I0324 14:54:15.038998 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0324 14:54:15.039329 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0324 14:54:15.039478 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0324 14:54:15.044540 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0324 14:54:15.044968 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0324 14:54:15.045063 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0324 14:54:15.045086 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0324 14:54:15.048028 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0324 14:54:15.065579 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0324 14:54:15.069639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0324 14:54:15.076489 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0324 14:54:15.079493 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0324 14:54:15.079593 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0324 14:54:15.082172 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0324 14:54:15.084651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0324 14:54:15.087135 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0324 14:54:15.087206 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0324 14:54:15.089859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0324 14:54:15.094562 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0324 14:54:15.097779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0324 14:54:15.100430 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0324 14:54:15.102988 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0324 14:54:15.103072 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0324 14:54:15.105783 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0324 14:54:15.108442 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0324 14:54:15.108467 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0324 14:54:15.108563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0324 14:54:15.111144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0324 14:54:15.113690 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0324 14:54:15.116364 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0324 14:54:15.120128 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0324 14:54:15.125027 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0324 14:54:15.125081 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0324 14:54:15.127678 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:15.128209 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:15.129449 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:15.142331 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:15.161721 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:15.161858 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:15.177280 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:15.199126 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:15.220014 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:15.238329 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0324 14:54:28.891161 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-24 14:54:28.89112974 +0000 UTC m=+13.886378216 I0324 14:54:29.588601 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:54:29.588661 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-24 14:54:29.588649871 +0000 UTC m=+14.583898367 I0324 14:54:29.588684 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-24 14:54:29.588659851 +0000 UTC m=+14.583908357 E0324 14:54:29.609077 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0324 14:54:29.609167 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-24 14:54:29.609155691 +0000 UTC m=+14.604404137 E0324 14:54:29.609274 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0324 14:54:29.612175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:54:29.612281 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-24 14:54:29.612271304 +0000 UTC m=+14.607519770 E0324 14:54:29.623582 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0324 14:54:29.623701 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 14:54:29.623749 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 14:54:29.623784 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0324 14:54:29.626727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:54:29.653527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-89k57" condition "Approved" to 2026-03-24 14:54:29.65350699 +0000 UTC m=+14.648755446 I0324 14:54:29.664992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-89k57" condition "Ready" to 2026-03-24 14:54:29.664981749 +0000 UTC m=+14.660230215 I0324 14:54:29.693047 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:54:29.693027466 +0000 UTC m=+14.688275942 I0324 14:54:29.711077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:54:29.711562 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:54:29.711548989 +0000 UTC m=+14.706797475 I0324 14:54:29.730673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:54:29.734800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:54:29.735193 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:54:29.735180104 +0000 UTC m=+14.730428600 I0324 14:54:29.736953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:54:34.624653 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:54:34.624638611 +0000 UTC m=+19.619887077 I0324 14:54:54.236585 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-24 14:54:54.23656984 +0000 UTC m=+39.231818326 I0324 14:54:54.236800 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:54:54.237009 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-24 14:54:54.23699162 +0000 UTC m=+39.232240106 I0324 14:54:54.250055 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-24 14:54:54.250039256 +0000 UTC m=+39.245287722 I0324 14:54:54.256376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:54:54.258315 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:54:54.258387 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-24 14:54:54.258373291 +0000 UTC m=+39.253621767 I0324 14:54:54.703883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-d5jp2" condition "Approved" to 2026-03-24 14:54:54.703864308 +0000 UTC m=+39.699112774 I0324 14:54:54.744766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-d5jp2" condition "Ready" to 2026-03-24 14:54:54.744749475 +0000 UTC m=+39.739997961 I0324 14:54:54.779841 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:54:54.779827557 +0000 UTC m=+39.775076023 I0324 14:54:54.797133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:54:54.797892 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:54:54.79788012 +0000 UTC m=+39.793128606 I0324 14:54:54.806621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:54:54.820046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:54:54.820386 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:54:54.820376067 +0000 UTC m=+39.815624533 I0324 14:54:54.820583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:56:36.350591 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:56:36.350636 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-24 14:56:36.350625237 +0000 UTC m=+141.345873733 I0324 14:56:36.351014 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-24 14:56:36.350993437 +0000 UTC m=+141.346241923 E0324 14:56:36.366856 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0324 14:56:36.366921 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-24 14:56:36.366910826 +0000 UTC m=+141.362159312 I0324 14:56:36.366982 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0324 14:56:36.368336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:56:36.368398 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-24 14:56:36.36839246 +0000 UTC m=+141.363640936 E0324 14:56:36.376282 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0324 14:56:36.376366 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0324 14:56:36.376393 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0324 14:56:36.376436 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0324 14:56:36.380772 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-24 14:56:36.380748736 +0000 UTC m=+141.375997202 I0324 14:56:36.380831 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:56:36.380868 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-24 14:56:36.380857939 +0000 UTC m=+141.376106405 I0324 14:56:36.397931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:56:36.398013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:56:36.398040 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-24 14:56:36.398032297 +0000 UTC m=+141.393280763 I0324 14:56:36.557490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:56:36.585986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-fq76t" condition "Approved" to 2026-03-24 14:56:36.585970086 +0000 UTC m=+141.581218562 I0324 14:56:36.614251 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-fq76t" condition "Ready" to 2026-03-24 14:56:36.614238613 +0000 UTC m=+141.609487069 I0324 14:56:36.635961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-ffcxv" condition "Approved" to 2026-03-24 14:56:36.635942836 +0000 UTC m=+141.631191282 I0324 14:56:36.647505 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:56:36.647490083 +0000 UTC m=+141.642738549 I0324 14:56:36.656081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-ffcxv" condition "Ready" to 2026-03-24 14:56:36.656063872 +0000 UTC m=+141.651312368 I0324 14:56:36.689889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:56:41.377271 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:56:41.377256989 +0000 UTC m=+146.372505485 I0324 14:56:41.394262 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-ffcxv" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:56:41.394244953 +0000 UTC m=+146.389493419 I0324 14:56:41.424306 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:56:41.424291741 +0000 UTC m=+146.419540217 I0324 14:56:41.440286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:56:41.440778 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:56:41.440767522 +0000 UTC m=+146.436016018 I0324 14:56:41.456095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:56:41.463868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:59:14.697373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-233.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 14:59:14.697414 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Issuing" to 2026-03-24 14:59:14.697406966 +0000 UTC m=+299.692655452 I0324 14:59:14.697374 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Ready" to 2026-03-24 14:59:14.697361995 +0000 UTC m=+299.692610461 I0324 14:59:14.715741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:59:14.715838 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Ready" to 2026-03-24 14:59:14.715825608 +0000 UTC m=+299.711074104 I0324 14:59:14.882079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:59:14.912120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-233.nip.io-tls-wvmtb" condition "Approved" to 2026-03-24 14:59:14.912096962 +0000 UTC m=+299.907345448 I0324 14:59:14.938334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-233.nip.io-tls-wvmtb" condition "Ready" to 2026-03-24 14:59:14.938313036 +0000 UTC m=+299.933561522 I0324 14:59:14.970366 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:59:14.970345618 +0000 UTC m=+299.965594104 I0324 14:59:14.998202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:59:14.998600 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:59:14.99858083 +0000 UTC m=+299.993829326 I0324 14:59:15.015695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-233.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-233.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 14:59:15.016014 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-233.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 14:59:15.016006399 +0000 UTC m=+300.011254885 I0324 15:00:27.176061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:00:27.176136 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-24 15:00:27.176122574 +0000 UTC m=+372.171371060 I0324 15:00:27.176063 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-24 15:00:27.176037572 +0000 UTC m=+372.171286068 E0324 15:00:27.189188 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0324 15:00:27.189254 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-24 15:00:27.189240869 +0000 UTC m=+372.184489355 E0324 15:00:27.189347 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0324 15:00:27.192295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:00:27.192373 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-24 15:00:27.192363609 +0000 UTC m=+372.187612075 E0324 15:00:27.203656 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0324 15:00:27.203745 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 15:00:27.203767 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0324 15:00:27.203918 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0324 15:00:27.208073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:00:27.228161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9hmlc" condition "Approved" to 2026-03-24 15:00:27.228148255 +0000 UTC m=+372.223396721 I0324 15:00:27.240388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-9hmlc" condition "Ready" to 2026-03-24 15:00:27.240372009 +0000 UTC m=+372.235620475 I0324 15:00:27.259706 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:00:27.259681722 +0000 UTC m=+372.254930188 I0324 15:00:27.279439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:00:27.279878 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:00:27.27986595 +0000 UTC m=+372.275114416 I0324 15:00:27.286696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:00:27.294562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:00:27.294887 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:00:27.294873394 +0000 UTC m=+372.290121890 I0324 15:00:27.298416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:00:32.204633 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:00:32.204616893 +0000 UTC m=+377.199865379 I0324 15:01:12.217502 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-24 15:01:12.217478178 +0000 UTC m=+417.212726644 I0324 15:01:12.219236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:12.219295 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-24 15:01:12.219284144 +0000 UTC m=+417.214532620 I0324 15:01:12.219759 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:12.219783 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-24 15:01:12.219780017 +0000 UTC m=+417.215028483 I0324 15:01:12.220079 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-24 15:01:12.220072934 +0000 UTC m=+417.215321400 I0324 15:01:12.226188 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-24 15:01:12.22617929 +0000 UTC m=+417.221427756 I0324 15:01:12.226394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:12.226619 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-24 15:01:12.226433006 +0000 UTC m=+417.221681492 I0324 15:01:12.251465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:12.251536 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:12.251559 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-24 15:01:12.25155321 +0000 UTC m=+417.246801666 I0324 15:01:12.251653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:12.251705 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:12.251727 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-24 15:01:12.251721124 +0000 UTC m=+417.246969580 I0324 15:01:12.251801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:12.251903 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-24 15:01:12.251893158 +0000 UTC m=+417.247141624 I0324 15:01:12.503043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:12.503356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:12.512534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-frl4z" condition "Approved" to 2026-03-24 15:01:12.51252589 +0000 UTC m=+417.507774346 I0324 15:01:12.521593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-g8j2g" condition "Approved" to 2026-03-24 15:01:12.521569802 +0000 UTC m=+417.516818268 I0324 15:01:12.534313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-frl4z" condition "Ready" to 2026-03-24 15:01:12.534295258 +0000 UTC m=+417.529543744 I0324 15:01:12.545482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-g8j2g" condition "Ready" to 2026-03-24 15:01:12.545466174 +0000 UTC m=+417.540714650 I0324 15:01:12.570785 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:12.570770372 +0000 UTC m=+417.566018838 I0324 15:01:12.577548 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:12.577535344 +0000 UTC m=+417.572783810 I0324 15:01:12.588824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:12.601592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:12.601952 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:12.60194344 +0000 UTC m=+417.597191906 I0324 15:01:12.653045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:12.852806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:12.853401 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:12.853385157 +0000 UTC m=+417.848633653 I0324 15:01:13.112369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qvvtn" condition "Approved" to 2026-03-24 15:01:13.112346336 +0000 UTC m=+418.107594802 I0324 15:01:13.265981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qvvtn" condition "Ready" to 2026-03-24 15:01:13.265960409 +0000 UTC m=+418.261208885 I0324 15:01:13.707075 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:13.707052511 +0000 UTC m=+418.702300997 I0324 15:01:13.807101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:13.807437 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:13.80742875 +0000 UTC m=+418.802677216 I0324 15:01:14.055796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:14.106341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:43.418256 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:01:43.418303 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls" condition "Issuing" to 2026-03-24 15:01:43.418289554 +0000 UTC m=+448.413538050 I0324 15:01:43.418384 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls" condition "Ready" to 2026-03-24 15:01:43.418359726 +0000 UTC m=+448.413608192 I0324 15:01:43.470968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:43.471113 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls" condition "Ready" to 2026-03-24 15:01:43.471101544 +0000 UTC m=+448.466350040 I0324 15:01:43.608629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:43.680947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-v6hxk-mrlwq" condition "Approved" to 2026-03-24 15:01:43.680931981 +0000 UTC m=+448.676180447 I0324 15:01:43.713002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-v6hxk-mrlwq" condition "Ready" to 2026-03-24 15:01:43.712988461 +0000 UTC m=+448.708236927 I0324 15:01:43.837299 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:43.837281803 +0000 UTC m=+448.832530269 I0324 15:01:43.870530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:43.871094 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:01:43.871079833 +0000 UTC m=+448.866328299 I0324 15:01:43.886379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:01:43.912883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-v6hxk-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:19.153689 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:02:19.153737 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-24 15:02:19.153727258 +0000 UTC m=+484.148975724 I0324 15:02:19.153850 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-24 15:02:19.15381826 +0000 UTC m=+484.149066726 I0324 15:02:19.170644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:19.170749 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-24 15:02:19.170738391 +0000 UTC m=+484.165986857 I0324 15:02:19.306180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:02:19.337773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vqf7c" condition "Approved" to 2026-03-24 15:02:19.337748005 +0000 UTC m=+484.332996521 I0324 15:02:19.360489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vqf7c" condition "Ready" to 2026-03-24 15:02:19.360475063 +0000 UTC m=+484.355723529 I0324 15:02:19.392016 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:02:19.391991839 +0000 UTC m=+484.387240305 I0324 15:02:19.412530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:05:25.972904 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-24 15:05:25.972884222 +0000 UTC m=+670.968132708 I0324 15:05:25.972918 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:05:25.973023 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-24 15:05:25.973012156 +0000 UTC m=+670.968260652 I0324 15:05:25.996347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:05:25.996716 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:05:25.996759 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-24 15:05:25.996748623 +0000 UTC m=+670.991997109 I0324 15:05:26.307991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:05:26.321008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sllhp" condition "Approved" to 2026-03-24 15:05:26.32099036 +0000 UTC m=+671.316238816 I0324 15:05:26.349217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sllhp" condition "Ready" to 2026-03-24 15:05:26.349205126 +0000 UTC m=+671.344453572 I0324 15:05:26.376452 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:05:26.376437198 +0000 UTC m=+671.371685674 I0324 15:05:26.405263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:05:26.405665 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:05:26.405656569 +0000 UTC m=+671.400905025 I0324 15:05:26.428683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:05:26.428883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:05:26.429034 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:05:26.429017047 +0000 UTC m=+671.424265513 I0324 15:07:56.344663 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:07:56.344744 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-24 15:07:56.344735447 +0000 UTC m=+821.339983913 I0324 15:07:56.344784 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-24 15:07:56.344763478 +0000 UTC m=+821.340011934 I0324 15:07:56.362791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:07:56.363021 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:07:56.363060 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-24 15:07:56.363049335 +0000 UTC m=+821.358297831 I0324 15:07:56.525205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-ql6xv" condition "Approved" to 2026-03-24 15:07:56.525188393 +0000 UTC m=+821.520436849 I0324 15:07:56.545122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-ql6xv" condition "Ready" to 2026-03-24 15:07:56.545110648 +0000 UTC m=+821.540359104 I0324 15:07:56.573729 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:07:56.57370532 +0000 UTC m=+821.568953776 I0324 15:07:56.604167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:07:56.604476 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:07:56.604468864 +0000 UTC m=+821.599717320 I0324 15:07:56.622513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:07:56.622704 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:07:56.622698848 +0000 UTC m=+821.617947304 I0324 15:08:59.823549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:08:59.823676 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-24 15:08:59.823660994 +0000 UTC m=+884.818909490 I0324 15:08:59.823707 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-24 15:08:59.823691364 +0000 UTC m=+884.818939840 I0324 15:08:59.840982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:08:59.841068 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-24 15:08:59.841058367 +0000 UTC m=+884.836306833 I0324 15:08:59.959410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:08:59.996880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bxdt5" condition "Approved" to 2026-03-24 15:08:59.996859079 +0000 UTC m=+884.992107545 I0324 15:09:00.035559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bxdt5" condition "Ready" to 2026-03-24 15:09:00.035547698 +0000 UTC m=+885.030796154 I0324 15:09:00.059437 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:09:00.059421664 +0000 UTC m=+885.054670120 I0324 15:09:00.081393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:07.069667 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-24 15:12:07.069646767 +0000 UTC m=+1072.064895283 I0324 15:12:07.069799 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0324 15:12:07.069874 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-24 15:12:07.069867072 +0000 UTC m=+1072.065115568 I0324 15:12:07.087149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:07.087224 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-24 15:12:07.087217735 +0000 UTC m=+1072.082466211 I0324 15:12:07.165891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:07.200803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-64wnv" condition "Approved" to 2026-03-24 15:12:07.200764637 +0000 UTC m=+1072.196013123 I0324 15:12:07.220772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-64wnv" condition "Ready" to 2026-03-24 15:12:07.220760343 +0000 UTC m=+1072.216008809 I0324 15:12:07.253587 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:12:07.253566452 +0000 UTC m=+1072.248814918 I0324 15:12:07.276641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:07.277064 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:12:07.277034211 +0000 UTC m=+1072.272282677 I0324 15:12:07.294171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0324 15:12:07.294607 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-24 15:12:07.294592689 +0000 UTC m=+1072.289841185 I0324 15:12:07.298520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"