I0407 13:00:07.670107 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 13:00:07.670193 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 13:00:07.670253 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 13:00:07.675211 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 13:00:07.675760 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 13:00:07.675862 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 13:00:07.676040 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 13:00:07.678611 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 13:00:07.691530 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 13:00:07.691789 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 13:00:07.691841 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 13:00:07.691868 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 13:00:07.696427 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 13:00:07.700426 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 13:00:07.702332 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 13:00:07.706827 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 13:00:07.709299 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 13:00:07.709419 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 13:00:07.711921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 13:00:07.713758 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 13:00:07.715583 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 13:00:07.717450 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 13:00:07.719312 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 13:00:07.725678 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 13:00:07.729286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 13:00:07.731498 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 13:00:07.733170 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 13:00:07.734654 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 13:00:07.734805 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 13:00:07.736471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 13:00:07.738011 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 13:00:07.738197 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 13:00:07.741574 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 13:00:07.742605 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 13:00:07.746002 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 13:00:07.746614 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 13:00:07.746749 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 13:00:07.766751 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 13:00:07.777261 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 13:00:07.796584 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 13:00:07.812382 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 13:00:07.826729 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 13:00:07.830203 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 13:00:20.697802 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 13:00:20.697785616 +0000 UTC m=+13.056488147 I0407 13:00:21.418823 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 13:00:21.418805592 +0000 UTC m=+13.777508193 I0407 13:00:21.419093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:00:21.419181 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 13:00:21.419172294 +0000 UTC m=+13.777874815 E0407 13:00:21.435329 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:00:21.435402 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 13:00:21.435392801 +0000 UTC m=+13.794095322 E0407 13:00:21.435433 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:00:21.437051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:21.437127 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 13:00:21.437119145 +0000 UTC m=+13.795821666 E0407 13:00:21.443218 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 13:00:21.443333 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:00:21.443367 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:00:21.443413 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 13:00:21.449720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:21.449802 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 13:00:21.449792878 +0000 UTC m=+13.808495409 I0407 13:00:21.456946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hqnlt" condition "Approved" to 2026-04-07 13:00:21.456925277 +0000 UTC m=+13.815627808 I0407 13:00:21.463660 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 13:00:21.463636021 +0000 UTC m=+13.822338542 I0407 13:00:21.471037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:21.471126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hqnlt" condition "Ready" to 2026-04-07 13:00:21.471108732 +0000 UTC m=+13.829811243 I0407 13:00:21.497807 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:21.497792928 +0000 UTC m=+13.856495439 I0407 13:00:21.515833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:21.516288 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:21.516276861 +0000 UTC m=+13.874979392 I0407 13:00:21.532210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:21.532851 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:21.532832048 +0000 UTC m=+13.891534609 I0407 13:00:21.539494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:26.444079 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:26.444061409 +0000 UTC m=+18.802763960 I0407 13:00:50.337567 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 13:00:50.337532592 +0000 UTC m=+42.696235113 I0407 13:00:50.337585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:00:50.337787 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 13:00:50.33777909 +0000 UTC m=+42.696481611 I0407 13:00:50.350256 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 13:00:50.350240857 +0000 UTC m=+42.708943378 I0407 13:00:50.359068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:50.359139 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 13:00:50.359131189 +0000 UTC m=+42.717833710 I0407 13:00:50.558270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:50.592034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nms54" condition "Approved" to 2026-04-07 13:00:50.592017667 +0000 UTC m=+42.950720218 I0407 13:00:50.624911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nms54" condition "Ready" to 2026-04-07 13:00:50.624899503 +0000 UTC m=+42.983602024 I0407 13:00:50.652225 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:50.652210602 +0000 UTC m=+43.010913123 I0407 13:00:50.675287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:50.675643 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:50.675633717 +0000 UTC m=+43.034336238 I0407 13:00:50.687832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:50.700235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:50.700654 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:50.700645692 +0000 UTC m=+43.059348213 I0407 13:00:50.701718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:51.992346 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:02:51.992437 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 13:02:51.992421923 +0000 UTC m=+164.351124474 I0407 13:02:51.992640 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 13:02:51.992612949 +0000 UTC m=+164.351315500 E0407 13:02:52.008436 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 13:02:52.008538 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-07 13:02:52.008527974 +0000 UTC m=+164.367230495 I0407 13:02:52.008570 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 13:02:52.011824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:52.011939 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 13:02:52.011929242 +0000 UTC m=+164.370631763 E0407 13:02:52.017672 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0407 13:02:52.017935 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 13:02:52.018007 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 13:02:52.018083 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0407 13:02:52.020525 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 13:02:52.020518715 +0000 UTC m=+164.379221236 I0407 13:02:52.020555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:02:52.020744 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 13:02:52.020720311 +0000 UTC m=+164.379422842 I0407 13:02:52.034591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:52.034679 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 13:02:52.034669204 +0000 UTC m=+164.393371745 I0407 13:02:52.172985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:52.203299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-xfrn2" condition "Approved" to 2026-04-07 13:02:52.203288848 +0000 UTC m=+164.561991349 I0407 13:02:52.233282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-xfrn2" condition "Ready" to 2026-04-07 13:02:52.23326507 +0000 UTC m=+164.591967621 I0407 13:02:52.262453 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:52.262437876 +0000 UTC m=+164.621140377 I0407 13:02:52.283123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:52.283130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:52.314217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-tjrkp" condition "Approved" to 2026-04-07 13:02:52.31420108 +0000 UTC m=+164.672903631 I0407 13:02:52.332086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-tjrkp" condition "Ready" to 2026-04-07 13:02:52.332066937 +0000 UTC m=+164.690769458 I0407 13:02:57.018523 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:57.018509343 +0000 UTC m=+169.377211884 I0407 13:02:57.036352 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-tjrkp" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:57.036326479 +0000 UTC m=+169.395029030 I0407 13:02:57.066828 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:57.066812637 +0000 UTC m=+169.425515158 I0407 13:02:57.093940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.168563 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-128.nip.io-tls" condition "Ready" to 2026-04-07 13:05:40.16851551 +0000 UTC m=+332.527218041 I0407 13:05:40.168915 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-128.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:05:40.168942 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-128.nip.io-tls" condition "Issuing" to 2026-04-07 13:05:40.168937514 +0000 UTC m=+332.527640035 I0407 13:05:40.188459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-128.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-128.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.188599 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-128.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:05:40.188627 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-128.nip.io-tls" condition "Issuing" to 2026-04-07 13:05:40.18861948 +0000 UTC m=+332.547321991 I0407 13:05:40.706784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-128.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-128.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.714275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-128.nip.io-tls-9f6lj" condition "Approved" to 2026-04-07 13:05:40.714264372 +0000 UTC m=+333.072966913 I0407 13:05:40.739105 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-128.nip.io-tls-9f6lj" condition "Ready" to 2026-04-07 13:05:40.739091642 +0000 UTC m=+333.097794183 I0407 13:05:40.777154 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-128.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:40.777142573 +0000 UTC m=+333.135845094 I0407 13:05:40.802023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-128.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-128.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.850788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-128.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-128.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:53.184288 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:06:53.184298 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 13:06:53.184246806 +0000 UTC m=+405.542949347 I0407 13:06:53.184326 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 13:06:53.184318259 +0000 UTC m=+405.543020770 E0407 13:06:53.196287 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:06:53.196335 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 13:06:53.196327222 +0000 UTC m=+405.555029743 E0407 13:06:53.196376 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:06:53.198834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:53.199015 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 13:06:53.199003058 +0000 UTC m=+405.557705589 E0407 13:06:53.209847 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 13:06:53.209993 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:06:53.210054 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:06:53.210132 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 13:06:53.213986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:53.235929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xzhn6" condition "Approved" to 2026-04-07 13:06:53.235912386 +0000 UTC m=+405.594614937 I0407 13:06:53.249064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xzhn6" condition "Ready" to 2026-04-07 13:06:53.249053416 +0000 UTC m=+405.607755937 I0407 13:06:53.273076 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:53.273066033 +0000 UTC m=+405.631768554 I0407 13:06:53.293365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:53.293617 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:53.293609879 +0000 UTC m=+405.652312390 I0407 13:06:53.296833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:53.307336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:53.307595 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:53.307586796 +0000 UTC m=+405.666289317 I0407 13:06:58.210399 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:58.210384133 +0000 UTC m=+410.569086684 I0407 13:07:35.956576 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 13:07:35.9565608 +0000 UTC m=+448.315263331 I0407 13:07:35.956896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:35.957204 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 13:07:35.957199621 +0000 UTC m=+448.315902142 I0407 13:07:35.956963 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 13:07:35.956955363 +0000 UTC m=+448.315657884 I0407 13:07:35.956990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:35.957452 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 13:07:35.957446978 +0000 UTC m=+448.316149499 I0407 13:07:35.958318 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 13:07:35.958308736 +0000 UTC m=+448.317011257 I0407 13:07:35.958372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:35.958412 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 13:07:35.958404479 +0000 UTC m=+448.317106990 I0407 13:07:35.990451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:35.990460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:35.990534 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:35.990553 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 13:07:35.990547475 +0000 UTC m=+448.349249976 I0407 13:07:35.990703 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 13:07:35.99069738 +0000 UTC m=+448.349399891 I0407 13:07:35.997568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:35.997923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:35.997987 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 13:07:35.997979143 +0000 UTC m=+448.356681654 I0407 13:07:36.100925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:36.106760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-29x2m" condition "Approved" to 2026-04-07 13:07:36.106750477 +0000 UTC m=+448.465452988 I0407 13:07:36.125281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-29x2m" condition "Ready" to 2026-04-07 13:07:36.125269608 +0000 UTC m=+448.483972129 I0407 13:07:36.152952 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:36.152941992 +0000 UTC m=+448.511644503 I0407 13:07:36.174523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:36.174888 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:36.174881753 +0000 UTC m=+448.533584274 I0407 13:07:36.195791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:36.220455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:36.265253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-q5zdt" condition "Approved" to 2026-04-07 13:07:36.265236149 +0000 UTC m=+448.623938670 I0407 13:07:36.280704 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-q5zdt" condition "Ready" to 2026-04-07 13:07:36.280688962 +0000 UTC m=+448.639391483 I0407 13:07:36.440675 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:36.440664071 +0000 UTC m=+448.799366582 E0407 13:07:36.448611 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-5g6wn\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0407 13:07:36.596797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:36.597036 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:36.597030335 +0000 UTC m=+448.955732846 I0407 13:07:36.952696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tfxk7" condition "Approved" to 2026-04-07 13:07:36.952679694 +0000 UTC m=+449.311382215 I0407 13:07:37.008752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:37.297588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tfxk7" condition "Ready" to 2026-04-07 13:07:37.29757499 +0000 UTC m=+449.656277511 E0407 13:07:37.492322 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-hmjj2\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0407 13:07:37.803569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:37.804632 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-tfxk7" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-nrdqj" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0407 13:07:37.902879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vdp5q" condition "Approved" to 2026-04-07 13:07:37.902858701 +0000 UTC m=+450.261561242 I0407 13:07:38.158565 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vdp5q" condition "Ready" to 2026-04-07 13:07:38.158550708 +0000 UTC m=+450.517253259 I0407 13:07:38.529027 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:38.52901445 +0000 UTC m=+450.887716971 I0407 13:07:38.547921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:38.548174 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:38.548168502 +0000 UTC m=+450.906871023 I0407 13:07:38.800633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:38.850777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:44.300349 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls" condition "Ready" to 2026-04-07 13:07:44.300319677 +0000 UTC m=+456.659022198 I0407 13:07:44.300607 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:44.300659 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls" condition "Issuing" to 2026-04-07 13:07:44.300646847 +0000 UTC m=+456.659349388 I0407 13:07:44.322261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:44.322343 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls" condition "Ready" to 2026-04-07 13:07:44.32233595 +0000 UTC m=+456.681038471 I0407 13:07:44.408187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:44.439260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f9wqq-2xks5" condition "Approved" to 2026-04-07 13:07:44.439248074 +0000 UTC m=+456.797950585 I0407 13:07:44.462546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f9wqq-2xks5" condition "Ready" to 2026-04-07 13:07:44.462534588 +0000 UTC m=+456.821237109 I0407 13:07:44.494486 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:44.494467838 +0000 UTC m=+456.853170369 I0407 13:07:44.511257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:44.511691 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:44.511664667 +0000 UTC m=+456.870367188 I0407 13:07:44.522994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:44.531348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f9wqq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:08:12.614590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:08:12.614626 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 13:08:12.61461952 +0000 UTC m=+484.973322031 I0407 13:08:12.614983 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 13:08:12.614977981 +0000 UTC m=+484.973680492 I0407 13:08:12.631877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:08:12.631973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:08:12.631998 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 13:08:12.631989571 +0000 UTC m=+484.990692092 I0407 13:08:12.797346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-95zk2" condition "Approved" to 2026-04-07 13:08:12.797329264 +0000 UTC m=+485.156031785 I0407 13:08:12.815684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-95zk2" condition "Ready" to 2026-04-07 13:08:12.815667485 +0000 UTC m=+485.174370006 I0407 13:08:12.846750 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:08:12.846735241 +0000 UTC m=+485.205437752 I0407 13:08:12.868938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:08:12.869539 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:08:12.869529114 +0000 UTC m=+485.228231635 I0407 13:08:12.878566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:08:12.889839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:11:38.231570 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:11:38.231643 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 13:11:38.2316363 +0000 UTC m=+690.590338821 I0407 13:11:38.231636 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 13:11:38.231586868 +0000 UTC m=+690.590289419 I0407 13:11:38.250898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:11:38.251020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:11:38.251046 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 13:11:38.25103908 +0000 UTC m=+690.609741601 I0407 13:11:38.542249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:11:38.548102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-h45zz" condition "Approved" to 2026-04-07 13:11:38.546525342 +0000 UTC m=+690.905227853 I0407 13:11:38.565802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-h45zz" condition "Ready" to 2026-04-07 13:11:38.565792178 +0000 UTC m=+690.924494699 I0407 13:11:38.608023 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:11:38.608015627 +0000 UTC m=+690.966718138 I0407 13:11:38.635282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:11:38.686751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:14:18.613258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:14:18.613308 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 13:14:18.613304261 +0000 UTC m=+850.972006772 I0407 13:14:18.613290 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 13:14:18.613239509 +0000 UTC m=+850.971942060 I0407 13:14:18.633079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:14:18.633160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:14:18.633177 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 13:14:18.633169096 +0000 UTC m=+850.991871607 I0407 13:14:18.837769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-ht8gz" condition "Approved" to 2026-04-07 13:14:18.837748685 +0000 UTC m=+851.196451196 I0407 13:14:18.860309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-ht8gz" condition "Ready" to 2026-04-07 13:14:18.860293164 +0000 UTC m=+851.218995685 I0407 13:14:18.890496 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:14:18.890483385 +0000 UTC m=+851.249185906 I0407 13:14:18.912786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:14:18.963873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:15:30.586202 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:15:30.586222 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 13:15:30.586190841 +0000 UTC m=+922.944893402 I0407 13:15:30.586255 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 13:15:30.586246753 +0000 UTC m=+922.944949274 I0407 13:15:30.611922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:15:30.612041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:15:30.612173 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 13:15:30.612164604 +0000 UTC m=+922.970867115 I0407 13:15:30.772884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:15:30.781009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-pwh69" condition "Approved" to 2026-04-07 13:15:30.780991868 +0000 UTC m=+923.139694399 I0407 13:15:30.801018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-pwh69" condition "Ready" to 2026-04-07 13:15:30.80100355 +0000 UTC m=+923.159706071 I0407 13:15:30.846842 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:15:30.846829249 +0000 UTC m=+923.205531770 I0407 13:15:30.876033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:15:30.876342 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:15:30.876334415 +0000 UTC m=+923.235036936 I0407 13:15:30.902528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:18:33.001870 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 13:18:33.00184362 +0000 UTC m=+1105.360546181 I0407 13:18:33.001994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:18:33.002083 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 13:18:33.002072777 +0000 UTC m=+1105.360775318 I0407 13:18:33.023722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:18:33.023812 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 13:18:33.023801297 +0000 UTC m=+1105.382503848 I0407 13:18:33.188047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:18:33.216452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mb78c" condition "Approved" to 2026-04-07 13:18:33.216439935 +0000 UTC m=+1105.575142456 I0407 13:18:33.234200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mb78c" condition "Ready" to 2026-04-07 13:18:33.234185336 +0000 UTC m=+1105.592887877 I0407 13:18:33.260846 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:18:33.260834843 +0000 UTC m=+1105.619537364 I0407 13:18:33.280311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:18:33.331337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"