I0407 17:52:52.806358 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 17:52:52.806535 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 17:52:52.806650 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 17:52:52.811412 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 17:52:52.811957 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 17:52:52.812029 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 17:52:52.812038 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 17:52:52.815921 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 17:52:52.830754 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 17:52:52.831086 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 17:52:52.834631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 17:52:52.839093 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 17:52:52.844609 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 17:52:52.848182 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 17:52:52.850696 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 17:52:52.852813 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 17:52:52.854504 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 17:52:52.854526 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 17:52:52.854532 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 17:52:52.854617 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 17:52:52.857051 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 17:52:52.863137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 17:52:52.866070 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 17:52:52.868875 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 17:52:52.868918 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 17:52:52.871671 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 17:52:52.875261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 17:52:52.879608 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 17:52:52.883761 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 17:52:52.887487 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 17:52:52.892144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 17:52:52.896240 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 17:52:52.896301 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 17:52:52.898539 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:52:52.898573 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:52:52.899569 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:52:52.899825 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:52:52.899852 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:52:52.899948 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:52:52.900218 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:52:52.900275 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:52:52.900379 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:52:52.987056 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 17:53:05.894601 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 17:53:05.894585621 +0000 UTC m=+13.120477582 I0407 17:53:06.630379 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 17:53:06.630363298 +0000 UTC m=+13.856255259 I0407 17:53:06.630637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:53:06.630724 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 17:53:06.630712977 +0000 UTC m=+13.856604938 I0407 17:53:06.646042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:53:06.646304 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 17:53:06.646291154 +0000 UTC m=+13.872183105 E0407 17:53:06.646319 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 17:53:06.646589 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 17:53:06.646568661 +0000 UTC m=+13.872460632 E0407 17:53:06.646702 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 17:53:06.660616 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 17:53:06.660746 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 17:53:06.660790 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 17:53:06.660840 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 17:53:06.665013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:53:06.665076 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 17:53:06.665068326 +0000 UTC m=+13.890960257 I0407 17:53:06.679141 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vqbsx" condition "Approved" to 2026-04-07 17:53:06.6791123 +0000 UTC m=+13.905004311 I0407 17:53:06.680777 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 17:53:06.680763876 +0000 UTC m=+13.906655827 I0407 17:53:06.687391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:53:06.692196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vqbsx" condition "Ready" to 2026-04-07 17:53:06.692185158 +0000 UTC m=+13.918077089 I0407 17:53:06.714587 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:53:06.71457429 +0000 UTC m=+13.940466221 I0407 17:53:06.733663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:53:06.734026 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:53:06.734019452 +0000 UTC m=+13.959911383 I0407 17:53:06.748077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:53:06.748625 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:53:06.748616421 +0000 UTC m=+13.974508382 I0407 17:53:06.753561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:53:11.662042 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:53:11.662031013 +0000 UTC m=+18.887922944 I0407 17:53:33.392856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:53:33.392988 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 17:53:33.392973489 +0000 UTC m=+40.618865450 I0407 17:53:33.393190 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 17:53:33.393172744 +0000 UTC m=+40.619064685 I0407 17:53:33.407806 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 17:53:33.407793245 +0000 UTC m=+40.633685166 I0407 17:53:33.412311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:53:33.412384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:53:33.412408 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 17:53:33.41240358 +0000 UTC m=+40.638295501 I0407 17:53:33.564248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:53:33.577694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w8vqp" condition "Approved" to 2026-04-07 17:53:33.577673388 +0000 UTC m=+40.803565349 I0407 17:53:33.613814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w8vqp" condition "Ready" to 2026-04-07 17:53:33.613800016 +0000 UTC m=+40.839691947 I0407 17:53:33.656043 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:53:33.65602016 +0000 UTC m=+40.881912111 I0407 17:53:33.684967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:55:17.094115 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 17:55:17.094078105 +0000 UTC m=+144.319970036 I0407 17:55:17.094380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:55:17.094462 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 17:55:17.094448344 +0000 UTC m=+144.320340305 E0407 17:55:17.107980 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 17:55:17.108081 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-07 17:55:17.108070679 +0000 UTC m=+144.333962610 I0407 17:55:17.108109 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 17:55:17.110319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:55:17.110402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:55:17.110431 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 17:55:17.110424622 +0000 UTC m=+144.336316573 E0407 17:55:17.117357 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0407 17:55:17.117620 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 17:55:17.117657 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 17:55:17.117714 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0407 17:55:17.121363 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 17:55:17.121351925 +0000 UTC m=+144.347243846 I0407 17:55:17.121380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:55:17.121457 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 17:55:17.121444747 +0000 UTC m=+144.347336678 I0407 17:55:17.136838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:55:17.137110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:55:17.137176 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 17:55:17.137141227 +0000 UTC m=+144.363033158 I0407 17:55:17.340041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-kc54q" condition "Approved" to 2026-04-07 17:55:17.340017616 +0000 UTC m=+144.565909547 I0407 17:55:17.370985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-kc54q" condition "Ready" to 2026-04-07 17:55:17.370973924 +0000 UTC m=+144.596865845 I0407 17:55:17.406721 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:55:17.406704121 +0000 UTC m=+144.632596052 I0407 17:55:17.426548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:55:17.427375 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:55:17.427363913 +0000 UTC m=+144.653255834 I0407 17:55:17.443791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:55:17.444264 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:55:17.444253395 +0000 UTC m=+144.670145346 I0407 17:55:17.518620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:55:17.525910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-h4l5f" condition "Approved" to 2026-04-07 17:55:17.52588786 +0000 UTC m=+144.751779821 I0407 17:55:17.542581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-h4l5f" condition "Ready" to 2026-04-07 17:55:17.542559596 +0000 UTC m=+144.768451547 I0407 17:55:22.118015 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:55:22.118001981 +0000 UTC m=+149.343893932 I0407 17:55:22.137762 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-h4l5f" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:55:22.137744539 +0000 UTC m=+149.363636490 I0407 17:55:22.166297 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:55:22.166282475 +0000 UTC m=+149.392174416 I0407 17:55:22.185780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:55:22.186329 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:55:22.186318684 +0000 UTC m=+149.412210645 I0407 17:55:22.206237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:55.248681 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-61.nip.io-tls" condition "Ready" to 2026-04-07 17:57:55.248645433 +0000 UTC m=+302.474537414 I0407 17:57:55.249224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-61.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:57:55.249311 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-61.nip.io-tls" condition "Issuing" to 2026-04-07 17:57:55.249300811 +0000 UTC m=+302.475192772 I0407 17:57:55.263879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:55.264047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-61.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:57:55.264078 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-61.nip.io-tls" condition "Issuing" to 2026-04-07 17:57:55.264070987 +0000 UTC m=+302.489962928 I0407 17:57:55.740254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:55.748245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-61.nip.io-tls-tjqll" condition "Approved" to 2026-04-07 17:57:55.748198296 +0000 UTC m=+302.974090257 I0407 17:57:55.770497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-61.nip.io-tls-tjqll" condition "Ready" to 2026-04-07 17:57:55.770481465 +0000 UTC m=+302.996373416 I0407 17:57:55.803953 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-61.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:57:55.803942318 +0000 UTC m=+303.029834249 I0407 17:57:55.828250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:55.828731 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-61.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:57:55.828722117 +0000 UTC m=+303.054614068 I0407 17:57:55.839739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:55.847943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:57:55.848378 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-61.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:57:55.848369591 +0000 UTC m=+303.074261522 I0407 17:57:55.850709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-61.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-61.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:05.221661 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:59:05.221690 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 17:59:05.221669678 +0000 UTC m=+372.447561639 I0407 17:59:05.221745 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 17:59:05.22173341 +0000 UTC m=+372.447625341 E0407 17:59:05.234410 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 17:59:05.234458 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 17:59:05.234447568 +0000 UTC m=+372.460339499 E0407 17:59:05.234530 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 17:59:05.237352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:05.237461 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 17:59:05.237453993 +0000 UTC m=+372.463345924 E0407 17:59:05.246283 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 17:59:05.246395 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 17:59:05.246449 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 17:59:05.246498 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 17:59:05.255135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:05.274558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-72k4j" condition "Approved" to 2026-04-07 17:59:05.274540029 +0000 UTC m=+372.500431980 I0407 17:59:05.287540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-72k4j" condition "Ready" to 2026-04-07 17:59:05.287523424 +0000 UTC m=+372.513415355 I0407 17:59:05.312492 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:05.312462717 +0000 UTC m=+372.538354678 I0407 17:59:05.329335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:05.329688 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:05.329678902 +0000 UTC m=+372.555570833 I0407 17:59:05.351163 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:05.353402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:05.353702 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:05.35369219 +0000 UTC m=+372.579584141 I0407 17:59:05.354590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:10.247332 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:10.247313252 +0000 UTC m=+377.473205213 I0407 17:59:49.133517 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:59:49.133597 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 17:59:49.133572049 +0000 UTC m=+416.359463970 I0407 17:59:49.133634 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 17:59:49.13360906 +0000 UTC m=+416.359501021 I0407 17:59:49.133670 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:59:49.133717 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 17:59:49.133709153 +0000 UTC m=+416.359601094 I0407 17:59:49.133802 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 17:59:49.133788465 +0000 UTC m=+416.359680406 I0407 17:59:49.156365 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 17:59:49.156350333 +0000 UTC m=+416.382242244 I0407 17:59:49.156372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:59:49.156577 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 17:59:49.156568419 +0000 UTC m=+416.382460340 I0407 17:59:49.160896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:49.165569 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:59:49.165646 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 17:59:49.165634865 +0000 UTC m=+416.391526786 I0407 17:59:49.165925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:49.166878 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 17:59:49.16686272 +0000 UTC m=+416.392754641 I0407 17:59:49.180660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:49.180768 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 17:59:49.180759523 +0000 UTC m=+416.406651454 I0407 17:59:49.330349 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-44kpl" condition "Approved" to 2026-04-07 17:59:49.330335521 +0000 UTC m=+416.556227452 I0407 17:59:49.353863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-44kpl" condition "Ready" to 2026-04-07 17:59:49.353848726 +0000 UTC m=+416.579740677 I0407 17:59:49.389881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:49.396345 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:49.396337077 +0000 UTC m=+416.622228998 I0407 17:59:49.417177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:49.417671 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:49.417659609 +0000 UTC m=+416.643551570 I0407 17:59:49.422624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:49.435237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8pxdz" condition "Approved" to 2026-04-07 17:59:49.435219356 +0000 UTC m=+416.661111287 I0407 17:59:49.451448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:49.452770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-8pxdz" condition "Ready" to 2026-04-07 17:59:49.452757542 +0000 UTC m=+416.678649473 I0407 17:59:49.459452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4cv6z" condition "Approved" to 2026-04-07 17:59:49.459432691 +0000 UTC m=+416.685324622 E0407 17:59:49.469937 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-2d9x5\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0407 17:59:49.881944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4cv6z" condition "Ready" to 2026-04-07 17:59:49.881920044 +0000 UTC m=+417.107811975 I0407 17:59:50.036594 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:50.036557605 +0000 UTC m=+417.262449536 I0407 17:59:50.274667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:50.275248 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:50.275239562 +0000 UTC m=+417.501131493 I0407 17:59:50.434426 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:50.434411011 +0000 UTC m=+417.660302942 I0407 17:59:50.677023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:50.727820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:50.728203 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:50.728193576 +0000 UTC m=+417.954085497 I0407 17:59:50.772887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:51.024085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:56.888672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:59:56.888702 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls" condition "Issuing" to 2026-04-07 17:59:56.888695662 +0000 UTC m=+424.114587573 I0407 17:59:56.888736 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls" condition "Ready" to 2026-04-07 17:59:56.888718663 +0000 UTC m=+424.114610594 I0407 17:59:56.912702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:56.912810 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 17:59:56.912843 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls" condition "Issuing" to 2026-04-07 17:59:56.912833895 +0000 UTC m=+424.138725826 I0407 17:59:57.208022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2bbr8-jxf2q" condition "Approved" to 2026-04-07 17:59:57.207996848 +0000 UTC m=+424.433888799 I0407 17:59:57.230506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-2bbr8-jxf2q" condition "Ready" to 2026-04-07 17:59:57.230494944 +0000 UTC m=+424.456386865 I0407 17:59:57.266154 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:57.266128202 +0000 UTC m=+424.492020153 I0407 17:59:57.291991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:57.292344 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:57.292333122 +0000 UTC m=+424.518225053 I0407 17:59:57.308677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:57.308922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 17:59:57.308979 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-2bbr8-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 17:59:57.308968343 +0000 UTC m=+424.534860274 I0407 18:00:30.738421 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 18:00:30.738407272 +0000 UTC m=+457.964299183 I0407 18:00:30.738818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:00:30.738851 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 18:00:30.738845034 +0000 UTC m=+457.964736965 I0407 18:00:30.759832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:00:30.759912 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 18:00:30.75990484 +0000 UTC m=+457.985796771 I0407 18:00:31.089739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:00:31.117210 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nqnmp" condition "Approved" to 2026-04-07 18:00:31.11719505 +0000 UTC m=+458.343086981 I0407 18:00:31.133261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nqnmp" condition "Ready" to 2026-04-07 18:00:31.133249564 +0000 UTC m=+458.359141495 I0407 18:00:31.168052 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:00:31.168036088 +0000 UTC m=+458.393928019 I0407 18:00:31.188133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:00:31.231872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:04:00.520023 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 18:04:00.519991182 +0000 UTC m=+667.745883103 I0407 18:04:00.520279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:04:00.520363 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 18:04:00.520352523 +0000 UTC m=+667.746244474 I0407 18:04:00.540032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:04:00.540108 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 18:04:00.54010151 +0000 UTC m=+667.765993441 I0407 18:04:01.180380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:04:01.210596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7v79d" condition "Approved" to 2026-04-07 18:04:01.210581326 +0000 UTC m=+668.436473257 I0407 18:04:01.227259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7v79d" condition "Ready" to 2026-04-07 18:04:01.227247911 +0000 UTC m=+668.453139832 I0407 18:04:01.253214 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:04:01.253200746 +0000 UTC m=+668.479092687 I0407 18:04:01.278389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:04:01.279138 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:04:01.27912622 +0000 UTC m=+668.505018171 I0407 18:04:01.297465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:04:01.297879 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:04:01.297867997 +0000 UTC m=+668.523759928 I0407 18:07:01.709478 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:07:01.709536 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 18:07:01.709530311 +0000 UTC m=+848.935422232 I0407 18:07:01.709580 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 18:07:01.709554582 +0000 UTC m=+848.935446513 I0407 18:07:01.729352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:07:01.729517 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 18:07:01.729504742 +0000 UTC m=+848.955396683 I0407 18:07:01.856547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:07:01.892538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-58ldv" condition "Approved" to 2026-04-07 18:07:01.892522892 +0000 UTC m=+849.118414823 I0407 18:07:01.911606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-58ldv" condition "Ready" to 2026-04-07 18:07:01.911592548 +0000 UTC m=+849.137484459 I0407 18:07:01.950709 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:07:01.950684407 +0000 UTC m=+849.176576348 I0407 18:07:01.974898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:07:01.975280 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:07:01.975268186 +0000 UTC m=+849.201160117 I0407 18:07:02.001168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:07:02.001866 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:07:02.001851244 +0000 UTC m=+849.227743235 I0407 18:08:06.605671 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 18:08:06.605170709 +0000 UTC m=+913.831062640 I0407 18:08:06.606346 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:08:06.606375 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 18:08:06.606371193 +0000 UTC m=+913.832263114 I0407 18:08:06.630817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:08:06.630920 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 18:08:06.630911792 +0000 UTC m=+913.856803723 I0407 18:08:06.714039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:08:06.762378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-pzxlj" condition "Approved" to 2026-04-07 18:08:06.762365645 +0000 UTC m=+913.988257566 I0407 18:08:06.786774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-pzxlj" condition "Ready" to 2026-04-07 18:08:06.786762631 +0000 UTC m=+914.012654552 I0407 18:08:06.817849 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:08:06.817834644 +0000 UTC m=+914.043726575 I0407 18:08:06.844823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:08:06.845455 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:08:06.845417879 +0000 UTC m=+914.071309830 I0407 18:08:06.877872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:11:12.348902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:11:12.348970 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 18:11:12.348965115 +0000 UTC m=+1099.574857046 I0407 18:11:12.348902 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 18:11:12.348855492 +0000 UTC m=+1099.574747423 I0407 18:11:12.368904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:11:12.368971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 18:11:12.368985 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 18:11:12.368978777 +0000 UTC m=+1099.594870698 I0407 18:11:12.605338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-hc9j9" condition "Approved" to 2026-04-07 18:11:12.605323148 +0000 UTC m=+1099.831215079 I0407 18:11:12.635657 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-hc9j9" condition "Ready" to 2026-04-07 18:11:12.63564667 +0000 UTC m=+1099.861538591 I0407 18:11:12.668309 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:11:12.668287646 +0000 UTC m=+1099.894179567 I0407 18:11:12.687863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 18:11:12.688239 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 18:11:12.688231787 +0000 UTC m=+1099.914123698 I0407 18:11:12.711672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"