I0326 01:58:36.199331 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0326 01:58:36.199498 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0326 01:58:36.199628 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0326 01:58:36.204318 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0326 01:58:36.204726 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0326 01:58:36.204913 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0326 01:58:36.205059 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0326 01:58:36.207142 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0326 01:58:36.221496 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0326 01:58:36.226717 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0326 01:58:36.233596 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0326 01:58:36.236293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0326 01:58:36.238741 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0326 01:58:36.238858 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0326 01:58:36.241030 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0326 01:58:36.242780 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0326 01:58:36.244687 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0326 01:58:36.246259 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0326 01:58:36.249538 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0326 01:58:36.254799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0326 01:58:36.257670 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0326 01:58:36.259675 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0326 01:58:36.262140 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0326 01:58:36.262156 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0326 01:58:36.262280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0326 01:58:36.264304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0326 01:58:36.266127 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0326 01:58:36.268678 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0326 01:58:36.271284 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0326 01:58:36.271309 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0326 01:58:36.271323 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0326 01:58:36.271382 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0326 01:58:36.277054 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0326 01:58:36.279736 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:58:36.280483 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:58:36.280674 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:58:36.282151 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:58:36.303043 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:58:36.314031 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:58:36.327287 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:58:36.345349 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:58:36.362005 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:58:36.365996 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0326 01:58:54.606944 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-26 01:58:54.606926518 +0000 UTC m=+18.443075329 I0326 01:58:55.308159 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-26 01:58:55.308143837 +0000 UTC m=+19.144292648 I0326 01:58:55.308221 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 01:58:55.308353 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-26 01:58:55.308337882 +0000 UTC m=+19.144486693 I0326 01:58:55.385206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:58:55.385320 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 01:58:55.385351 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-26 01:58:55.385342121 +0000 UTC m=+19.221490922 E0326 01:58:55.398147 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0326 01:58:55.398232 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-26 01:58:55.398224168 +0000 UTC m=+19.234372979 E0326 01:58:55.398263 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0326 01:58:55.478053 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0326 01:58:55.478808 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0326 01:58:55.478975 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0326 01:58:55.479058 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0326 01:58:55.516758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:58:55.528426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8xgg7" condition "Approved" to 2026-03-26 01:58:55.528408963 +0000 UTC m=+19.364557764 I0326 01:58:55.562205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8xgg7" condition "Ready" to 2026-03-26 01:58:55.562186634 +0000 UTC m=+19.398335445 I0326 01:58:55.612324 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 01:58:55.612307567 +0000 UTC m=+19.448456408 I0326 01:58:55.672231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:59:00.478948 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 01:59:00.478935274 +0000 UTC m=+24.315084075 I0326 01:59:25.203195 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-26 01:59:25.203179911 +0000 UTC m=+49.039328692 I0326 01:59:25.203896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 01:59:25.203977 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-26 01:59:25.203969002 +0000 UTC m=+49.040117783 I0326 01:59:25.216427 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-26 01:59:25.216415178 +0000 UTC m=+49.052563959 I0326 01:59:25.230504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:59:25.230579 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-26 01:59:25.23057143 +0000 UTC m=+49.066720201 I0326 01:59:25.516203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:59:25.549579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-f4g8m" condition "Approved" to 2026-03-26 01:59:25.549564611 +0000 UTC m=+49.385713422 I0326 01:59:25.582912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-f4g8m" condition "Ready" to 2026-03-26 01:59:25.582896821 +0000 UTC m=+49.419045622 I0326 01:59:25.613849 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 01:59:25.613830366 +0000 UTC m=+49.449979177 I0326 01:59:25.637396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:59:25.637880 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 01:59:25.637871975 +0000 UTC m=+49.474020756 I0326 01:59:25.649066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:59:25.671066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0326 01:59:25.671436 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 01:59:25.671425891 +0000 UTC m=+49.507574672 I0326 01:59:25.671810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:01:41.344419 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-26 02:01:41.344397562 +0000 UTC m=+185.180546383 I0326 02:01:41.344476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:01:41.344746 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-26 02:01:41.344711871 +0000 UTC m=+185.180860662 E0326 02:01:41.357848 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0326 02:01:41.358150 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-26 02:01:41.358134047 +0000 UTC m=+185.194282858 I0326 02:01:41.358249 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0326 02:01:41.361032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:01:41.361216 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-26 02:01:41.3611758 +0000 UTC m=+185.197324611 E0326 02:01:41.367938 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0326 02:01:41.368381 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0326 02:01:41.368469 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0326 02:01:41.368514 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0326 02:01:41.376071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:01:41.376105 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-26 02:01:41.376097057 +0000 UTC m=+185.212245838 I0326 02:01:41.376103 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-26 02:01:41.376093697 +0000 UTC m=+185.212242478 I0326 02:01:41.389970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:01:41.390024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:01:41.390038 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-26 02:01:41.390033837 +0000 UTC m=+185.226182618 I0326 02:01:41.466042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:01:41.506503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-cgkrl" condition "Approved" to 2026-03-26 02:01:41.506487645 +0000 UTC m=+185.342636436 I0326 02:01:41.539013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-cgkrl" condition "Ready" to 2026-03-26 02:01:41.539000592 +0000 UTC m=+185.375149363 I0326 02:01:41.563598 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:01:41.563586393 +0000 UTC m=+185.399735174 I0326 02:01:41.591363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:01:41.591705 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:01:41.59169855 +0000 UTC m=+185.427847331 I0326 02:01:41.594000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:01:41.605922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:01:41.606287 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:01:41.606277168 +0000 UTC m=+185.442425949 I0326 02:01:41.681990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:01:41.692203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zs7jk" condition "Approved" to 2026-03-26 02:01:41.692189833 +0000 UTC m=+185.528338634 I0326 02:01:41.707717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zs7jk" condition "Ready" to 2026-03-26 02:01:41.707705416 +0000 UTC m=+185.543854197 I0326 02:01:46.368732 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:01:46.368723083 +0000 UTC m=+190.204871854 I0326 02:01:46.388934 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-zs7jk" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:01:46.388922064 +0000 UTC m=+190.225070865 I0326 02:01:46.422950 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:01:46.422939393 +0000 UTC m=+190.259088164 I0326 02:01:46.447247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:01:46.447729 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:01:46.447719209 +0000 UTC m=+190.283868020 I0326 02:01:46.454207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:01:46.459949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:01:46.460520 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:01:46.460507458 +0000 UTC m=+190.296656269 I0326 02:04:12.532124 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready" to 2026-03-26 02:04:12.532108374 +0000 UTC m=+336.368257155 I0326 02:04:12.532609 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-229.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:04:12.532638 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Issuing" to 2026-03-26 02:04:12.532633048 +0000 UTC m=+336.368781829 I0326 02:04:12.550632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:12.550709 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-229.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:04:12.550729 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Issuing" to 2026-03-26 02:04:12.550722339 +0000 UTC m=+336.386871140 I0326 02:04:12.875289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-229.nip.io-tls-bgvtx" condition "Approved" to 2026-03-26 02:04:12.875273681 +0000 UTC m=+336.711422482 I0326 02:04:12.891046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-229.nip.io-tls-bgvtx" condition "Ready" to 2026-03-26 02:04:12.891032999 +0000 UTC m=+336.727181790 I0326 02:04:12.918076 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:04:12.918062353 +0000 UTC m=+336.754211134 I0326 02:04:12.939404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:12.939941 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:04:12.939934796 +0000 UTC m=+336.776083567 I0326 02:04:12.954911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:12.965820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-229.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-229.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:04:12.966134 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-229.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:04:12.966124898 +0000 UTC m=+336.802273699 I0326 02:05:23.287096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:05:23.287146 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-26 02:05:23.287134607 +0000 UTC m=+407.123283418 I0326 02:05:23.287548 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-26 02:05:23.287515928 +0000 UTC m=+407.123664739 E0326 02:05:23.301225 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0326 02:05:23.301293 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-26 02:05:23.30128216 +0000 UTC m=+407.137430961 I0326 02:05:23.301225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0326 02:05:23.301367 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0326 02:05:23.301490 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-26 02:05:23.301472696 +0000 UTC m=+407.137621497 E0326 02:05:23.311692 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0326 02:05:23.312117 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0326 02:05:23.312519 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0326 02:05:23.313282 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0326 02:05:23.317651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:05:23.337471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-plmrf" condition "Approved" to 2026-03-26 02:05:23.337453012 +0000 UTC m=+407.173601803 I0326 02:05:23.350304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-plmrf" condition "Ready" to 2026-03-26 02:05:23.350288328 +0000 UTC m=+407.186437109 I0326 02:05:23.373303 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:05:23.373284805 +0000 UTC m=+407.209433606 I0326 02:05:23.394763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:05:23.395307 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:05:23.395297062 +0000 UTC m=+407.231445843 I0326 02:05:23.407637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:05:23.409979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:05:23.410307 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:05:23.410297431 +0000 UTC m=+407.246446222 I0326 02:05:28.313981 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:05:28.313959451 +0000 UTC m=+412.150108262 I0326 02:06:08.675498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:06:08.675590 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-26 02:06:08.675582077 +0000 UTC m=+452.511730868 I0326 02:06:08.675630 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-26 02:06:08.675615748 +0000 UTC m=+452.511764519 I0326 02:06:08.675660 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-26 02:06:08.675647789 +0000 UTC m=+452.511796570 I0326 02:06:08.676011 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-26 02:06:08.676006939 +0000 UTC m=+452.512155710 I0326 02:06:08.676071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:06:08.676096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:06:08.676093 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-26 02:06:08.676089171 +0000 UTC m=+452.512237952 I0326 02:06:08.676118 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-26 02:06:08.676115002 +0000 UTC m=+452.512263773 I0326 02:06:08.701079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:08.701162 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:06:08.701188 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-26 02:06:08.701180752 +0000 UTC m=+452.537329533 I0326 02:06:08.707264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:08.707286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:08.707350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:06:08.707386 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-26 02:06:08.707375482 +0000 UTC m=+452.543524293 I0326 02:06:08.708263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:06:08.708300 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-26 02:06:08.708292147 +0000 UTC m=+452.544440938 I0326 02:06:08.850399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:08.858547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tv89k" condition "Approved" to 2026-03-26 02:06:08.858535832 +0000 UTC m=+452.694684613 I0326 02:06:08.874426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-tv89k" condition "Ready" to 2026-03-26 02:06:08.87441784 +0000 UTC m=+452.710566601 I0326 02:06:08.898413 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:06:08.898399009 +0000 UTC m=+452.734547800 I0326 02:06:08.941833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:09.035561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:09.169065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:09.169786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g98n7" condition "Approved" to 2026-03-26 02:06:09.169769618 +0000 UTC m=+453.005918429 I0326 02:06:09.201798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g98n7" condition "Ready" to 2026-03-26 02:06:09.201781279 +0000 UTC m=+453.037930080 I0326 02:06:09.279356 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:06:09.279340804 +0000 UTC m=+453.115489585 I0326 02:06:09.466274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:09.503051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:09.503566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8fqvw" condition "Approved" to 2026-03-26 02:06:09.503556965 +0000 UTC m=+453.339705746 I0326 02:06:09.614682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8fqvw" condition "Ready" to 2026-03-26 02:06:09.614671703 +0000 UTC m=+453.450820474 I0326 02:06:10.209018 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:06:10.208995819 +0000 UTC m=+454.045144630 I0326 02:06:10.313675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:10.314217 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:06:10.314207285 +0000 UTC m=+454.150356096 I0326 02:06:10.365719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:10.570960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:21.299948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:06:21.300030 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" condition "Issuing" to 2026-03-26 02:06:21.300021228 +0000 UTC m=+465.136170009 I0326 02:06:21.299985 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" condition "Ready" to 2026-03-26 02:06:21.299969736 +0000 UTC m=+465.136118507 I0326 02:06:21.317678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:21.317797 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:06:21.317823 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" condition "Issuing" to 2026-03-26 02:06:21.317816507 +0000 UTC m=+465.153965288 I0326 02:06:21.524990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:21.533619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bsv8l-mxkfk" condition "Approved" to 2026-03-26 02:06:21.533604087 +0000 UTC m=+465.369752878 I0326 02:06:21.561600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-bsv8l-mxkfk" condition "Ready" to 2026-03-26 02:06:21.561589917 +0000 UTC m=+465.397738698 I0326 02:06:21.593811 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:06:21.593798453 +0000 UTC m=+465.429947234 I0326 02:06:21.615664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:21.615973 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:06:21.615967653 +0000 UTC m=+465.452116424 I0326 02:06:21.625346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:21.631151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:21.631383 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-bsv8l-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:06:21.631375947 +0000 UTC m=+465.467524728 I0326 02:06:57.044067 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-26 02:06:57.044052267 +0000 UTC m=+500.880201048 I0326 02:06:57.044259 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:06:57.044295 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-26 02:06:57.044286564 +0000 UTC m=+500.880435345 I0326 02:06:57.058814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:57.058879 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-26 02:06:57.058872145 +0000 UTC m=+500.895020926 I0326 02:06:57.344129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:57.383626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-g6lhd" condition "Approved" to 2026-03-26 02:06:57.383611453 +0000 UTC m=+501.219760234 I0326 02:06:57.406851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-g6lhd" condition "Ready" to 2026-03-26 02:06:57.406834852 +0000 UTC m=+501.242983653 I0326 02:06:57.437998 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:06:57.43798436 +0000 UTC m=+501.274133141 I0326 02:06:57.453839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:06:57.454134 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:06:57.454126874 +0000 UTC m=+501.290275655 I0326 02:06:57.476111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:10:15.035036 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:10:15.035080 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-26 02:10:15.035069864 +0000 UTC m=+698.871218685 I0326 02:10:15.035087 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-26 02:10:15.035078784 +0000 UTC m=+698.871227565 I0326 02:10:15.051790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:10:15.051849 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-26 02:10:15.051843764 +0000 UTC m=+698.887992545 I0326 02:10:15.314757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:10:15.344417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wbx7w" condition "Approved" to 2026-03-26 02:10:15.344398641 +0000 UTC m=+699.180547422 I0326 02:10:15.359212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wbx7w" condition "Ready" to 2026-03-26 02:10:15.359199468 +0000 UTC m=+699.195348249 I0326 02:10:15.392044 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:10:15.392034508 +0000 UTC m=+699.228183299 I0326 02:10:15.409408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:10:15.409929 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:10:15.409919359 +0000 UTC m=+699.246068170 I0326 02:10:15.438076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:12:34.423046 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-26 02:12:34.423022759 +0000 UTC m=+838.259171570 I0326 02:12:34.423677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:12:34.423723 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-26 02:12:34.423711948 +0000 UTC m=+838.259860749 I0326 02:12:34.439918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:12:34.439998 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:12:34.440020 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-26 02:12:34.440012266 +0000 UTC m=+838.276161067 I0326 02:12:34.564865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-npt8l" condition "Approved" to 2026-03-26 02:12:34.564850673 +0000 UTC m=+838.400999454 I0326 02:12:34.588306 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-npt8l" condition "Ready" to 2026-03-26 02:12:34.588296076 +0000 UTC m=+838.424444847 I0326 02:12:34.618920 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:12:34.618835225 +0000 UTC m=+838.454984006 I0326 02:12:34.641263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:12:34.641713 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:12:34.641703412 +0000 UTC m=+838.477852183 I0326 02:12:34.665705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:12:34.666074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:12:34.666114 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:12:34.666103652 +0000 UTC m=+838.502252433 I0326 02:13:59.962396 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-26 02:13:59.962379787 +0000 UTC m=+923.798528568 I0326 02:13:59.962507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:13:59.962551 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-26 02:13:59.962539681 +0000 UTC m=+923.798688482 I0326 02:13:59.980940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:13:59.981022 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-26 02:13:59.981014479 +0000 UTC m=+923.817163260 I0326 02:14:00.174878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:14:00.216704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xplfx" condition "Approved" to 2026-03-26 02:14:00.21668466 +0000 UTC m=+924.052833441 I0326 02:14:00.238288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xplfx" condition "Ready" to 2026-03-26 02:14:00.238278833 +0000 UTC m=+924.074427614 I0326 02:14:00.267931 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:14:00.267913967 +0000 UTC m=+924.104062768 I0326 02:14:00.292928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:14:00.295615 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:14:00.295601897 +0000 UTC m=+924.131750708 I0326 02:14:00.316842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:14:00.317149 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:14:00.317141399 +0000 UTC m=+924.153290180 I0326 02:14:00.317571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:17:04.746483 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-26 02:17:04.746466332 +0000 UTC m=+1108.582615143 I0326 02:17:04.746668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:17:04.746754 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-26 02:17:04.746744479 +0000 UTC m=+1108.582893280 I0326 02:17:04.765824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:17:04.765930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0326 02:17:04.765960 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-26 02:17:04.765953717 +0000 UTC m=+1108.602102488 I0326 02:17:05.113492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:17:05.123879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4njwx" condition "Approved" to 2026-03-26 02:17:05.12386746 +0000 UTC m=+1108.960016241 I0326 02:17:05.140786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4njwx" condition "Ready" to 2026-03-26 02:17:05.140774054 +0000 UTC m=+1108.976922845 I0326 02:17:05.170459 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:17:05.170449688 +0000 UTC m=+1109.006598469 I0326 02:17:05.189831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:17:05.190545 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-26 02:17:05.190538029 +0000 UTC m=+1109.026686810 I0326 02:17:05.204326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0326 02:17:05.206717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"