I0416 16:31:43.521250 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0416 16:31:43.521390 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0416 16:31:43.521473 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0416 16:31:43.526571 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0416 16:31:43.527390 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0416 16:31:43.527706 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0416 16:31:43.527757 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0416 16:31:43.533044 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0416 16:31:43.551940 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0416 16:31:43.557483 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0416 16:31:43.557922 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0416 16:31:43.561213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0416 16:31:43.564008 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0416 16:31:43.569283 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0416 16:31:43.571957 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0416 16:31:43.571995 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0416 16:31:43.572013 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0416 16:31:43.574662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0416 16:31:43.577466 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0416 16:31:43.582287 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0416 16:31:43.586633 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0416 16:31:43.590998 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0416 16:31:43.596876 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0416 16:31:43.600217 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0416 16:31:43.602677 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0416 16:31:43.602729 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0416 16:31:43.605779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0416 16:31:43.608526 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0416 16:31:43.611108 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0416 16:31:43.613254 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0416 16:31:43.615362 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0416 16:31:43.615384 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0416 16:31:43.615386 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0416 16:31:43.619213 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:31:43.622641 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:31:43.622706 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:31:43.623757 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:31:43.645105 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:31:43.663195 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:31:43.678931 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:31:43.690990 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:31:43.710143 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:31:43.721000 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:31:55.275058 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-16 16:31:55.275021511 +0000 UTC m=+11.785782219 I0416 16:31:56.022075 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 16:31:56.022057394 +0000 UTC m=+12.532818122 I0416 16:31:56.022285 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:31:56.022352 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 16:31:56.022339502 +0000 UTC m=+12.533100210 E0416 16:31:56.036892 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:31:56.036958 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-16 16:31:56.036952938 +0000 UTC m=+12.547713626 E0416 16:31:56.036976 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:31:56.037936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:56.038020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:31:56.038063 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 16:31:56.038053897 +0000 UTC m=+12.548814605 E0416 16:31:56.051632 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0416 16:31:56.051784 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:31:56.051826 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:31:56.051880 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0416 16:31:56.082622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cmljj" condition "Approved" to 2026-04-16 16:31:56.082600313 +0000 UTC m=+12.593361041 I0416 16:31:56.096461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cmljj" condition "Ready" to 2026-04-16 16:31:56.096447069 +0000 UTC m=+12.607207797 I0416 16:31:56.130813 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:31:56.130795606 +0000 UTC m=+12.641556314 I0416 16:31:56.151479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:56.151823 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:31:56.151814632 +0000 UTC m=+12.662575330 I0416 16:31:56.155196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:56.164205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:31:56.164361 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:31:56.164354133 +0000 UTC m=+12.675114821 I0416 16:32:01.053105 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:32:01.0530837 +0000 UTC m=+17.563844428 I0416 16:32:21.571582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:32:21.571544 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 16:32:21.57151012 +0000 UTC m=+38.082270838 I0416 16:32:21.571643 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 16:32:21.571625753 +0000 UTC m=+38.082386461 I0416 16:32:21.583131 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-16 16:32:21.583120355 +0000 UTC m=+38.093881063 I0416 16:32:21.590583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:32:21.590688 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 16:32:21.590674399 +0000 UTC m=+38.101435107 I0416 16:32:21.851218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:32:21.887044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s2zpg" condition "Approved" to 2026-04-16 16:32:21.887028886 +0000 UTC m=+38.397789594 I0416 16:32:21.924876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-s2zpg" condition "Ready" to 2026-04-16 16:32:21.924841179 +0000 UTC m=+38.435601907 I0416 16:32:21.967451 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:32:21.96743144 +0000 UTC m=+38.478192148 I0416 16:32:21.991145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:32:22.053387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:10.977069 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:34:10.977282 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-16 16:34:10.977132988 +0000 UTC m=+147.487893726 I0416 16:34:10.978433 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-16 16:34:10.978413132 +0000 UTC m=+147.489173870 E0416 16:34:10.995071 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 16:34:10.995179 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-16 16:34:10.995166826 +0000 UTC m=+147.505927524 I0416 16:34:10.995257 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 16:34:10.997767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:10.997936 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-16 16:34:10.997865967 +0000 UTC m=+147.508626705 E0416 16:34:11.006186 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0416 16:34:11.006428 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0416 16:34:11.006488 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0416 16:34:11.006642 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0416 16:34:11.014281 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:34:11.014314 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-16 16:34:11.014306972 +0000 UTC m=+147.525067680 I0416 16:34:11.014540 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-16 16:34:11.014496717 +0000 UTC m=+147.525257465 I0416 16:34:11.029016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:11.029310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:34:11.029345 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-16 16:34:11.029334729 +0000 UTC m=+147.540095437 I0416 16:34:11.255070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:11.286399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-tk9gl" condition "Approved" to 2026-04-16 16:34:11.286387759 +0000 UTC m=+147.797148457 I0416 16:34:11.318552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-tk9gl" condition "Ready" to 2026-04-16 16:34:11.318534529 +0000 UTC m=+147.829295257 I0416 16:34:11.350452 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:11.350432093 +0000 UTC m=+147.861192821 I0416 16:34:11.388557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:11.389798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-ft68k" condition "Approved" to 2026-04-16 16:34:11.389782434 +0000 UTC m=+147.900543132 I0416 16:34:11.390669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:11.392987 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:11.392969818 +0000 UTC m=+147.903730516 I0416 16:34:11.407350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:11.418222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-ft68k" condition "Ready" to 2026-04-16 16:34:11.418205076 +0000 UTC m=+147.928965784 I0416 16:34:11.423421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:16.006876 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:16.006858748 +0000 UTC m=+152.517619476 I0416 16:34:16.027313 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-ft68k" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:16.027297718 +0000 UTC m=+152.538058456 I0416 16:34:16.064755 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:16.064730929 +0000 UTC m=+152.575491657 I0416 16:34:16.091507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:16.092084 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:16.092073022 +0000 UTC m=+152.602833730 I0416 16:34:16.107856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:16.108332 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:16.108319122 +0000 UTC m=+152.619079840 I0416 16:37:03.365779 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-231.nip.io-tls" condition "Ready" to 2026-04-16 16:37:03.365725482 +0000 UTC m=+319.876486220 I0416 16:37:03.366241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-231.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:37:03.366306 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-231.nip.io-tls" condition "Issuing" to 2026-04-16 16:37:03.366296428 +0000 UTC m=+319.877057166 I0416 16:37:03.384233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-231.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-231.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:37:03.384376 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-231.nip.io-tls" condition "Ready" to 2026-04-16 16:37:03.384363172 +0000 UTC m=+319.895123880 I0416 16:37:03.472027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-231.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-231.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:37:03.613605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-231.nip.io-tls-2xlfl" condition "Approved" to 2026-04-16 16:37:03.613592368 +0000 UTC m=+320.124353066 I0416 16:37:03.647108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-231.nip.io-tls-2xlfl" condition "Ready" to 2026-04-16 16:37:03.647094876 +0000 UTC m=+320.157855584 I0416 16:37:03.680431 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-231.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:37:03.680410059 +0000 UTC m=+320.191170787 I0416 16:37:03.710102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-231.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-231.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:37:03.710738 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-231.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:37:03.710729442 +0000 UTC m=+320.221490150 I0416 16:37:03.717226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-231.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-231.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:37:03.731848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-231.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-231.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:38:15.981963 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:38:15.982050 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 16:38:15.982039553 +0000 UTC m=+392.492800281 I0416 16:38:15.982226 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 16:38:15.982196538 +0000 UTC m=+392.492957266 E0416 16:38:15.997165 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:38:15.997440 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-16 16:38:15.997267162 +0000 UTC m=+392.508027900 E0416 16:38:15.997579 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:38:16.000200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:38:16.000313 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 16:38:16.000304553 +0000 UTC m=+392.511065281 E0416 16:38:16.011943 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0416 16:38:16.012132 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:38:16.012218 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:38:16.012263 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0416 16:38:16.016987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:38:16.043109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-225wj" condition "Approved" to 2026-04-16 16:38:16.043095368 +0000 UTC m=+392.553856096 I0416 16:38:16.059202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-225wj" condition "Ready" to 2026-04-16 16:38:16.05919511 +0000 UTC m=+392.569955798 I0416 16:38:16.081844 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:38:16.081836346 +0000 UTC m=+392.592597054 I0416 16:38:16.096113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:38:16.096555 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:38:16.096544971 +0000 UTC m=+392.607305689 I0416 16:38:16.112924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:38:21.013378 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:38:21.01336045 +0000 UTC m=+397.524121178 I0416 16:39:02.919901 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 16:39:02.919883768 +0000 UTC m=+439.430644466 I0416 16:39:02.920168 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:39:02.920287 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 16:39:02.920275719 +0000 UTC m=+439.431036447 I0416 16:39:02.925409 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 16:39:02.925397976 +0000 UTC m=+439.436158684 I0416 16:39:02.925877 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:39:02.925930 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 16:39:02.925921451 +0000 UTC m=+439.436682169 I0416 16:39:02.926028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:39:02.926053 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 16:39:02.926049294 +0000 UTC m=+439.436810002 I0416 16:39:02.926188 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 16:39:02.926182967 +0000 UTC m=+439.436943675 I0416 16:39:03.116026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:03.116055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:03.116171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:03.116172 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 16:39:03.116163695 +0000 UTC m=+439.626924393 I0416 16:39:03.116497 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:39:03.116553 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 16:39:03.116542906 +0000 UTC m=+439.627303614 I0416 16:39:03.116566 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:39:03.116727 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 16:39:03.116722461 +0000 UTC m=+439.627483159 I0416 16:39:03.358335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:03.367089 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m2dp8" condition "Approved" to 2026-04-16 16:39:03.367067241 +0000 UTC m=+439.877827979 I0416 16:39:03.390507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-m2dp8" condition "Ready" to 2026-04-16 16:39:03.390488982 +0000 UTC m=+439.901249710 I0416 16:39:03.450495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-twlm8" condition "Approved" to 2026-04-16 16:39:03.450477555 +0000 UTC m=+439.961238253 I0416 16:39:03.463081 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:39:03.463578 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 16:39:03.463565716 +0000 UTC m=+439.974326434 I0416 16:39:03.473672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-twlm8" condition "Ready" to 2026-04-16 16:39:03.473658787 +0000 UTC m=+439.984419495 I0416 16:39:03.485318 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:03.48530127 +0000 UTC m=+439.996062008 I0416 16:39:03.496455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:03.496769 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:03.496761328 +0000 UTC m=+440.007522036 I0416 16:39:03.499210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:03.505982 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:03.505975916 +0000 UTC m=+440.016736624 I0416 16:39:03.538613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wqs8g" condition "Approved" to 2026-04-16 16:39:03.538597184 +0000 UTC m=+440.049357892 I0416 16:39:03.547841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:03.548089 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:03.548081878 +0000 UTC m=+440.058842576 I0416 16:39:03.675766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wqs8g" condition "Ready" to 2026-04-16 16:39:03.675752081 +0000 UTC m=+440.186512779 I0416 16:39:04.021737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:04.022263 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:04.022249087 +0000 UTC m=+440.533009815 I0416 16:39:04.065145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:04.376043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:04.628305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-crm2t" condition "Approved" to 2026-04-16 16:39:04.628284141 +0000 UTC m=+441.139044879 I0416 16:39:04.936426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-crm2t" condition "Ready" to 2026-04-16 16:39:04.936394665 +0000 UTC m=+441.447155423 I0416 16:39:05.167106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:05.485458 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:05.485432846 +0000 UTC m=+441.996193584 I0416 16:39:05.516143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:05.516505 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:05.516497512 +0000 UTC m=+442.027258210 I0416 16:39:05.764025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:05.816751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:14.664354 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-79j22-tls" condition "Ready" to 2026-04-16 16:39:14.664334764 +0000 UTC m=+451.175095462 I0416 16:39:14.664507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-79j22-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:39:14.664561 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-79j22-tls" condition "Issuing" to 2026-04-16 16:39:14.66455108 +0000 UTC m=+451.175311788 I0416 16:39:14.777556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-79j22-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-79j22-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:14.777709 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-79j22-tls" condition "Ready" to 2026-04-16 16:39:14.777695572 +0000 UTC m=+451.288456280 I0416 16:39:14.850549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-79j22-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-79j22-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:14.890767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-79j22-vwx6h" condition "Approved" to 2026-04-16 16:39:14.890742361 +0000 UTC m=+451.401503089 I0416 16:39:14.917882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-79j22-vwx6h" condition "Ready" to 2026-04-16 16:39:14.91786308 +0000 UTC m=+451.428623788 I0416 16:39:14.952799 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-79j22-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:14.952785849 +0000 UTC m=+451.463546567 I0416 16:39:14.976114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-79j22-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-79j22-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:15.037894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-79j22-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-79j22-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:50.087405 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 16:39:50.087383986 +0000 UTC m=+486.598144694 I0416 16:39:50.087625 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:39:50.087678 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 16:39:50.087666193 +0000 UTC m=+486.598426901 I0416 16:39:50.351629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:50.351741 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 16:39:50.351731294 +0000 UTC m=+486.862492002 I0416 16:39:50.764155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:50.922439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4q2fh" condition "Approved" to 2026-04-16 16:39:50.922234033 +0000 UTC m=+487.432994731 I0416 16:39:51.112701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4q2fh" condition "Ready" to 2026-04-16 16:39:51.112682943 +0000 UTC m=+487.623443681 I0416 16:39:51.181761 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:51.18173855 +0000 UTC m=+487.692499288 I0416 16:39:51.220505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:39:51.220971 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:39:51.220960132 +0000 UTC m=+487.731720840 I0416 16:39:51.254957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:43:06.352588 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:43:06.352619 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 16:43:06.352470973 +0000 UTC m=+682.863231701 I0416 16:43:06.352661 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 16:43:06.352646718 +0000 UTC m=+682.863407476 I0416 16:43:06.372076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:43:06.372187 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 16:43:06.372176616 +0000 UTC m=+682.882937314 I0416 16:43:06.649255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:43:06.684782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-htznn" condition "Approved" to 2026-04-16 16:43:06.684759815 +0000 UTC m=+683.195520553 I0416 16:43:06.701822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-htznn" condition "Ready" to 2026-04-16 16:43:06.701809396 +0000 UTC m=+683.212570124 I0416 16:43:06.741417 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:43:06.741403617 +0000 UTC m=+683.252164325 I0416 16:43:06.768116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:45:34.982700 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-16 16:45:34.9826859 +0000 UTC m=+831.493446638 I0416 16:45:34.983316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:45:34.983345 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-16 16:45:34.983338478 +0000 UTC m=+831.494099206 I0416 16:45:35.116003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:45:35.116109 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:45:35.116135 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-16 16:45:35.116125429 +0000 UTC m=+831.626886157 I0416 16:45:35.561792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:45:35.567058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-hrjct" condition "Approved" to 2026-04-16 16:45:35.567031194 +0000 UTC m=+832.077791932 I0416 16:45:35.586769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-hrjct" condition "Ready" to 2026-04-16 16:45:35.586751378 +0000 UTC m=+832.097512116 I0416 16:45:35.618097 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:45:35.618080005 +0000 UTC m=+832.128840723 I0416 16:45:35.646774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:45:35.647493 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:45:35.64748427 +0000 UTC m=+832.158244978 I0416 16:45:35.657915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:45:35.678094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:46:50.524065 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-16 16:46:50.524047253 +0000 UTC m=+907.034807971 I0416 16:46:50.524238 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:46:50.524256 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-16 16:46:50.524252919 +0000 UTC m=+907.035013617 I0416 16:46:50.543854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:46:50.543958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:46:50.543983 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-16 16:46:50.543977184 +0000 UTC m=+907.054737882 I0416 16:46:50.840365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:46:50.845611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fz8gq" condition "Approved" to 2026-04-16 16:46:50.845596108 +0000 UTC m=+907.356356816 I0416 16:46:50.868674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fz8gq" condition "Ready" to 2026-04-16 16:46:50.868660455 +0000 UTC m=+907.379421163 I0416 16:46:50.899323 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:46:50.899310546 +0000 UTC m=+907.410071254 I0416 16:46:50.923262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:46:50.923794 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:46:50.92378464 +0000 UTC m=+907.434545358 I0416 16:46:50.945329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:50:00.436962 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-16 16:50:00.436901583 +0000 UTC m=+1096.947662321 I0416 16:50:00.437236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:50:00.437351 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-16 16:50:00.437324885 +0000 UTC m=+1096.948085613 I0416 16:50:00.460011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:50:00.460103 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:50:00.460126 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-16 16:50:00.460119155 +0000 UTC m=+1096.970879873 I0416 16:50:00.701598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:50:00.708220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-dgw4p" condition "Approved" to 2026-04-16 16:50:00.70820393 +0000 UTC m=+1097.218964658 I0416 16:50:00.730599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-dgw4p" condition "Ready" to 2026-04-16 16:50:00.730586967 +0000 UTC m=+1097.241347665 I0416 16:50:00.758063 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:50:00.758045674 +0000 UTC m=+1097.268806372 I0416 16:50:00.779949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"