I0417 21:13:52.073967 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 21:13:52.074077 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 21:13:52.074169 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 21:13:52.080903 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 21:13:52.081791 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 21:13:52.081818 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 21:13:52.081876 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 21:13:52.085569 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 21:13:52.100945 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 21:13:52.106724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 21:13:52.111401 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 21:13:52.117849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 21:13:52.121023 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 21:13:52.123630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 21:13:52.126473 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 21:13:52.128895 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 21:13:52.128922 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 21:13:52.128931 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 21:13:52.129024 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 21:13:52.131472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 21:13:52.133222 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 21:13:52.137020 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 21:13:52.139820 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 21:13:52.139847 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 21:13:52.139864 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 21:13:52.142349 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 21:13:52.144696 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 21:13:52.147173 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 21:13:52.149469 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 21:13:52.151900 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 21:13:52.154297 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 21:13:52.156962 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 21:13:52.157151 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 21:13:52.163091 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:13:52.163503 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:13:52.163704 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:13:52.164808 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:13:52.179270 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:13:52.198710 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:13:52.218201 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:13:52.230634 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:13:52.254812 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:13:52.255958 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 21:14:05.793946 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 21:14:05.793929737 +0000 UTC m=+13.749328571 I0417 21:14:06.471466 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 21:14:06.471445585 +0000 UTC m=+14.426844429 I0417 21:14:06.471749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:14:06.471840 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 21:14:06.471827568 +0000 UTC m=+14.427226402 E0417 21:14:06.487082 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 21:14:06.487203 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 21:14:06.487189333 +0000 UTC m=+14.442588177 E0417 21:14:06.487256 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 21:14:06.487448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:14:06.487557 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 21:14:06.487544935 +0000 UTC m=+14.442943769 E0417 21:14:06.499839 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 21:14:06.500317 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 21:14:06.500372 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 21:14:06.500421 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 21:14:06.504578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:14:06.529383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vtl4x" condition "Approved" to 2026-04-17 21:14:06.529366727 +0000 UTC m=+14.484765561 I0417 21:14:06.542990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vtl4x" condition "Ready" to 2026-04-17 21:14:06.542981573 +0000 UTC m=+14.498380387 I0417 21:14:06.567275 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:14:06.567246546 +0000 UTC m=+14.522645440 I0417 21:14:06.584695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:14:06.635093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:14:11.500609 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:14:11.500590456 +0000 UTC m=+19.455989290 I0417 21:14:34.409380 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 21:14:34.409366359 +0000 UTC m=+42.364765173 I0417 21:14:34.409798 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:14:34.410063 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 21:14:34.410044561 +0000 UTC m=+42.365443425 I0417 21:14:34.425161 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 21:14:34.42514025 +0000 UTC m=+42.380539064 I0417 21:14:34.428071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:14:34.428160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:14:34.428194 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 21:14:34.428187351 +0000 UTC m=+42.383586165 I0417 21:14:34.607379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dc22n" condition "Approved" to 2026-04-17 21:14:34.607362501 +0000 UTC m=+42.562761345 I0417 21:14:34.643923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-dc22n" condition "Ready" to 2026-04-17 21:14:34.643914719 +0000 UTC m=+42.599313513 I0417 21:14:34.672125 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:14:34.6721033 +0000 UTC m=+42.627502124 I0417 21:14:34.700320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:14:34.700735 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:14:34.700728216 +0000 UTC m=+42.656127030 I0417 21:14:34.710618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:14:34.719964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:48.057547 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:16:48.057631 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-17 21:16:48.05762217 +0000 UTC m=+176.013020984 I0417 21:16:48.057696 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 21:16:48.057494376 +0000 UTC m=+176.012893200 E0417 21:16:48.075730 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 21:16:48.075820 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-17 21:16:48.075808133 +0000 UTC m=+176.031206957 I0417 21:16:48.075844 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 21:16:48.076012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:48.076149 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 21:16:48.076132734 +0000 UTC m=+176.031531578 E0417 21:16:48.085822 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0417 21:16:48.085976 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 21:16:48.086015 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 21:16:48.086056 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0417 21:16:48.095166 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-17 21:16:48.095150283 +0000 UTC m=+176.050549097 I0417 21:16:48.095175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:16:48.095397 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 21:16:48.095389311 +0000 UTC m=+176.050788135 I0417 21:16:48.113688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:48.113754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:16:48.113771 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 21:16:48.11376313 +0000 UTC m=+176.069161954 I0417 21:16:48.240407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:48.268269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5rntm" condition "Approved" to 2026-04-17 21:16:48.268249512 +0000 UTC m=+176.223648346 I0417 21:16:48.294859 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5rntm" condition "Ready" to 2026-04-17 21:16:48.294845684 +0000 UTC m=+176.250244498 I0417 21:16:48.326698 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:16:48.326682005 +0000 UTC m=+176.282080849 I0417 21:16:48.343336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:48.351950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:48.352119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-48l7d" condition "Approved" to 2026-04-17 21:16:48.3521051 +0000 UTC m=+176.307503914 I0417 21:16:48.352823 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:16:48.352814323 +0000 UTC m=+176.308213137 I0417 21:16:48.368192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:48.369753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-48l7d" condition "Ready" to 2026-04-17 21:16:48.369746525 +0000 UTC m=+176.325145339 I0417 21:16:48.371880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:48.415392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:48.415880 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:16:48.415872224 +0000 UTC m=+176.371271028 I0417 21:16:53.087123 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:16:53.087109792 +0000 UTC m=+181.042508626 I0417 21:16:53.104422 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-48l7d" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:16:53.104407986 +0000 UTC m=+181.059806810 I0417 21:16:53.140114 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:16:53.14009621 +0000 UTC m=+181.095495044 I0417 21:16:53.159761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:53.160108 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:16:53.160100511 +0000 UTC m=+181.115499325 I0417 21:16:53.165164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:53.176220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:16:53.176486 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:16:53.176480056 +0000 UTC m=+181.131878870 I0417 21:16:53.177141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:19:29.809342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:19:29.809353 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready" to 2026-04-17 21:19:29.809318795 +0000 UTC m=+337.764717629 I0417 21:19:29.809378 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Issuing" to 2026-04-17 21:19:29.809372306 +0000 UTC m=+337.764771120 I0417 21:19:29.825331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:19:29.825428 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-77.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:19:29.825446 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Issuing" to 2026-04-17 21:19:29.825439048 +0000 UTC m=+337.780837852 I0417 21:19:30.030169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:19:30.036189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-hftng" condition "Approved" to 2026-04-17 21:19:30.036180233 +0000 UTC m=+337.991579047 I0417 21:19:30.052102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-77.nip.io-tls-hftng" condition "Ready" to 2026-04-17 21:19:30.052092279 +0000 UTC m=+338.007491093 I0417 21:19:30.075042 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-77.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:19:30.075031159 +0000 UTC m=+338.030429973 I0417 21:19:30.095311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-77.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-77.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:20:42.558696 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 21:20:42.558654113 +0000 UTC m=+410.514052927 I0417 21:20:42.559069 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:20:42.559089 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 21:20:42.559085257 +0000 UTC m=+410.514484061 E0417 21:20:42.570161 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 21:20:42.570202 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 21:20:42.570194247 +0000 UTC m=+410.525593081 E0417 21:20:42.570249 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 21:20:42.574176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:20:42.574265 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 21:20:42.574254548 +0000 UTC m=+410.529653392 E0417 21:20:42.577581 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 21:20:42.577994 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 21:20:42.578036 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 21:20:42.578102 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 21:20:42.586227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:20:42.606144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4gd79" condition "Approved" to 2026-04-17 21:20:42.606124821 +0000 UTC m=+410.561523655 I0417 21:20:42.617775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-4gd79" condition "Ready" to 2026-04-17 21:20:42.617762609 +0000 UTC m=+410.573161453 I0417 21:20:42.637133 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:20:42.637118326 +0000 UTC m=+410.592517170 I0417 21:20:42.651840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:20:42.652301 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:20:42.652292358 +0000 UTC m=+410.607691202 I0417 21:20:42.658683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:20:42.668647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:20:47.578022 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:20:47.578012698 +0000 UTC m=+415.533411502 I0417 21:21:25.269521 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 21:21:25.269506367 +0000 UTC m=+453.224905171 I0417 21:21:25.269733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:21:25.269753 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 21:21:25.269750834 +0000 UTC m=+453.225149628 I0417 21:21:25.284758 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 21:21:25.28473982 +0000 UTC m=+453.240138654 I0417 21:21:25.285069 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:21:25.285125 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 21:21:25.285118123 +0000 UTC m=+453.240516957 I0417 21:21:25.285415 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 21:21:25.285408112 +0000 UTC m=+453.240806956 I0417 21:21:25.285603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:21:25.285635 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 21:21:25.285628099 +0000 UTC m=+453.241026943 I0417 21:21:25.300221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:25.300564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:21:25.300595 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 21:21:25.300588224 +0000 UTC m=+453.255987018 I0417 21:21:25.316899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:25.316972 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:21:25.316994 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 21:21:25.316985306 +0000 UTC m=+453.272384120 I0417 21:21:25.317385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:25.317443 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 21:21:25.317438661 +0000 UTC m=+453.272837475 I0417 21:21:25.470778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:25.493858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:25.497445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pzq87" condition "Approved" to 2026-04-17 21:21:25.497434795 +0000 UTC m=+453.452833599 I0417 21:21:25.522283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mzr4r" condition "Approved" to 2026-04-17 21:21:25.52227019 +0000 UTC m=+453.477669014 I0417 21:21:25.527990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pzq87" condition "Ready" to 2026-04-17 21:21:25.527971095 +0000 UTC m=+453.483369929 I0417 21:21:25.541167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mzr4r" condition "Ready" to 2026-04-17 21:21:25.541156793 +0000 UTC m=+453.496555627 I0417 21:21:25.582477 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:21:25.582459531 +0000 UTC m=+453.537858345 I0417 21:21:25.587080 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:21:25.587062011 +0000 UTC m=+453.542460825 I0417 21:21:25.601464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8bwxb" condition "Approved" to 2026-04-17 21:21:25.601449657 +0000 UTC m=+453.556848461 I0417 21:21:25.602769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:25.602967 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:21:25.602960366 +0000 UTC m=+453.558359210 I0417 21:21:25.663203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:25.663705 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:21:25.663696695 +0000 UTC m=+453.619095509 I0417 21:21:25.958731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8bwxb" condition "Ready" to 2026-04-17 21:21:25.958721517 +0000 UTC m=+453.914120321 I0417 21:21:26.355716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0417 21:21:26.405021 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-gwv2f\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0417 21:21:26.506465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:26.708085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:26.814928 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:21:26.814916302 +0000 UTC m=+454.770315116 I0417 21:21:26.955762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:26.956154 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:21:26.95614702 +0000 UTC m=+454.911545834 I0417 21:21:27.160726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:39.867348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-59sl9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:21:39.867401 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-59sl9-tls" condition "Issuing" to 2026-04-17 21:21:39.867394356 +0000 UTC m=+467.822793170 I0417 21:21:39.867359 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-59sl9-tls" condition "Ready" to 2026-04-17 21:21:39.867342304 +0000 UTC m=+467.822741118 I0417 21:21:39.883349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-59sl9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-59sl9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:39.883451 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-59sl9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:21:39.883500 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-59sl9-tls" condition "Issuing" to 2026-04-17 21:21:39.883488506 +0000 UTC m=+467.838887320 I0417 21:21:40.462770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-59sl9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-59sl9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:40.630513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-59sl9-4f46b" condition "Approved" to 2026-04-17 21:21:40.630479498 +0000 UTC m=+468.585878332 I0417 21:21:40.663750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-59sl9-4f46b" condition "Ready" to 2026-04-17 21:21:40.663732614 +0000 UTC m=+468.619131428 I0417 21:21:40.716006 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-59sl9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:21:40.715988034 +0000 UTC m=+468.671386848 I0417 21:21:40.751442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-59sl9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-59sl9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:21:40.751907 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-59sl9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:21:40.751896976 +0000 UTC m=+468.707295790 I0417 21:21:40.790845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-59sl9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-59sl9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:22:31.246453 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:22:31.246492 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 21:22:31.24648481 +0000 UTC m=+519.201883614 I0417 21:22:31.246486 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 21:22:31.246473049 +0000 UTC m=+519.201871853 I0417 21:22:31.301263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:22:31.301330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:22:31.301344 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 21:22:31.301339804 +0000 UTC m=+519.256738608 I0417 21:22:31.776015 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-65bzz" condition "Approved" to 2026-04-17 21:22:31.776001938 +0000 UTC m=+519.731400752 I0417 21:22:31.797992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-65bzz" condition "Ready" to 2026-04-17 21:22:31.797974009 +0000 UTC m=+519.753372843 I0417 21:22:31.831126 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:22:31.831109231 +0000 UTC m=+519.786508045 I0417 21:22:31.854612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:25:29.765760 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 21:25:29.765735538 +0000 UTC m=+697.721134382 I0417 21:25:29.765926 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:25:29.765979 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 21:25:29.765967605 +0000 UTC m=+697.721366419 I0417 21:25:29.781949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:25:29.782044 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 21:25:29.782033015 +0000 UTC m=+697.737431829 I0417 21:25:30.232376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:25:30.264418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-95s5h" condition "Approved" to 2026-04-17 21:25:30.264392498 +0000 UTC m=+698.219791333 I0417 21:25:30.285086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-95s5h" condition "Ready" to 2026-04-17 21:25:30.285071278 +0000 UTC m=+698.240470092 I0417 21:25:30.314279 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:25:30.314263433 +0000 UTC m=+698.269662247 I0417 21:25:30.347660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:25:30.348036 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:25:30.348028386 +0000 UTC m=+698.303427200 I0417 21:25:30.365986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:25:30.366574 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:25:30.366560555 +0000 UTC m=+698.321959399 I0417 21:27:57.097166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:27:57.097250 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 21:27:57.097240259 +0000 UTC m=+845.052639093 I0417 21:27:57.097216 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-17 21:27:57.097168297 +0000 UTC m=+845.052567141 I0417 21:27:57.113798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:27:57.113859 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-17 21:27:57.113853326 +0000 UTC m=+845.069252140 I0417 21:27:57.573853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:27:57.610510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6sk6c" condition "Approved" to 2026-04-17 21:27:57.610487433 +0000 UTC m=+845.565886267 I0417 21:27:57.629876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-6sk6c" condition "Ready" to 2026-04-17 21:27:57.629865178 +0000 UTC m=+845.585264002 I0417 21:27:57.658960 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:27:57.658908605 +0000 UTC m=+845.614307429 I0417 21:27:57.684084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:27:57.684426 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:27:57.684418598 +0000 UTC m=+845.639817412 I0417 21:27:57.705419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:27:57.710507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:29:11.561165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:29:11.561197 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 21:29:11.561189866 +0000 UTC m=+919.516588680 I0417 21:29:11.561234 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-17 21:29:11.561227667 +0000 UTC m=+919.516626461 I0417 21:29:11.576594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:29:11.576710 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-17 21:29:11.576695897 +0000 UTC m=+919.532094711 I0417 21:29:11.975452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:29:12.015145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fpzkr" condition "Approved" to 2026-04-17 21:29:12.015134216 +0000 UTC m=+919.970533030 I0417 21:29:12.046923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fpzkr" condition "Ready" to 2026-04-17 21:29:12.046907001 +0000 UTC m=+920.002305815 I0417 21:29:12.081246 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:29:12.081232999 +0000 UTC m=+920.036631813 I0417 21:29:12.110898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:29:12.166692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:32:23.766536 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-17 21:32:23.766494538 +0000 UTC m=+1111.721893372 I0417 21:32:23.767343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:32:23.767450 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 21:32:23.767436177 +0000 UTC m=+1111.722835031 I0417 21:32:23.782876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:32:23.783066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 21:32:23.783121 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 21:32:23.783112716 +0000 UTC m=+1111.738511530 I0417 21:32:23.896959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-74trl" condition "Approved" to 2026-04-17 21:32:23.896945579 +0000 UTC m=+1111.852344393 I0417 21:32:23.915204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-74trl" condition "Ready" to 2026-04-17 21:32:23.91518675 +0000 UTC m=+1111.870585544 I0417 21:32:23.950957 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:32:23.950947498 +0000 UTC m=+1111.906346302 I0417 21:32:23.973709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 21:32:23.974045 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 21:32:23.974039713 +0000 UTC m=+1111.929438517 I0417 21:32:23.999040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"