I0411 17:49:08.732843 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0411 17:49:08.732998 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0411 17:49:08.733077 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0411 17:49:08.739051 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0411 17:49:08.739675 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0411 17:49:08.739766 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0411 17:49:08.739790 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0411 17:49:08.742961 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0411 17:49:08.761465 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0411 17:49:08.766408 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0411 17:49:08.771412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0411 17:49:08.775175 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0411 17:49:08.775213 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0411 17:49:08.775228 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0411 17:49:08.775263 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0411 17:49:08.783016 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0411 17:49:08.787420 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0411 17:49:08.790194 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0411 17:49:08.791832 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0411 17:49:08.791904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0411 17:49:08.794113 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0411 17:49:08.796315 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0411 17:49:08.796451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0411 17:49:08.799853 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0411 17:49:08.804838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0411 17:49:08.807653 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0411 17:49:08.810299 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0411 17:49:08.810373 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0411 17:49:08.812925 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0411 17:49:08.814724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0411 17:49:08.816907 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0411 17:49:08.818787 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0411 17:49:08.821013 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0411 17:49:08.824594 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:49:08.827711 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:49:08.829202 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:49:08.844363 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:49:08.859751 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:49:08.877970 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:49:08.916240 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:49:08.930595 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:49:08.947161 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:49:08.961300 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 17:49:26.545531 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-11 17:49:26.545510148 +0000 UTC m=+17.847616706 I0411 17:49:27.312384 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-11 17:49:27.312364153 +0000 UTC m=+18.614470741 I0411 17:49:27.312643 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:27.312772 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-11 17:49:27.312757591 +0000 UTC m=+18.614864169 I0411 17:49:27.329044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:27.329126 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:27.329152 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-11 17:49:27.32914562 +0000 UTC m=+18.631252178 E0411 17:49:27.329907 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:49:27.330035 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-11 17:49:27.330021357 +0000 UTC m=+18.632127945 E0411 17:49:27.330102 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:49:27.346607 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0411 17:49:27.346994 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:49:27.347137 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:49:27.347230 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0411 17:49:27.375069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mvm62" condition "Approved" to 2026-04-11 17:49:27.375049836 +0000 UTC m=+18.677156404 I0411 17:49:27.390562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mvm62" condition "Ready" to 2026-04-11 17:49:27.390542037 +0000 UTC m=+18.692648625 I0411 17:49:27.414100 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:27.414082462 +0000 UTC m=+18.716189010 I0411 17:49:27.440432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:27.472928 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:27.472911476 +0000 UTC m=+18.775018024 I0411 17:49:27.491746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:27.492216 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:27.492204414 +0000 UTC m=+18.794311002 I0411 17:49:32.347169 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:32.347155305 +0000 UTC m=+23.649261893 I0411 17:49:53.752649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:49:53.752732 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-11 17:49:53.752707536 +0000 UTC m=+45.054814124 I0411 17:49:53.752810 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-11 17:49:53.752800388 +0000 UTC m=+45.054906936 I0411 17:49:53.768734 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-11 17:49:53.768707797 +0000 UTC m=+45.070814375 I0411 17:49:53.785481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:53.785592 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-11 17:49:53.785583635 +0000 UTC m=+45.087690183 I0411 17:49:54.518963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:54.554641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rbggn" condition "Approved" to 2026-04-11 17:49:54.554629446 +0000 UTC m=+45.856736004 I0411 17:49:54.586347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rbggn" condition "Ready" to 2026-04-11 17:49:54.58633466 +0000 UTC m=+45.888441218 I0411 17:49:54.613647 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:54.613633244 +0000 UTC m=+45.915739802 I0411 17:49:54.641933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:54.642532 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:54.64252387 +0000 UTC m=+45.944630428 I0411 17:49:54.670940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:49:54.671415 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:49:54.671407826 +0000 UTC m=+45.973514394 I0411 17:51:41.839589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:51:41.839631 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-11 17:51:41.839622151 +0000 UTC m=+153.141728709 I0411 17:51:41.839671 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-11 17:51:41.839645871 +0000 UTC m=+153.141752449 E0411 17:51:41.858328 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0411 17:51:41.858557 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-11 17:51:41.858538618 +0000 UTC m=+153.160645196 I0411 17:51:41.858638 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0411 17:51:41.862750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:51:41.863576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:51:41.863614 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-11 17:51:41.863605322 +0000 UTC m=+153.165711880 E0411 17:51:41.867298 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0411 17:51:41.867501 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0411 17:51:41.867571 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0411 17:51:41.867605 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0411 17:51:41.878577 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-11 17:51:41.878559477 +0000 UTC m=+153.180666035 I0411 17:51:41.878797 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:51:41.878843 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-11 17:51:41.878833363 +0000 UTC m=+153.180939911 I0411 17:51:41.896733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:51:41.896828 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-11 17:51:41.89681827 +0000 UTC m=+153.198924828 I0411 17:51:42.067508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:51:42.098207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-4c6b6" condition "Approved" to 2026-04-11 17:51:42.09819166 +0000 UTC m=+153.400298238 I0411 17:51:42.128307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-4c6b6" condition "Ready" to 2026-04-11 17:51:42.128299616 +0000 UTC m=+153.430406164 I0411 17:51:42.207707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:51:42.217721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-ml268" condition "Approved" to 2026-04-11 17:51:42.217709355 +0000 UTC m=+153.519815913 I0411 17:51:42.247351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-ml268" condition "Ready" to 2026-04-11 17:51:42.247333481 +0000 UTC m=+153.549440039 I0411 17:51:42.280312 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:51:42.280296865 +0000 UTC m=+153.582403423 I0411 17:51:42.302995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:51:42.303390 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:51:42.303383288 +0000 UTC m=+153.605489826 I0411 17:51:42.322284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:51:42.322366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:51:42.322522 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:51:42.322514779 +0000 UTC m=+153.624621337 I0411 17:51:42.325335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:51:46.868900 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:51:46.868885232 +0000 UTC m=+158.170991810 I0411 17:51:46.885836 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-4c6b6" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:51:46.885822909 +0000 UTC m=+158.187929467 I0411 17:51:46.922398 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:51:46.922376746 +0000 UTC m=+158.224483334 I0411 17:51:46.941774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:51:46.947769 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:51:46.947751145 +0000 UTC m=+158.249857733 I0411 17:51:46.957656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:51:46.963723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:51:46.964260 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:51:46.964238873 +0000 UTC m=+158.266345431 I0411 17:54:29.376405 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-138.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:54:29.376462 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-138.nip.io-tls" condition "Issuing" to 2026-04-11 17:54:29.376449622 +0000 UTC m=+320.678556200 I0411 17:54:29.376479 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-138.nip.io-tls" condition "Ready" to 2026-04-11 17:54:29.376447332 +0000 UTC m=+320.678553910 I0411 17:54:29.394298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:54:29.394505 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-138.nip.io-tls" condition "Ready" to 2026-04-11 17:54:29.39441174 +0000 UTC m=+320.696518328 I0411 17:54:29.528307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:54:29.561539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-138.nip.io-tls-z7jq2" condition "Approved" to 2026-04-11 17:54:29.56151694 +0000 UTC m=+320.863623528 I0411 17:54:29.583101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-138.nip.io-tls-z7jq2" condition "Ready" to 2026-04-11 17:54:29.58307954 +0000 UTC m=+320.885186128 I0411 17:54:29.613495 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-138.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:54:29.613469982 +0000 UTC m=+320.915576570 I0411 17:54:29.638258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:54:29.638604 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-138.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:54:29.638593856 +0000 UTC m=+320.940700394 I0411 17:54:29.658428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:54:29.658976 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-138.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:54:29.658964782 +0000 UTC m=+320.961071370 I0411 17:55:42.021560 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-11 17:55:42.02150191 +0000 UTC m=+393.323608488 I0411 17:55:42.021944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:55:42.022595 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-11 17:55:42.022581883 +0000 UTC m=+393.324688471 E0411 17:55:42.036651 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:55:42.036701 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-11 17:55:42.036689369 +0000 UTC m=+393.338795927 E0411 17:55:42.036913 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 17:55:42.040719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:55:42.040872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:55:42.040944 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-11 17:55:42.040933555 +0000 UTC m=+393.343040143 E0411 17:55:42.047172 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0411 17:55:42.047611 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:55:42.047656 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 17:55:42.047716 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0411 17:55:42.080356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bt4fl" condition "Approved" to 2026-04-11 17:55:42.080332637 +0000 UTC m=+393.382439225 I0411 17:55:42.096868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-bt4fl" condition "Ready" to 2026-04-11 17:55:42.096856983 +0000 UTC m=+393.398963541 I0411 17:55:42.117362 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:55:42.11733907 +0000 UTC m=+393.419445628 I0411 17:55:42.143261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:55:42.192888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:55:47.048676 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:55:47.048660031 +0000 UTC m=+398.350766619 I0411 17:56:27.923207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:56:27.923240 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-11 17:56:27.923224373 +0000 UTC m=+439.225330921 I0411 17:56:27.923285 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 17:56:27.923274714 +0000 UTC m=+439.225381272 I0411 17:56:27.923562 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-11 17:56:27.92355868 +0000 UTC m=+439.225665218 I0411 17:56:27.923735 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:56:27.923757 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-11 17:56:27.923754494 +0000 UTC m=+439.225861032 I0411 17:56:27.948310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:56:27.948349 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-11 17:56:27.94834316 +0000 UTC m=+439.250449708 I0411 17:56:27.948300 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 17:56:27.948283149 +0000 UTC m=+439.250389707 I0411 17:56:27.958520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:27.958612 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-11 17:56:27.958602392 +0000 UTC m=+439.260708950 I0411 17:56:27.959142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:27.959196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:56:27.959255 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 17:56:27.959248755 +0000 UTC m=+439.261355323 I0411 17:56:27.976202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:27.980750 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 17:56:27.980733137 +0000 UTC m=+439.282839695 I0411 17:56:28.086647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wcn6s" condition "Approved" to 2026-04-11 17:56:28.086627399 +0000 UTC m=+439.388733977 I0411 17:56:28.114408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wcn6s" condition "Ready" to 2026-04-11 17:56:28.114393931 +0000 UTC m=+439.416500479 I0411 17:56:28.128273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:28.152105 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:56:28.152081638 +0000 UTC m=+439.454188226 I0411 17:56:28.162756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tjwbl" condition "Approved" to 2026-04-11 17:56:28.162738117 +0000 UTC m=+439.464844685 I0411 17:56:28.186964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:28.187578 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:56:28.187563018 +0000 UTC m=+439.489669606 I0411 17:56:28.191171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tjwbl" condition "Ready" to 2026-04-11 17:56:28.191158023 +0000 UTC m=+439.493264571 I0411 17:56:28.219331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:28.219707 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:56:28.219697451 +0000 UTC m=+439.521804019 I0411 17:56:28.244055 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:56:28.244035271 +0000 UTC m=+439.546141829 I0411 17:56:28.316854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:28.317324 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:56:28.317312642 +0000 UTC m=+439.619419210 I0411 17:56:28.516702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:28.665799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:28.824305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-js74n" condition "Approved" to 2026-04-11 17:56:28.824285196 +0000 UTC m=+440.126391754 I0411 17:56:29.092140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-js74n" condition "Ready" to 2026-04-11 17:56:29.092129174 +0000 UTC m=+440.394235722 I0411 17:56:29.369477 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:56:29.369460828 +0000 UTC m=+440.671567406 I0411 17:56:29.488898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:29.489505 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:56:29.489494681 +0000 UTC m=+440.791601269 I0411 17:56:29.718604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:29.769113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:36.079116 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tncg4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:56:36.079179 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tncg4-tls" condition "Issuing" to 2026-04-11 17:56:36.079166258 +0000 UTC m=+447.381272836 I0411 17:56:36.079259 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tncg4-tls" condition "Ready" to 2026-04-11 17:56:36.079232689 +0000 UTC m=+447.381339247 I0411 17:56:36.097872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tncg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tncg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:36.098018 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tncg4-tls" condition "Ready" to 2026-04-11 17:56:36.098005466 +0000 UTC m=+447.400112024 I0411 17:56:36.380583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tncg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tncg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:36.415007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tncg4-nqk7x" condition "Approved" to 2026-04-11 17:56:36.414988977 +0000 UTC m=+447.717095555 I0411 17:56:36.436340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tncg4-nqk7x" condition "Ready" to 2026-04-11 17:56:36.436326737 +0000 UTC m=+447.738433285 I0411 17:56:36.464468 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tncg4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:56:36.464448806 +0000 UTC m=+447.766555384 I0411 17:56:36.504612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tncg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tncg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:36.505064 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tncg4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:56:36.505052352 +0000 UTC m=+447.807158910 I0411 17:56:36.520736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tncg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tncg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:56:36.521168 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tncg4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:56:36.521154774 +0000 UTC m=+447.823261342 I0411 17:56:36.528561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tncg4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tncg4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:57:04.015664 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-11 17:57:04.0156448 +0000 UTC m=+475.317751348 I0411 17:57:04.015691 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:57:04.016374 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-11 17:57:04.016353214 +0000 UTC m=+475.318459772 I0411 17:57:04.033022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:57:04.033121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 17:57:04.033146 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-11 17:57:04.033139447 +0000 UTC m=+475.335245995 I0411 17:57:04.441576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vb8rj" condition "Approved" to 2026-04-11 17:57:04.441322523 +0000 UTC m=+475.743429081 I0411 17:57:04.464231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vb8rj" condition "Ready" to 2026-04-11 17:57:04.464211822 +0000 UTC m=+475.766318380 I0411 17:57:04.495901 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:57:04.49588598 +0000 UTC m=+475.797992538 I0411 17:57:04.519103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:57:04.519620 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:57:04.519610436 +0000 UTC m=+475.821717024 I0411 17:57:04.543824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 17:57:04.544224 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 17:57:04.544215119 +0000 UTC m=+475.846321667 I0411 18:00:22.428568 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 18:00:22.428653 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-11 18:00:22.428633955 +0000 UTC m=+673.730740533 I0411 18:00:22.428691 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-11 18:00:22.428678356 +0000 UTC m=+673.730784934 I0411 18:00:22.445888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:00:22.445967 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 18:00:22.445986 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-11 18:00:22.445979312 +0000 UTC m=+673.748085860 I0411 18:00:22.687891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xgfwz" condition "Approved" to 2026-04-11 18:00:22.687864665 +0000 UTC m=+673.989971213 I0411 18:00:22.707708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xgfwz" condition "Ready" to 2026-04-11 18:00:22.707692961 +0000 UTC m=+674.009799529 I0411 18:00:22.735802 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 18:00:22.735785592 +0000 UTC m=+674.037892150 I0411 18:00:22.765184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:00:22.765913 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 18:00:22.765901553 +0000 UTC m=+674.068008141 I0411 18:00:22.793811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:02:48.681342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 18:02:48.681405 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-11 18:02:48.681398756 +0000 UTC m=+819.983505304 I0411 18:02:48.681475 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-11 18:02:48.681451167 +0000 UTC m=+819.983557755 I0411 18:02:48.709148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:02:48.709200 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-11 18:02:48.709194081 +0000 UTC m=+820.011300629 I0411 18:02:48.885474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:02:48.920242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-dmcxs" condition "Approved" to 2026-04-11 18:02:48.920212345 +0000 UTC m=+820.222318903 I0411 18:02:48.940719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-dmcxs" condition "Ready" to 2026-04-11 18:02:48.940699053 +0000 UTC m=+820.242805631 I0411 18:02:48.974815 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 18:02:48.974798904 +0000 UTC m=+820.276905452 I0411 18:02:48.996012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:03:53.769315 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-11 18:03:53.769261155 +0000 UTC m=+885.071367723 I0411 18:03:53.769457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 18:03:53.769529 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-11 18:03:53.769518831 +0000 UTC m=+885.071625409 I0411 18:03:53.785676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:03:53.785753 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-11 18:03:53.785744075 +0000 UTC m=+885.087850633 I0411 18:03:53.963668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:03:53.992224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-w2898" condition "Approved" to 2026-04-11 18:03:53.992204991 +0000 UTC m=+885.294311579 I0411 18:03:54.016210 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-w2898" condition "Ready" to 2026-04-11 18:03:54.01619989 +0000 UTC m=+885.318306438 I0411 18:03:54.044855 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 18:03:54.044840131 +0000 UTC m=+885.346946689 I0411 18:03:54.072512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:03:54.073036 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 18:03:54.073027584 +0000 UTC m=+885.375134162 I0411 18:03:54.079803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:03:54.106599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:03:54.106884 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 18:03:54.106875742 +0000 UTC m=+885.408982300 I0411 18:06:54.262571 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-11 18:06:54.262557298 +0000 UTC m=+1065.564663846 I0411 18:06:54.262780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 18:06:54.262899 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-11 18:06:54.262886785 +0000 UTC m=+1065.564993373 I0411 18:06:54.281924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:06:54.282007 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-11 18:06:54.281999746 +0000 UTC m=+1065.584106304 I0411 18:06:54.418361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:06:54.447992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gcbjv" condition "Approved" to 2026-04-11 18:06:54.447978124 +0000 UTC m=+1065.750084682 I0411 18:06:54.463942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gcbjv" condition "Ready" to 2026-04-11 18:06:54.463910742 +0000 UTC m=+1065.766017300 I0411 18:06:54.499992 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 18:06:54.499973053 +0000 UTC m=+1065.802079631 I0411 18:06:54.519588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:06:54.519859 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 18:06:54.51985354 +0000 UTC m=+1065.821960088 I0411 18:06:54.542883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 18:06:54.543143 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 18:06:54.543136316 +0000 UTC m=+1065.845242874 I0411 18:06:54.543585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"