:04:56.853610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-q7jwf" condition "Ready" to 2026-04-07 13:04:56.853597682 +0000 UTC m=+395.548479795 I0407 13:04:56.876041 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:04:56.876027851 +0000 UTC m=+395.570909974 I0407 13:04:56.894706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:04:56.894952 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:04:56.894943062 +0000 UTC m=+395.589825175 I0407 13:04:56.907645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:04:56.907973 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:04:56.907963217 +0000 UTC m=+395.602845330 I0407 13:05:01.825249 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:01.825233952 +0000 UTC m=+400.520116095 I0407 13:05:40.081779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:05:40.081824 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 13:05:40.081818585 +0000 UTC m=+438.776700688 I0407 13:05:40.082336 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 13:05:40.082331068 +0000 UTC m=+438.777213171 I0407 13:05:40.101598 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 13:05:40.10157576 +0000 UTC m=+438.796457903 I0407 13:05:40.106049 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 13:05:40.106035741 +0000 UTC m=+438.800917874 I0407 13:05:40.106281 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:05:40.106384 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 13:05:40.106375159 +0000 UTC m=+438.801257292 I0407 13:05:40.106478 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:05:40.107721 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 13:05:40.107704123 +0000 UTC m=+438.802586286 I0407 13:05:40.109516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.109601 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 13:05:40.10959447 +0000 UTC m=+438.804476573 I0407 13:05:40.142355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.144681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.150040 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 13:05:40.150025973 +0000 UTC m=+438.844908096 I0407 13:05:40.150134 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:05:40.150156 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 13:05:40.150152846 +0000 UTC m=+438.845034949 I0407 13:05:40.357038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.380725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.387174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jmxn6" condition "Approved" to 2026-04-07 13:05:40.387156693 +0000 UTC m=+439.082038806 I0407 13:05:40.388916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v6slx" condition "Approved" to 2026-04-07 13:05:40.388910356 +0000 UTC m=+439.083792459 I0407 13:05:40.407776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v6slx" condition "Ready" to 2026-04-07 13:05:40.407768179 +0000 UTC m=+439.102650282 I0407 13:05:40.407955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jmxn6" condition "Ready" to 2026-04-07 13:05:40.407943933 +0000 UTC m=+439.102826036 I0407 13:05:40.434732 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:40.434717024 +0000 UTC m=+439.129599127 I0407 13:05:40.436119 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:40.436110599 +0000 UTC m=+439.130992722 I0407 13:05:40.464719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.465032 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:40.465024033 +0000 UTC m=+439.159906146 I0407 13:05:40.465822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.565457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.666231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.666895 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:40.666883859 +0000 UTC m=+439.361765992 I0407 13:05:40.815493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:41.223619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-42pbq" condition "Approved" to 2026-04-07 13:05:41.223608704 +0000 UTC m=+439.918490817 I0407 13:05:41.430209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-42pbq" condition "Ready" to 2026-04-07 13:05:41.430190119 +0000 UTC m=+440.125072262 I0407 13:05:41.816419 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-42pbq" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-9s7nk" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0407 13:05:42.022553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-q44zm" condition "Approved" to 2026-04-07 13:05:42.022535826 +0000 UTC m=+440.717417939 I0407 13:05:42.310445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-q44zm" condition "Ready" to 2026-04-07 13:05:42.310435028 +0000 UTC m=+441.005317141 I0407 13:05:42.570862 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:42.570847911 +0000 UTC m=+441.265730024 I0407 13:05:42.667288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:42.667977 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:42.667968234 +0000 UTC m=+441.362850347 I0407 13:05:42.917847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:42.967661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:46.350666 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls" condition "Ready" to 2026-04-07 13:05:46.350645088 +0000 UTC m=+445.045527231 I0407 13:05:46.350801 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:05:46.350840 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls" condition "Issuing" to 2026-04-07 13:05:46.350830913 +0000 UTC m=+445.045713026 I0407 13:05:46.367305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:46.367386 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls" condition "Ready" to 2026-04-07 13:05:46.367377608 +0000 UTC m=+445.062259721 I0407 13:05:46.640727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:46.679636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wvmgk-nrnnh" condition "Approved" to 2026-04-07 13:05:46.679623399 +0000 UTC m=+445.374505502 I0407 13:05:46.733901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wvmgk-nrnnh" condition "Ready" to 2026-04-07 13:05:46.733889278 +0000 UTC m=+445.428771391 I0407 13:05:46.762645 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:46.762626718 +0000 UTC m=+445.457508831 I0407 13:05:46.785708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:46.787305 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:46.787292266 +0000 UTC m=+445.482174369 I0407 13:05:46.805391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wvmgk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:11.894777 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:06:11.894786 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 13:06:11.89474483 +0000 UTC m=+470.589626983 I0407 13:06:11.894830 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 13:06:11.894817522 +0000 UTC m=+470.589699665 I0407 13:06:11.914484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:11.914570 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:06:11.914594 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 13:06:11.914588377 +0000 UTC m=+470.609470490 I0407 13:06:12.129369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mx9wv" condition "Approved" to 2026-04-07 13:06:12.129354956 +0000 UTC m=+470.824237069 I0407 13:06:12.148784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mx9wv" condition "Ready" to 2026-04-07 13:06:12.148771832 +0000 UTC m=+470.843653945 I0407 13:06:12.186755 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:12.186738534 +0000 UTC m=+470.881620647 I0407 13:06:12.206927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:12.207264 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:12.207256247 +0000 UTC m=+470.902138360 I0407 13:06:12.224489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:12.225057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:12.225374 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:12.225367342 +0000 UTC m=+470.920249455 I0407 13:09:30.185211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:09:30.185379 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 13:09:30.185367894 +0000 UTC m=+668.880250017 I0407 13:09:30.185205 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 13:09:30.185154339 +0000 UTC m=+668.880036482 I0407 13:09:30.204731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:09:30.204827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:09:30.204863 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 13:09:30.204853847 +0000 UTC m=+668.899735990 I0407 13:09:30.503266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9ckv6" condition "Approved" to 2026-04-07 13:09:30.503239511 +0000 UTC m=+669.198121624 I0407 13:09:30.528411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9ckv6" condition "Ready" to 2026-04-07 13:09:30.528401288 +0000 UTC m=+669.223283391 I0407 13:09:30.556637 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:09:30.556619681 +0000 UTC m=+669.251501814 I0407 13:09:30.574358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:09:30.575936 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:09:30.575925349 +0000 UTC m=+669.270807462 I0407 13:09:30.599515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:12:00.628095 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 13:12:00.628054274 +0000 UTC m=+819.322936407 I0407 13:12:00.628232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:12:00.628291 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 13:12:00.62828646 +0000 UTC m=+819.323168563 I0407 13:12:00.648639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:12:00.648754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:12:00.648803 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 13:12:00.648775534 +0000 UTC m=+819.343657667 I0407 13:12:00.819503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:12:00.831866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-549dw" condition "Approved" to 2026-04-07 13:12:00.831845437 +0000 UTC m=+819.526727550 I0407 13:12:00.851686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-549dw" condition "Ready" to 2026-04-07 13:12:00.851674745 +0000 UTC m=+819.546556858 I0407 13:12:00.876620 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:12:00.87660953 +0000 UTC m=+819.571491643 I0407 13:12:00.893176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:12:00.893558 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:12:00.893550675 +0000 UTC m=+819.588432788 I0407 13:12:00.909868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:12:00.917418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:13:03.501879 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 13:13:03.501776783 +0000 UTC m=+882.196658896 I0407 13:13:03.502210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:13:03.502268 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 13:13:03.502242184 +0000 UTC m=+882.197124297 I0407 13:13:03.516608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:13:03.516745 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 13:13:03.516732068 +0000 UTC m=+882.211614211 I0407 13:13:03.642185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:13:03.678432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-pvgh5" condition "Approved" to 2026-04-07 13:13:03.678414349 +0000 UTC m=+882.373296452 I0407 13:13:03.700598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-pvgh5" condition "Ready" to 2026-04-07 13:13:03.700582396 +0000 UTC m=+882.395464529 I0407 13:13:03.726950 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:13:03.726930447 +0000 UTC m=+882.421812560 I0407 13:13:03.758476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:13:03.814277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:16:01.820146 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 13:16:01.820110009 +0000 UTC m=+1060.514992192 I0407 13:16:01.820243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:16:01.820275 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 13:16:01.820270763 +0000 UTC m=+1060.515152866 I0407 13:16:01.835351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:16:01.835669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:16:01.835761 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 13:16:01.835751252 +0000 UTC m=+1060.530633365 I0407 13:16:02.150043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zwvjt" condition "Approved" to 2026-04-07 13:16:02.1500294 +0000 UTC m=+1060.844911533 I0407 13:16:02.176463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zwvjt" condition "Ready" to 2026-04-07 13:16:02.176451995 +0000 UTC m=+1060.871334108 I0407 13:16:02.202793 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:16:02.202780716 +0000 UTC m=+1060.897662829 I0407 13:16:02.221600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:16:02.276375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"