I0402 16:44:02.064840 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0402 16:44:02.065094 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0402 16:44:02.065230 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0402 16:44:02.068981 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0402 16:44:02.069346 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0402 16:44:02.069388 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0402 16:44:02.069338 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0402 16:44:02.074955 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0402 16:44:02.093547 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0402 16:44:02.093841 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0402 16:44:02.093900 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0402 16:44:02.097732 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0402 16:44:02.100849 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0402 16:44:02.100990 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0402 16:44:02.103551 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0402 16:44:02.109278 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0402 16:44:02.113569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0402 16:44:02.116638 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0402 16:44:02.120441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0402 16:44:02.120615 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0402 16:44:02.121804 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0402 16:44:02.121863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0402 16:44:02.123734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0402 16:44:02.129453 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0402 16:44:02.131912 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0402 16:44:02.134982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0402 16:44:02.136547 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0402 16:44:02.136602 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0402 16:44:02.138462 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0402 16:44:02.140221 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0402 16:44:02.142120 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0402 16:44:02.144115 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0402 16:44:02.144726 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0402 16:44:02.146762 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:44:02.146961 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:44:02.147327 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:44:02.147546 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:44:02.147745 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:44:02.148485 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:44:02.150200 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:44:02.150203 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:44:02.151528 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:44:02.241580 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 16:44:14.563909 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-02 16:44:14.56389603 +0000 UTC m=+12.532700245 I0402 16:44:15.296063 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 16:44:15.296047695 +0000 UTC m=+13.264851940 I0402 16:44:15.296167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:44:15.296258 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 16:44:15.296247239 +0000 UTC m=+13.265051474 E0402 16:44:15.308176 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:44:15.308219 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-02 16:44:15.308213708 +0000 UTC m=+13.277017913 E0402 16:44:15.308242 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:44:15.312638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:44:15.312696 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 16:44:15.312690896 +0000 UTC m=+13.281495111 E0402 16:44:15.320010 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0402 16:44:15.320117 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:44:15.320149 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:44:15.320181 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0402 16:44:15.327306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:44:15.346677 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bnfzc" condition "Approved" to 2026-04-02 16:44:15.346666261 +0000 UTC m=+13.315470476 I0402 16:44:15.359494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bnfzc" condition "Ready" to 2026-04-02 16:44:15.359480256 +0000 UTC m=+13.328284491 I0402 16:44:15.378455 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:44:15.378443523 +0000 UTC m=+13.347247768 I0402 16:44:15.397572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:44:15.397856 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:44:15.397849209 +0000 UTC m=+13.366653424 I0402 16:44:15.401674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:44:15.411679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:44:15.412051 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:44:15.412040641 +0000 UTC m=+13.380844856 I0402 16:44:15.414920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:44:20.320458 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:44:20.320441778 +0000 UTC m=+18.289246023 I0402 16:44:39.081289 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 16:44:39.081260739 +0000 UTC m=+37.050064964 I0402 16:44:39.081731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:44:39.082000 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 16:44:39.081992514 +0000 UTC m=+37.050796729 I0402 16:44:39.099889 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-02 16:44:39.099825218 +0000 UTC m=+37.068629423 I0402 16:44:39.105437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:44:39.107829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:44:39.108012 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 16:44:39.1079937 +0000 UTC m=+37.076797985 I0402 16:44:39.269107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:44:39.281475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qmpwx" condition "Approved" to 2026-04-02 16:44:39.281455666 +0000 UTC m=+37.250259901 I0402 16:44:39.315363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qmpwx" condition "Ready" to 2026-04-02 16:44:39.31534616 +0000 UTC m=+37.284150395 I0402 16:44:39.345589 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:44:39.34556697 +0000 UTC m=+37.314371235 I0402 16:44:39.371757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:44:39.372086 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:44:39.372079347 +0000 UTC m=+37.340883562 I0402 16:44:39.376110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:44:39.387695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:44:39.388123 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:44:39.388111935 +0000 UTC m=+37.356916170 I0402 16:44:39.390262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:46:21.913344 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:46:21.913423 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-02 16:46:21.913388425 +0000 UTC m=+139.882192740 I0402 16:46:21.913431 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-02 16:46:21.913367015 +0000 UTC m=+139.882171290 I0402 16:46:21.929753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:46:21.929868 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-02 16:46:21.929860232 +0000 UTC m=+139.898664447 E0402 16:46:21.930225 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 16:46:21.930292 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-02 16:46:21.930284551 +0000 UTC m=+139.899088766 I0402 16:46:21.930365 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 16:46:21.943441 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0402 16:46:21.943519 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 16:46:21.943541 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 16:46:21.943570 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0402 16:46:21.944444 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:46:21.944466 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-02 16:46:21.944459572 +0000 UTC m=+139.913263787 I0402 16:46:21.944730 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-02 16:46:21.944717897 +0000 UTC m=+139.913522132 I0402 16:46:21.959129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:46:21.959218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:46:21.959241 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-02 16:46:21.959234905 +0000 UTC m=+139.928039120 I0402 16:46:22.092823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:46:22.121121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-sc6sv" condition "Approved" to 2026-04-02 16:46:22.121104769 +0000 UTC m=+140.089909004 I0402 16:46:22.146042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:46:22.148103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-x44z6" condition "Approved" to 2026-04-02 16:46:22.148097264 +0000 UTC m=+140.116901459 I0402 16:46:22.149415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-sc6sv" condition "Ready" to 2026-04-02 16:46:22.14940324 +0000 UTC m=+140.118207455 I0402 16:46:22.165572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-x44z6" condition "Ready" to 2026-04-02 16:46:22.165552711 +0000 UTC m=+140.134356916 I0402 16:46:22.179408 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:46:22.179391706 +0000 UTC m=+140.148195921 I0402 16:46:22.198072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:46:22.198500 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:46:22.198492264 +0000 UTC m=+140.167296479 I0402 16:46:22.215297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:46:22.215651 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:46:22.215636565 +0000 UTC m=+140.184440810 I0402 16:46:26.944837 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:46:26.94482363 +0000 UTC m=+144.913627865 I0402 16:46:26.966493 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-x44z6" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:46:26.966483281 +0000 UTC m=+144.935287496 I0402 16:46:26.998050 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:46:26.998029497 +0000 UTC m=+144.966833742 I0402 16:46:27.018628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:48:49.644375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:48:49.644474 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-04-02 16:48:49.644409979 +0000 UTC m=+287.613214224 I0402 16:48:49.645117 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-02 16:48:49.645109013 +0000 UTC m=+287.613913248 I0402 16:48:49.660775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:48:49.660842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:48:49.660860 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-04-02 16:48:49.660853248 +0000 UTC m=+287.629657473 I0402 16:48:49.875285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-whj65" condition "Approved" to 2026-04-02 16:48:49.875270622 +0000 UTC m=+287.844074857 I0402 16:48:49.892920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-whj65" condition "Ready" to 2026-04-02 16:48:49.892906746 +0000 UTC m=+287.861710981 I0402 16:48:49.922044 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:48:49.922036407 +0000 UTC m=+287.890840612 I0402 16:48:49.946157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:48:49.946749 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:48:49.946739541 +0000 UTC m=+287.915543786 I0402 16:48:49.951735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:48:49.961791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:48:49.961907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:48:49.962166 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:48:49.96215805 +0000 UTC m=+287.930962265 I0402 16:49:59.115377 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 16:49:59.115351649 +0000 UTC m=+357.084155864 I0402 16:49:59.115964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:49:59.115991 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 16:49:59.115986231 +0000 UTC m=+357.084790446 E0402 16:49:59.126076 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:49:59.126118 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-02 16:49:59.126108733 +0000 UTC m=+357.094912948 E0402 16:49:59.126164 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 16:49:59.127662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:49:59.127747 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:49:59.127832 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 16:49:59.127824587 +0000 UTC m=+357.096628802 E0402 16:49:59.137726 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0402 16:49:59.137799 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:49:59.137816 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 16:49:59.137837 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0402 16:49:59.162104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jb259" condition "Approved" to 2026-04-02 16:49:59.162087802 +0000 UTC m=+357.130892017 I0402 16:49:59.173652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jb259" condition "Ready" to 2026-04-02 16:49:59.173641702 +0000 UTC m=+357.142445917 I0402 16:49:59.194494 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:49:59.194482658 +0000 UTC m=+357.163286863 I0402 16:49:59.210976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:04.138176 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:50:04.138161484 +0000 UTC m=+362.106965719 I0402 16:50:41.622865 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 16:50:41.62285453 +0000 UTC m=+399.591658725 I0402 16:50:41.622919 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:50:41.622933 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 16:50:41.622929841 +0000 UTC m=+399.591734046 I0402 16:50:41.623198 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 16:50:41.623194957 +0000 UTC m=+399.591999162 I0402 16:50:41.623342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:50:41.623358 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 16:50:41.623354 +0000 UTC m=+399.592158205 I0402 16:50:41.631597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:50:41.631622 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 16:50:41.631616554 +0000 UTC m=+399.600420759 I0402 16:50:41.631817 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 16:50:41.631794748 +0000 UTC m=+399.600598983 I0402 16:50:41.652122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:41.652198 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 16:50:41.652190585 +0000 UTC m=+399.620994780 I0402 16:50:41.654692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:41.654755 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 16:50:41.654747136 +0000 UTC m=+399.623551371 I0402 16:50:41.656704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:41.656772 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 16:50:41.656763556 +0000 UTC m=+399.625567791 I0402 16:50:41.802530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:41.816277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:41.838359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fsw2f" condition "Approved" to 2026-04-02 16:50:41.838349769 +0000 UTC m=+399.807153964 I0402 16:50:41.854038 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ftmtc" condition "Approved" to 2026-04-02 16:50:41.854028781 +0000 UTC m=+399.822832986 I0402 16:50:41.856175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fsw2f" condition "Ready" to 2026-04-02 16:50:41.856170034 +0000 UTC m=+399.824974239 I0402 16:50:41.874446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ftmtc" condition "Ready" to 2026-04-02 16:50:41.874428508 +0000 UTC m=+399.843232713 I0402 16:50:41.906375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:41.911602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:50:41.911655 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 16:50:41.91164527 +0000 UTC m=+399.880449475 I0402 16:50:41.922883 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:50:41.922860924 +0000 UTC m=+399.891665159 I0402 16:50:41.923016 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:50:41.923002227 +0000 UTC m=+399.891806432 I0402 16:50:42.070805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:42.071152 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:50:42.071144002 +0000 UTC m=+400.039948207 I0402 16:50:42.114414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:42.114873 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:50:42.114862475 +0000 UTC m=+400.083666710 I0402 16:50:42.163838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:42.628138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:42.660063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0402 16:50:42.817885 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-p479r\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0402 16:50:42.866754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-d8h4r" condition "Approved" to 2026-04-02 16:50:42.866740903 +0000 UTC m=+400.835545108 I0402 16:50:43.028945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xh5cc" condition "Approved" to 2026-04-02 16:50:43.028920768 +0000 UTC m=+400.997725013 I0402 16:50:43.176184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-d8h4r" condition "Ready" to 2026-04-02 16:50:43.176170965 +0000 UTC m=+401.144975180 I0402 16:50:43.520645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xh5cc" condition "Ready" to 2026-04-02 16:50:43.520628416 +0000 UTC m=+401.489432661 I0402 16:50:44.012915 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-xh5cc" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-8tpf8" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0402 16:50:44.364431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:44.470507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kknqt" condition "Approved" to 2026-04-02 16:50:44.470488014 +0000 UTC m=+402.439292249 E0402 16:50:44.509881 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-8tpf8\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0402 16:50:45.024300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kknqt" condition "Ready" to 2026-04-02 16:50:45.024286001 +0000 UTC m=+402.993090226 I0402 16:50:45.115331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:45.165471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:45.462618 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:50:45.462581474 +0000 UTC m=+403.431385709 I0402 16:50:45.514337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:49.611738 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:50:49.611779 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls" condition "Issuing" to 2026-04-02 16:50:49.611767991 +0000 UTC m=+407.580572236 I0402 16:50:49.612088 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls" condition "Ready" to 2026-04-02 16:50:49.612066207 +0000 UTC m=+407.580870442 I0402 16:50:49.626490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:49.626570 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:50:49.626620 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls" condition "Issuing" to 2026-04-02 16:50:49.626612558 +0000 UTC m=+407.595416803 I0402 16:50:49.770508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pkrpr-r49l6" condition "Approved" to 2026-04-02 16:50:49.770457626 +0000 UTC m=+407.739261871 I0402 16:50:49.789258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pkrpr-r49l6" condition "Ready" to 2026-04-02 16:50:49.789242542 +0000 UTC m=+407.758046747 I0402 16:50:49.816319 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:50:49.816299852 +0000 UTC m=+407.785104097 I0402 16:50:49.832723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:50:49.833178 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:50:49.833170648 +0000 UTC m=+407.801974863 I0402 16:50:49.849882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pkrpr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:51:18.599345 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:51:18.599393 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 16:51:18.599380321 +0000 UTC m=+436.568184566 I0402 16:51:18.599413 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 16:51:18.599379721 +0000 UTC m=+436.568183946 I0402 16:51:18.614531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:51:18.614636 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 16:51:18.614622996 +0000 UTC m=+436.583427211 I0402 16:51:18.832122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:51:18.870965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2nlls" condition "Approved" to 2026-04-02 16:51:18.870946029 +0000 UTC m=+436.839750274 I0402 16:51:18.911064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2nlls" condition "Ready" to 2026-04-02 16:51:18.911051939 +0000 UTC m=+436.879856154 I0402 16:51:18.941600 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:51:18.941586068 +0000 UTC m=+436.910390283 I0402 16:51:18.968625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:51:18.968915 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:51:18.968906993 +0000 UTC m=+436.937711208 I0402 16:51:18.987119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:51:18.987444 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:51:18.987434823 +0000 UTC m=+436.956239038 I0402 16:51:18.988997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:30.028202 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:54:30.028457 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 16:54:30.028407829 +0000 UTC m=+627.997212064 I0402 16:54:30.028499 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 16:54:30.02847155 +0000 UTC m=+627.997275845 I0402 16:54:30.045809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:30.045925 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:54:30.045958 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 16:54:30.045948999 +0000 UTC m=+628.014753214 I0402 16:54:30.263930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hvptq" condition "Approved" to 2026-04-02 16:54:30.263920042 +0000 UTC m=+628.232724257 I0402 16:54:30.283909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-hvptq" condition "Ready" to 2026-04-02 16:54:30.28389798 +0000 UTC m=+628.252702195 I0402 16:54:30.316032 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:30.316014821 +0000 UTC m=+628.284819036 I0402 16:54:30.344622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:30.344905 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:30.344898658 +0000 UTC m=+628.313702863 I0402 16:54:30.363655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:54:30.364252 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:54:30.364239864 +0000 UTC m=+628.333044069 I0402 16:54:30.368470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:49.058039 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 16:56:49.058014433 +0000 UTC m=+767.026818698 I0402 16:56:49.059140 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:56:49.059236 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 16:56:49.059223837 +0000 UTC m=+767.028028082 I0402 16:56:49.078037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:56:49.078147 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:56:49.078184 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 16:56:49.078173195 +0000 UTC m=+767.046977430 I0402 16:56:49.400270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jwcnc" condition "Approved" to 2026-04-02 16:56:49.400239863 +0000 UTC m=+767.369044158 I0402 16:56:49.427962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jwcnc" condition "Ready" to 2026-04-02 16:56:49.427947986 +0000 UTC m=+767.396752231 I0402 16:56:49.456772 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:56:49.456758581 +0000 UTC m=+767.425562796 I0402 16:56:49.479555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:57:48.746610 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 16:57:48.746561347 +0000 UTC m=+826.715365542 I0402 16:57:48.747047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:57:48.747077 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 16:57:48.747074187 +0000 UTC m=+826.715878392 I0402 16:57:48.768995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 16:57:48.769121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 16:57:48.769181 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 16:57:48.769174488 +0000 UTC m=+826.737978703 I0402 16:57:49.040190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-p8kh6" condition "Approved" to 2026-04-02 16:57:49.04017906 +0000 UTC m=+827.008983275 I0402 16:57:49.061258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-p8kh6" condition "Ready" to 2026-04-02 16:57:49.06124237 +0000 UTC m=+827.030046605 I0402 16:57:49.093742 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 16:57:49.0937319 +0000 UTC m=+827.062536095 I0402 16:57:49.110030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:38.282244 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 17:00:38.282302 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-02 17:00:38.282295123 +0000 UTC m=+996.251099328 I0402 17:00:38.282279 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 17:00:38.282262542 +0000 UTC m=+996.251066757 I0402 17:00:38.302114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:38.302172 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 17:00:38.302166429 +0000 UTC m=+996.270970634 I0402 17:00:38.407733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 17:00:38.447719 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-9ngzv" condition "Approved" to 2026-04-02 17:00:38.447653884 +0000 UTC m=+996.416458109 I0402 17:00:38.463938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-9ngzv" condition "Ready" to 2026-04-02 17:00:38.463925779 +0000 UTC m=+996.432730004 I0402 17:00:38.490226 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 17:00:38.490209494 +0000 UTC m=+996.459013739 I0402 17:00:38.515568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"