I0414 14:01:00.141615 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0414 14:01:00.141734 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0414 14:01:00.142020 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0414 14:01:00.148659 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0414 14:01:00.149192 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0414 14:01:00.149375 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0414 14:01:00.149424 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0414 14:01:00.153234 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0414 14:01:00.169015 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0414 14:01:00.173638 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0414 14:01:00.176707 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0414 14:01:00.181570 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0414 14:01:00.181606 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0414 14:01:00.181644 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0414 14:01:00.184610 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0414 14:01:00.188185 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0414 14:01:00.190639 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0414 14:01:00.193319 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0414 14:01:00.193462 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0414 14:01:00.196179 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0414 14:01:00.198805 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0414 14:01:00.202685 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0414 14:01:00.205356 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0414 14:01:00.207629 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0414 14:01:00.207665 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0414 14:01:00.207675 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0414 14:01:00.207722 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0414 14:01:00.210343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0414 14:01:00.212790 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0414 14:01:00.215024 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0414 14:01:00.217351 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0414 14:01:00.219894 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0414 14:01:00.224952 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0414 14:01:00.227585 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 14:01:00.228350 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 14:01:00.229167 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 14:01:00.229261 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 14:01:00.248103 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 14:01:00.268551 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 14:01:00.283884 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 14:01:00.300544 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 14:01:00.324299 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 14:01:00.326631 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0414 14:01:11.528188 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-14 14:01:11.528166988 +0000 UTC m=+11.418086188 I0414 14:01:12.255298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:01:12.255434 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-14 14:01:12.255400888 +0000 UTC m=+12.145320098 I0414 14:01:12.255862 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-14 14:01:12.255826178 +0000 UTC m=+12.145745378 E0414 14:01:12.273205 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 14:01:12.273303 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-14 14:01:12.273294771 +0000 UTC m=+12.163213951 E0414 14:01:12.273332 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 14:01:12.275247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:12.275393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:01:12.275480 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-14 14:01:12.275466272 +0000 UTC m=+12.165385482 E0414 14:01:12.282152 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0414 14:01:12.282491 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 14:01:12.282522 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 14:01:12.282589 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0414 14:01:12.319542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6s642" condition "Approved" to 2026-04-14 14:01:12.319515966 +0000 UTC m=+12.209435176 I0414 14:01:12.334267 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6s642" condition "Ready" to 2026-04-14 14:01:12.334242401 +0000 UTC m=+12.224161601 I0414 14:01:12.360665 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:01:12.360648859 +0000 UTC m=+12.250568069 I0414 14:01:12.377988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:12.378456 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:01:12.378447048 +0000 UTC m=+12.268366248 I0414 14:01:12.383490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:12.396128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:17.282943 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:01:17.282931871 +0000 UTC m=+17.172851041 I0414 14:01:38.731211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:01:38.731271 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 14:01:38.731256447 +0000 UTC m=+38.621175647 I0414 14:01:38.731273 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-14 14:01:38.731262697 +0000 UTC m=+38.621181877 I0414 14:01:38.742041 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-14 14:01:38.742024278 +0000 UTC m=+38.631943468 I0414 14:01:38.755718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:38.755899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:01:38.755953 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-14 14:01:38.755944503 +0000 UTC m=+38.645863683 I0414 14:01:39.019863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:39.030590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6pnmq" condition "Approved" to 2026-04-14 14:01:39.030564021 +0000 UTC m=+38.920483231 I0414 14:01:39.067125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6pnmq" condition "Ready" to 2026-04-14 14:01:39.067103523 +0000 UTC m=+38.957022703 I0414 14:01:39.106704 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:01:39.106636586 +0000 UTC m=+38.996555786 I0414 14:01:39.125645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:01:39.126141 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:01:39.126133257 +0000 UTC m=+39.016052427 I0414 14:01:39.149333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:03:24.422378 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-14 14:03:24.422327912 +0000 UTC m=+144.312247102 I0414 14:03:24.422845 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:03:24.422870 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-14 14:03:24.422864864 +0000 UTC m=+144.312784054 E0414 14:03:24.436933 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 14:03:24.437015 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-14 14:03:24.437005503 +0000 UTC m=+144.326924683 I0414 14:03:24.437073 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 14:03:24.442189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:03:24.442308 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-14 14:03:24.442297742 +0000 UTC m=+144.332216932 E0414 14:03:24.451390 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0414 14:03:24.451479 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0414 14:03:24.451514 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0414 14:03:24.451553 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0414 14:03:24.451593 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:03:24.451622 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-14 14:03:24.451616102 +0000 UTC m=+144.341535292 I0414 14:03:24.451542 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-14 14:03:24.45152642 +0000 UTC m=+144.341445600 I0414 14:03:24.466188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:03:24.466487 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-14 14:03:24.466478038 +0000 UTC m=+144.356397208 I0414 14:03:24.597224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:03:24.651020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-925cd" condition "Approved" to 2026-04-14 14:03:24.650994443 +0000 UTC m=+144.540913623 I0414 14:03:24.685168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-925cd" condition "Ready" to 2026-04-14 14:03:24.685149194 +0000 UTC m=+144.575068404 I0414 14:03:24.966968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:03:25.003474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-p2wsr" condition "Approved" to 2026-04-14 14:03:25.003451299 +0000 UTC m=+144.893370509 I0414 14:03:25.038029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-p2wsr" condition "Ready" to 2026-04-14 14:03:25.038014829 +0000 UTC m=+144.927933999 I0414 14:03:25.066236 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:03:25.066223466 +0000 UTC m=+144.956142646 I0414 14:03:25.086819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:03:25.087164 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:03:25.087157228 +0000 UTC m=+144.977076408 I0414 14:03:25.109893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:03:25.110397 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:03:25.110386852 +0000 UTC m=+145.000306032 I0414 14:03:29.452575 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:03:29.452560738 +0000 UTC m=+149.342479948 I0414 14:03:29.472004 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-925cd" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:03:29.471989697 +0000 UTC m=+149.361908897 I0414 14:03:29.502312 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:03:29.502298881 +0000 UTC m=+149.392218061 I0414 14:03:29.525974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:03:29.526205 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:03:29.526200161 +0000 UTC m=+149.416119331 I0414 14:03:29.537956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:03:29.542209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:03:29.545502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:03:29.545778 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:03:29.545772043 +0000 UTC m=+149.435691223 I0414 14:06:02.271622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-194.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:06:02.271696 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-194.nip.io-tls" condition "Issuing" to 2026-04-14 14:06:02.271656586 +0000 UTC m=+302.161575786 I0414 14:06:02.272292 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-194.nip.io-tls" condition "Ready" to 2026-04-14 14:06:02.272263401 +0000 UTC m=+302.162182611 I0414 14:06:02.291671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-194.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-194.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:06:02.291761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-194.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:06:02.291786 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-194.nip.io-tls" condition "Issuing" to 2026-04-14 14:06:02.291775316 +0000 UTC m=+302.181694516 I0414 14:06:02.566212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-194.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-194.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:06:02.573738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-194.nip.io-tls-p25cz" condition "Approved" to 2026-04-14 14:06:02.573724937 +0000 UTC m=+302.463644147 I0414 14:06:02.593881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-194.nip.io-tls-p25cz" condition "Ready" to 2026-04-14 14:06:02.593868408 +0000 UTC m=+302.483787578 I0414 14:06:02.621683 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-194.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:06:02.621668759 +0000 UTC m=+302.511587949 I0414 14:06:02.646951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-194.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-194.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:06:02.647199 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-194.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:06:02.647192423 +0000 UTC m=+302.537111603 I0414 14:06:02.650717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-194.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-194.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:06:02.665049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-194.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-194.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:06:02.665432 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-194.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:06:02.665421176 +0000 UTC m=+302.555340356 I0414 14:06:02.665596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-194.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-194.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:14.034263 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-14 14:07:14.03421398 +0000 UTC m=+373.924133160 I0414 14:07:14.034310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:07:14.034698 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-14 14:07:14.03467451 +0000 UTC m=+373.924593720 E0414 14:07:14.046509 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 14:07:14.046555 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-14 14:07:14.046548469 +0000 UTC m=+373.936467649 E0414 14:07:14.046615 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0414 14:07:14.049036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:14.049143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:07:14.049170 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-14 14:07:14.049162838 +0000 UTC m=+373.939082008 E0414 14:07:14.055536 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0414 14:07:14.055632 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 14:07:14.055671 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0414 14:07:14.055749 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0414 14:07:14.087193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gnw4q" condition "Approved" to 2026-04-14 14:07:14.087169727 +0000 UTC m=+373.977088957 I0414 14:07:14.099376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gnw4q" condition "Ready" to 2026-04-14 14:07:14.099364324 +0000 UTC m=+373.989283504 I0414 14:07:14.117750 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:07:14.117706099 +0000 UTC m=+374.007625309 I0414 14:07:14.137971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:19.056609 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:07:19.05659821 +0000 UTC m=+378.946517400 I0414 14:07:58.686271 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-14 14:07:58.686246856 +0000 UTC m=+418.576166026 I0414 14:07:58.686880 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:07:58.688843 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-14 14:07:58.686936482 +0000 UTC m=+418.576855682 I0414 14:07:58.692617 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 14:07:58.692606614 +0000 UTC m=+418.582525794 I0414 14:07:58.692660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:07:58.692699 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-14 14:07:58.692694387 +0000 UTC m=+418.582613557 I0414 14:07:58.699527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:07:58.699575 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 14:07:58.699563898 +0000 UTC m=+418.589483078 I0414 14:07:58.700034 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-14 14:07:58.700027489 +0000 UTC m=+418.589946679 I0414 14:07:58.734476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:58.734564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:07:58.734589 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-14 14:07:58.734581317 +0000 UTC m=+418.624500497 I0414 14:07:58.738721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:58.738796 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-14 14:07:58.738787107 +0000 UTC m=+418.628706307 I0414 14:07:58.746546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:58.746679 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:07:58.746715 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-14 14:07:58.746706811 +0000 UTC m=+418.636625991 I0414 14:07:58.979696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:58.979816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2pbpx" condition "Approved" to 2026-04-14 14:07:58.979800601 +0000 UTC m=+418.869719801 I0414 14:07:58.980084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:59.004543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2pbpx" condition "Ready" to 2026-04-14 14:07:59.00452269 +0000 UTC m=+418.894441880 I0414 14:07:59.022314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ltqtz" condition "Approved" to 2026-04-14 14:07:59.022301326 +0000 UTC m=+418.912220496 I0414 14:07:59.042045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ltqtz" condition "Ready" to 2026-04-14 14:07:59.042034648 +0000 UTC m=+418.931953808 I0414 14:07:59.050829 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:07:59.050781973 +0000 UTC m=+418.940701153 I0414 14:07:59.079423 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:07:59.079407633 +0000 UTC m=+418.969326823 I0414 14:07:59.080866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:59.098200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:59.098594 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:07:59.098586372 +0000 UTC m=+418.988505562 I0414 14:07:59.189715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:59.430968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:59.680116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:07:59.736600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xpbrb" condition "Approved" to 2026-04-14 14:07:59.736587043 +0000 UTC m=+419.626506213 I0414 14:07:59.896387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xpbrb" condition "Ready" to 2026-04-14 14:07:59.896371005 +0000 UTC m=+419.786290185 I0414 14:08:00.284265 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:08:00.284241308 +0000 UTC m=+420.174160518 I0414 14:08:00.385260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:08:00.385773 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:08:00.385760916 +0000 UTC m=+420.275680096 I0414 14:08:00.588402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:08:06.820999 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:08:06.821043 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" condition "Issuing" to 2026-04-14 14:08:06.821033211 +0000 UTC m=+426.710952411 I0414 14:08:06.821851 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" condition "Ready" to 2026-04-14 14:08:06.821842369 +0000 UTC m=+426.711761569 I0414 14:08:06.839449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:08:06.839523 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:08:06.839555 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" condition "Issuing" to 2026-04-14 14:08:06.839536513 +0000 UTC m=+426.729455703 I0414 14:08:07.080618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:08:07.094622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bnbd8-q64fb" condition "Approved" to 2026-04-14 14:08:07.094608767 +0000 UTC m=+426.984527947 I0414 14:08:07.113534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bnbd8-q64fb" condition "Ready" to 2026-04-14 14:08:07.11352207 +0000 UTC m=+427.003441260 I0414 14:08:07.141973 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:08:07.141958066 +0000 UTC m=+427.031877256 I0414 14:08:07.163980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:08:07.164430 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:08:07.164420422 +0000 UTC m=+427.054339612 I0414 14:08:07.169586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:08:07.179698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:08:07.180014 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bnbd8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:08:07.180005617 +0000 UTC m=+427.069924797 I0414 14:08:32.544264 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:08:32.544310 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-14 14:08:32.544298882 +0000 UTC m=+452.434218062 I0414 14:08:32.544352 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 14:08:32.544330622 +0000 UTC m=+452.434249802 I0414 14:08:32.612433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:08:32.612600 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-14 14:08:32.612580911 +0000 UTC m=+452.502500121 I0414 14:08:32.822099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:08:32.859080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vzl7g" condition "Approved" to 2026-04-14 14:08:32.859060543 +0000 UTC m=+452.748979743 I0414 14:08:32.880486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vzl7g" condition "Ready" to 2026-04-14 14:08:32.880469384 +0000 UTC m=+452.770388564 I0414 14:08:32.909199 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:08:32.909139635 +0000 UTC m=+452.799058815 I0414 14:08:32.932765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:08:32.933330 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:08:32.933321722 +0000 UTC m=+452.823240902 I0414 14:08:32.942581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:08:32.955346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:11:58.973392 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:11:58.973572 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-14 14:11:58.97353258 +0000 UTC m=+658.863451770 I0414 14:11:58.973650 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-14 14:11:58.973635862 +0000 UTC m=+658.863555122 I0414 14:11:58.993324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:11:58.993445 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-14 14:11:58.993437659 +0000 UTC m=+658.883356839 I0414 14:11:59.219527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:11:59.253889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-p5w4k" condition "Approved" to 2026-04-14 14:11:59.25387458 +0000 UTC m=+659.143793760 I0414 14:11:59.278929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-p5w4k" condition "Ready" to 2026-04-14 14:11:59.278913307 +0000 UTC m=+659.168832487 I0414 14:11:59.303059 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:11:59.303034892 +0000 UTC m=+659.192954102 I0414 14:11:59.325797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:11:59.326101 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:11:59.326094624 +0000 UTC m=+659.216013794 I0414 14:11:59.335245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:11:59.352648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:14:31.331580 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:14:31.331712 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-14 14:14:31.331696262 +0000 UTC m=+811.221615492 I0414 14:14:31.331691 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-14 14:14:31.331636361 +0000 UTC m=+811.221555561 I0414 14:14:31.352853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:14:31.352921 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-14 14:14:31.352913818 +0000 UTC m=+811.242832998 I0414 14:14:31.453601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:14:31.489908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-tpkr4" condition "Approved" to 2026-04-14 14:14:31.489886785 +0000 UTC m=+811.379806025 I0414 14:14:31.515385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-tpkr4" condition "Ready" to 2026-04-14 14:14:31.515364219 +0000 UTC m=+811.405283399 I0414 14:14:31.544737 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:14:31.544719531 +0000 UTC m=+811.434638711 I0414 14:14:31.570156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:14:31.570615 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:14:31.570605454 +0000 UTC m=+811.460524664 I0414 14:14:31.582901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:14:31.604080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:15:40.488190 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-14 14:15:40.488174987 +0000 UTC m=+880.378094177 I0414 14:15:40.488731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:15:40.488785 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-14 14:15:40.488778602 +0000 UTC m=+880.378697802 I0414 14:15:40.512452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:15:40.512516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:15:40.512531 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-14 14:15:40.512525125 +0000 UTC m=+880.402444305 I0414 14:15:40.648477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:15:40.653140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fxrxz" condition "Approved" to 2026-04-14 14:15:40.653123404 +0000 UTC m=+880.543042594 I0414 14:15:40.687931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fxrxz" condition "Ready" to 2026-04-14 14:15:40.687919227 +0000 UTC m=+880.577838407 I0414 14:15:40.721841 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:15:40.721822007 +0000 UTC m=+880.611741197 I0414 14:15:40.747017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:15:40.747375 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:15:40.747369703 +0000 UTC m=+880.637288863 I0414 14:15:40.762042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:15:40.762369 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:15:40.762362463 +0000 UTC m=+880.652281633 I0414 14:18:52.828443 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-14 14:18:52.82840956 +0000 UTC m=+1072.718328740 I0414 14:18:52.828617 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0414 14:18:52.828715 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-14 14:18:52.828704157 +0000 UTC m=+1072.718623367 I0414 14:18:52.848534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:18:52.848780 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-14 14:18:52.848760122 +0000 UTC m=+1072.738679422 I0414 14:18:53.060519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0414 14:18:53.088081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zgpnd" condition "Approved" to 2026-04-14 14:18:53.088064884 +0000 UTC m=+1072.977984054 I0414 14:18:53.117921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zgpnd" condition "Ready" to 2026-04-14 14:18:53.117908412 +0000 UTC m=+1073.007827592 I0414 14:18:53.160859 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-14 14:18:53.160849359 +0000 UTC m=+1073.050768529 I0414 14:18:53.184912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"