I0505 10:21:46.477415 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0505 10:21:46.477626 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0505 10:21:46.477730 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0505 10:21:46.483499 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0505 10:21:46.484358 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0505 10:21:46.484389 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0505 10:21:46.484513 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0505 10:21:46.489367 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0505 10:21:46.504278 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0505 10:21:46.509931 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0505 10:21:46.509982 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0505 10:21:46.510058 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0505 10:21:46.513081 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0505 10:21:46.515813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0505 10:21:46.520117 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0505 10:21:46.525654 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0505 10:21:46.528321 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0505 10:21:46.531359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0505 10:21:46.534154 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0505 10:21:46.536886 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0505 10:21:46.537052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0505 10:21:46.538785 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0505 10:21:46.538861 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0505 10:21:46.540959 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0505 10:21:46.544416 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0505 10:21:46.549331 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0505 10:21:46.552052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0505 10:21:46.555048 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0505 10:21:46.555123 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0505 10:21:46.555142 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0505 10:21:46.558028 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0505 10:21:46.561135 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0505 10:21:46.566183 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0505 10:21:46.569342 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 10:21:46.569501 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 10:21:46.569965 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 10:21:46.570590 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 10:21:46.633846 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 10:21:46.654959 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 10:21:46.670939 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 10:21:46.677046 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 10:21:46.696074 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 10:21:46.713523 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 10:21:59.017281 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-05 10:21:59.017249652 +0000 UTC m=+12.576861419 I0505 10:21:59.800356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:21:59.800423 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 10:21:59.800404152 +0000 UTC m=+13.360015939 I0505 10:21:59.800446 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 10:21:59.800431342 +0000 UTC m=+13.360043159 E0505 10:21:59.840096 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 10:21:59.840205 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-05 10:21:59.840192574 +0000 UTC m=+13.399804381 E0505 10:21:59.840256 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 10:21:59.844813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:21:59.844957 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 10:21:59.844942755 +0000 UTC m=+13.404554572 E0505 10:21:59.903101 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0505 10:21:59.903263 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 10:21:59.903453 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 10:21:59.903571 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0505 10:21:59.906376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:21:59.906476 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 10:21:59.906463687 +0000 UTC m=+13.466075454 I0505 10:21:59.933448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-svhc5" condition "Approved" to 2026-05-05 10:21:59.933430669 +0000 UTC m=+13.493042476 I0505 10:21:59.955729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-svhc5" condition "Ready" to 2026-05-05 10:21:59.955709781 +0000 UTC m=+13.515321578 I0505 10:22:00.010073 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:22:00.010058803 +0000 UTC m=+13.569670590 I0505 10:22:00.045161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:22:00.045600 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:22:00.045590166 +0000 UTC m=+13.605201973 I0505 10:22:00.081716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:22:04.903552 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:22:04.903539498 +0000 UTC m=+18.463151265 I0505 10:22:29.100562 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 10:22:29.100538309 +0000 UTC m=+42.660150086 I0505 10:22:29.100701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:22:29.100823 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 10:22:29.100812946 +0000 UTC m=+42.660424723 I0505 10:22:29.111413 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-05 10:22:29.111391704 +0000 UTC m=+42.671003481 I0505 10:22:29.124453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:22:29.124545 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 10:22:29.124536192 +0000 UTC m=+42.684147949 I0505 10:22:29.324657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:22:29.363014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-crhr9" condition "Approved" to 2026-05-05 10:22:29.363001 +0000 UTC m=+42.922612807 I0505 10:22:29.396841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-crhr9" condition "Ready" to 2026-05-05 10:22:29.396816712 +0000 UTC m=+42.956428509 I0505 10:22:29.427295 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:22:29.427259506 +0000 UTC m=+42.986871303 I0505 10:22:29.450849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:22:29.451428 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:22:29.451418922 +0000 UTC m=+43.011030699 I0505 10:22:29.459248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:22:29.476432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:22:29.476837 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:22:29.476828817 +0000 UTC m=+43.036440594 I0505 10:24:14.984833 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-05 10:24:14.984816306 +0000 UTC m=+148.544428073 I0505 10:24:14.984816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:24:14.984914 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-05 10:24:14.984902868 +0000 UTC m=+148.544514665 E0505 10:24:14.999053 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 10:24:14.999123 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-05 10:24:14.999107021 +0000 UTC m=+148.558718818 I0505 10:24:14.999211 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 10:24:15.002993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:24:15.003106 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-05 10:24:15.003094024 +0000 UTC m=+148.562705821 E0505 10:24:15.008070 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0505 10:24:15.008541 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 10:24:15.008598 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0505 10:24:15.008650 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0505 10:24:15.010254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:24:15.010284 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-05 10:24:15.010277632 +0000 UTC m=+148.569889409 I0505 10:24:15.010287 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-05 10:24:15.010258801 +0000 UTC m=+148.569870588 I0505 10:24:15.025604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:24:15.025743 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-05 10:24:15.025730913 +0000 UTC m=+148.585342690 I0505 10:24:15.209807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:24:15.223437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:24:15.243288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-b8dx2" condition "Approved" to 2026-05-05 10:24:15.243275411 +0000 UTC m=+148.802887188 I0505 10:24:15.257825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-2jq8l" condition "Approved" to 2026-05-05 10:24:15.257811321 +0000 UTC m=+148.817423108 I0505 10:24:15.275773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-b8dx2" condition "Ready" to 2026-05-05 10:24:15.275764961 +0000 UTC m=+148.835376718 I0505 10:24:15.281642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-2jq8l" condition "Ready" to 2026-05-05 10:24:15.281623148 +0000 UTC m=+148.841234945 I0505 10:24:15.306578 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:24:15.306560751 +0000 UTC m=+148.866172528 I0505 10:24:15.324259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:24:15.324642 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:24:15.324631564 +0000 UTC m=+148.884243341 I0505 10:24:15.343083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:24:15.347676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:24:20.008549 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:24:20.00853679 +0000 UTC m=+153.568148567 I0505 10:24:20.025134 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-2jq8l" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:24:20.025114247 +0000 UTC m=+153.584726044 I0505 10:24:20.059822 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:24:20.059808499 +0000 UTC m=+153.619420276 I0505 10:24:20.079159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:24:20.079564 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:24:20.07955678 +0000 UTC m=+153.639168557 I0505 10:24:20.099904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:26:57.599235 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Ready" to 2026-05-05 10:26:57.599196025 +0000 UTC m=+311.158807842 I0505 10:26:57.599982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:26:57.600017 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Issuing" to 2026-05-05 10:26:57.600008584 +0000 UTC m=+311.159620391 I0505 10:26:57.678078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:26:57.678272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:26:57.678427 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Issuing" to 2026-05-05 10:26:57.678412467 +0000 UTC m=+311.238024274 I0505 10:26:57.843397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-216.nip.io-tls-6dsck" condition "Approved" to 2026-05-05 10:26:57.843380165 +0000 UTC m=+311.402991972 I0505 10:26:57.867959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-216.nip.io-tls-6dsck" condition "Ready" to 2026-05-05 10:26:57.867945113 +0000 UTC m=+311.427556910 I0505 10:26:57.896321 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:26:57.89631021 +0000 UTC m=+311.455921997 I0505 10:26:57.929898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:11.432495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:28:11.432567 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 10:28:11.432542634 +0000 UTC m=+384.992154431 I0505 10:28:11.432648 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 10:28:11.432436281 +0000 UTC m=+384.992048088 E0505 10:28:11.449292 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 10:28:11.449347 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-05 10:28:11.44933782 +0000 UTC m=+385.008949597 E0505 10:28:11.449398 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 10:28:11.452397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:11.452521 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 10:28:11.452508715 +0000 UTC m=+385.012120522 E0505 10:28:11.464075 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0505 10:28:11.464429 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 10:28:11.464469 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 10:28:11.464522 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0505 10:28:11.467908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:11.468922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:11.468999 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 10:28:11.468990133 +0000 UTC m=+385.028601910 I0505 10:28:11.472359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2wn88" condition "Approved" to 2026-05-05 10:28:11.472339632 +0000 UTC m=+385.031951429 I0505 10:28:11.486030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2wn88" condition "Ready" to 2026-05-05 10:28:11.486013135 +0000 UTC m=+385.045624902 I0505 10:28:11.507818 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:28:11.507800569 +0000 UTC m=+385.067412366 I0505 10:28:11.525746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:16.466503 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:28:16.466488394 +0000 UTC m=+390.026100201 I0505 10:28:55.064306 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 10:28:55.0642926 +0000 UTC m=+428.623904367 I0505 10:28:55.064293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:28:55.064474 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 10:28:55.064463754 +0000 UTC m=+428.624075531 I0505 10:28:55.077699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:28:55.077732 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 10:28:55.077715606 +0000 UTC m=+428.637327393 I0505 10:28:55.077817 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 10:28:55.077813419 +0000 UTC m=+428.637425186 I0505 10:28:55.077838 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:28:55.077892 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 10:28:55.0778845 +0000 UTC m=+428.637496277 I0505 10:28:55.077740 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 10:28:55.077732097 +0000 UTC m=+428.637343874 I0505 10:28:55.092362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:55.092425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:28:55.092443 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 10:28:55.092437804 +0000 UTC m=+428.652049571 I0505 10:28:55.101796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:55.101874 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:28:55.101886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:55.101897 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 10:28:55.101891087 +0000 UTC m=+428.661502854 I0505 10:28:55.101946 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 10:28:55.101939678 +0000 UTC m=+428.661551445 I0505 10:28:55.330378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:55.330846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-s2lkx" condition "Approved" to 2026-05-05 10:28:55.330835517 +0000 UTC m=+428.890447294 I0505 10:28:55.358010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-s2lkx" condition "Ready" to 2026-05-05 10:28:55.357986548 +0000 UTC m=+428.917598345 I0505 10:28:55.417343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wclzc" condition "Approved" to 2026-05-05 10:28:55.417324487 +0000 UTC m=+428.976936254 I0505 10:28:55.445184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wclzc" condition "Ready" to 2026-05-05 10:28:55.445171504 +0000 UTC m=+429.004783281 I0505 10:28:55.448630 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:28:55.448618005 +0000 UTC m=+429.008229792 I0505 10:28:55.473144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:55.486574 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:28:55.48656001 +0000 UTC m=+429.046171777 I0505 10:28:55.494027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:55.512238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:55.512860 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:28:55.5128478 +0000 UTC m=+429.072459607 I0505 10:28:55.614742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:55.717225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:55.718834 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:28:55.718824939 +0000 UTC m=+429.278436736 I0505 10:28:55.909831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:56.159499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:56.215421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tmmvd" condition "Approved" to 2026-05-05 10:28:56.215409303 +0000 UTC m=+429.775021080 I0505 10:28:56.572437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tmmvd" condition "Ready" to 2026-05-05 10:28:56.572420774 +0000 UTC m=+430.132032581 I0505 10:28:56.761917 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:28:56.761900023 +0000 UTC m=+430.321511830 I0505 10:28:56.856871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:56.857269 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:28:56.857261863 +0000 UTC m=+430.416873640 I0505 10:28:57.109053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:57.159445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:28:57.258420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:29:05.063496 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nnswm-tls" condition "Ready" to 2026-05-05 10:29:05.063469868 +0000 UTC m=+438.623081675 I0505 10:29:05.064036 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nnswm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:29:05.064100 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nnswm-tls" condition "Issuing" to 2026-05-05 10:29:05.064083442 +0000 UTC m=+438.623695389 I0505 10:29:05.088283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nnswm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nnswm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:29:05.088398 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nnswm-tls" condition "Ready" to 2026-05-05 10:29:05.088389757 +0000 UTC m=+438.648001534 I0505 10:29:05.253268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nnswm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nnswm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:29:05.370352 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nnswm-58qnr" condition "Approved" to 2026-05-05 10:29:05.370340147 +0000 UTC m=+438.929951914 I0505 10:29:05.530639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nnswm-58qnr" condition "Ready" to 2026-05-05 10:29:05.530616193 +0000 UTC m=+439.090227980 I0505 10:29:05.582360 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nnswm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:29:05.582342344 +0000 UTC m=+439.141954131 I0505 10:29:05.598459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nnswm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nnswm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:29:05.598870 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nnswm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:29:05.598859314 +0000 UTC m=+439.158471101 I0505 10:29:05.641614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nnswm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nnswm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:29:05.642587 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nnswm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:29:05.642562656 +0000 UTC m=+439.202174463 I0505 10:29:30.851246 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 10:29:30.851231636 +0000 UTC m=+464.410843413 I0505 10:29:30.851362 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:29:30.851421 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 10:29:30.85140703 +0000 UTC m=+464.411018837 I0505 10:29:30.872002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:29:30.872095 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 10:29:30.872084838 +0000 UTC m=+464.431696645 I0505 10:29:31.027246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:29:31.060739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-q5dnq" condition "Approved" to 2026-05-05 10:29:31.060720534 +0000 UTC m=+464.620332331 I0505 10:29:31.078472 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-q5dnq" condition "Ready" to 2026-05-05 10:29:31.078461313 +0000 UTC m=+464.638073090 I0505 10:29:31.109514 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:29:31.109499886 +0000 UTC m=+464.669111663 I0505 10:29:31.130769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:29:31.131183 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:29:31.131175598 +0000 UTC m=+464.690787375 I0505 10:29:31.138488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:29:31.151735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:29:31.152145 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:29:31.152135924 +0000 UTC m=+464.711747691 I0505 10:32:54.387628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:32:54.387716 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 10:32:54.38770689 +0000 UTC m=+667.947318687 I0505 10:32:54.387690 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 10:32:54.387641619 +0000 UTC m=+667.947253396 I0505 10:32:54.408783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:32:54.408915 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:32:54.408945 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 10:32:54.408936069 +0000 UTC m=+667.968547866 I0505 10:32:54.617101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:32:54.626966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5wdv8" condition "Approved" to 2026-05-05 10:32:54.626944163 +0000 UTC m=+668.186555970 I0505 10:32:54.645000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5wdv8" condition "Ready" to 2026-05-05 10:32:54.644986637 +0000 UTC m=+668.204598414 I0505 10:32:54.671046 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:32:54.671030939 +0000 UTC m=+668.230642716 I0505 10:32:54.696967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:32:54.697911 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:32:54.697897149 +0000 UTC m=+668.257508956 I0505 10:32:54.714190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:32:54.714611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:32:54.714929 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:32:54.71491947 +0000 UTC m=+668.274531247 I0505 10:35:15.665740 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-05 10:35:15.665720657 +0000 UTC m=+809.225332454 I0505 10:35:15.665817 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:35:15.665864 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-05 10:35:15.66585779 +0000 UTC m=+809.225469567 I0505 10:35:15.684585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:35:15.684699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:35:15.684735 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-05 10:35:15.684723555 +0000 UTC m=+809.244335362 I0505 10:35:15.896961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:35:15.907158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-cgp5d" condition "Approved" to 2026-05-05 10:35:15.907140996 +0000 UTC m=+809.466752763 I0505 10:35:15.927470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-cgp5d" condition "Ready" to 2026-05-05 10:35:15.927459115 +0000 UTC m=+809.487070882 I0505 10:35:15.952957 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:35:15.952945895 +0000 UTC m=+809.512557662 I0505 10:35:15.969747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:35:15.970039 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:35:15.970033118 +0000 UTC m=+809.529644895 I0505 10:35:15.988663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:35:15.989786 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:35:15.989774374 +0000 UTC m=+809.549386171 I0505 10:36:20.754104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:36:20.754194 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-05 10:36:20.754181954 +0000 UTC m=+874.313793731 I0505 10:36:20.754113 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-05 10:36:20.754097902 +0000 UTC m=+874.313709699 I0505 10:36:20.777781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:36:20.777885 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-05 10:36:20.777876582 +0000 UTC m=+874.337488359 I0505 10:36:20.861425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:36:20.891196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4m4r4" condition "Approved" to 2026-05-05 10:36:20.891180492 +0000 UTC m=+874.450792249 I0505 10:36:20.917304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4m4r4" condition "Ready" to 2026-05-05 10:36:20.917290978 +0000 UTC m=+874.476902745 I0505 10:36:20.946559 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:36:20.946541757 +0000 UTC m=+874.506153524 I0505 10:36:20.966832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:39:22.913922 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-05 10:39:22.913875428 +0000 UTC m=+1056.473487205 I0505 10:39:22.913912 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:39:22.914156 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-05 10:39:22.914145164 +0000 UTC m=+1056.473756961 I0505 10:39:22.928095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:39:22.928313 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-05 10:39:22.928304757 +0000 UTC m=+1056.487916524 I0505 10:39:23.044360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:39:23.074118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-bpd65" condition "Approved" to 2026-05-05 10:39:23.074105412 +0000 UTC m=+1056.633717199 I0505 10:39:23.092705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-bpd65" condition "Ready" to 2026-05-05 10:39:23.092694769 +0000 UTC m=+1056.652306546 I0505 10:39:23.118032 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:39:23.118017924 +0000 UTC m=+1056.677629711 I0505 10:39:23.144178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:45:38.174767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:45:38.174810 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-05 10:45:38.174801084 +0000 UTC m=+1431.734412881 I0505 10:45:38.175074 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-05 10:45:38.17505653 +0000 UTC m=+1431.734668327 I0505 10:45:38.192976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:45:38.193103 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-05 10:45:38.193094584 +0000 UTC m=+1431.752706361 I0505 10:45:38.277537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:45:38.306883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-vwbx5" condition "Approved" to 2026-05-05 10:45:38.306869607 +0000 UTC m=+1431.866481384 I0505 10:45:38.327221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-vwbx5" condition "Ready" to 2026-05-05 10:45:38.327205934 +0000 UTC m=+1431.886817711 I0505 10:45:38.363765 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:45:38.363752503 +0000 UTC m=+1431.923364270 I0505 10:45:38.388113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:45:38.388660 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:45:38.388649977 +0000 UTC m=+1431.948261784 I0505 10:45:38.410623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:47:04.110460 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-05 10:47:04.110445039 +0000 UTC m=+1517.670056836 I0505 10:47:04.110823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:47:04.110870 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-05 10:47:04.110859928 +0000 UTC m=+1517.670471715 I0505 10:47:04.127617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:47:04.127721 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 10:47:04.127749 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-05 10:47:04.127742075 +0000 UTC m=+1517.687353842 I0505 10:47:04.295400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-4bxht" condition "Approved" to 2026-05-05 10:47:04.295386172 +0000 UTC m=+1517.854998039 I0505 10:47:04.316849 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-4bxht" condition "Ready" to 2026-05-05 10:47:04.316839526 +0000 UTC m=+1517.876451303 I0505 10:47:04.345789 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:47:04.345773756 +0000 UTC m=+1517.905385563 I0505 10:47:04.362731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 10:47:04.362979 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 10:47:04.36297331 +0000 UTC m=+1517.922585077 I0505 10:47:04.386998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"