I0420 02:06:12.982830 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 02:06:12.982906 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 02:06:12.982945 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 02:06:12.985043 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 02:06:12.985332 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 02:06:12.985408 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 02:06:12.985555 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 02:06:12.987087 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 02:06:13.003947 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 02:06:13.007519 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 02:06:13.007661 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 02:06:13.010351 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 02:06:13.015288 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 02:06:13.018088 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 02:06:13.020544 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 02:06:13.023509 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 02:06:13.026082 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 02:06:13.027795 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 02:06:13.029511 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 02:06:13.031271 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 02:06:13.031300 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 02:06:13.031380 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 02:06:13.037314 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 02:06:13.037381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 02:06:13.041282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 02:06:13.045137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 02:06:13.047915 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 02:06:13.049694 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 02:06:13.049714 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 02:06:13.049827 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 02:06:13.051614 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 02:06:13.053593 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 02:06:13.058294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 02:06:13.059284 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:06:13.062640 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:06:13.062832 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:06:13.063389 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:06:13.063499 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:06:13.063769 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:06:13.063809 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:06:13.063859 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:06:13.064083 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:06:13.141277 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:06:26.229561 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 02:06:26.229547495 +0000 UTC m=+13.278400037 I0420 02:06:26.925222 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:06:26.925272 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 02:06:26.925261268 +0000 UTC m=+13.974113840 I0420 02:06:26.926433 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 02:06:26.926424826 +0000 UTC m=+13.975277398 E0420 02:06:26.940394 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 02:06:26.940518 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 02:06:26.940507164 +0000 UTC m=+13.989359736 E0420 02:06:26.940578 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 02:06:26.942981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:06:26.943045 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 02:06:26.943039497 +0000 UTC m=+13.991892039 E0420 02:06:26.954925 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 02:06:26.955079 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:06:26.955152 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:06:26.955209 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 02:06:26.961016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:06:26.982011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b4pqn" condition "Approved" to 2026-04-20 02:06:26.981994495 +0000 UTC m=+14.030847067 I0420 02:06:26.992826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b4pqn" condition "Ready" to 2026-04-20 02:06:26.992815358 +0000 UTC m=+14.041667900 I0420 02:06:27.013350 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:06:27.013335415 +0000 UTC m=+14.062187987 I0420 02:06:27.028332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:06:27.028681 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:06:27.028673965 +0000 UTC m=+14.077526507 I0420 02:06:27.045383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:06:27.045935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:06:31.955695 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:06:31.955671977 +0000 UTC m=+19.004524509 I0420 02:06:55.330918 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 02:06:55.33089882 +0000 UTC m=+42.379751382 I0420 02:06:55.331232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:06:55.331313 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 02:06:55.331298033 +0000 UTC m=+42.380150605 I0420 02:06:55.404277 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 02:06:55.404257018 +0000 UTC m=+42.453109600 I0420 02:06:55.409318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:06:55.409415 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:06:55.409452 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 02:06:55.409443046 +0000 UTC m=+42.458295618 I0420 02:06:56.028820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:06:56.130545 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fh75x" condition "Approved" to 2026-04-20 02:06:56.130532637 +0000 UTC m=+43.179385199 I0420 02:06:56.294012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fh75x" condition "Ready" to 2026-04-20 02:06:56.293993144 +0000 UTC m=+43.342845686 I0420 02:06:56.380960 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:06:56.380945831 +0000 UTC m=+43.429798363 I0420 02:06:56.448641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:06:56.448853 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:06:56.448847154 +0000 UTC m=+43.497699686 I0420 02:06:56.638833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:37.877170 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 02:08:37.877111903 +0000 UTC m=+144.925964475 I0420 02:08:37.877722 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:08:37.877788 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 02:08:37.877775204 +0000 UTC m=+144.926627776 I0420 02:08:37.959539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:37.959675 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:08:37.959703 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 02:08:37.959696379 +0000 UTC m=+145.008548921 E0420 02:08:37.980926 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 02:08:37.981001 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 02:08:37.980989556 +0000 UTC m=+145.029842138 I0420 02:08:37.981077 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 02:08:37.991436 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 02:08:37.991424253 +0000 UTC m=+145.040276795 I0420 02:08:37.991471 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:08:37.991526 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 02:08:37.991518436 +0000 UTC m=+145.040370978 E0420 02:08:37.993071 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 02:08:37.993180 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 02:08:37.993373 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 02:08:37.993442 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 02:08:38.012998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:38.013153 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:08:38.013185 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 02:08:38.013177186 +0000 UTC m=+145.062029728 I0420 02:08:38.145347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:38.154519 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-hjmtt" condition "Approved" to 2026-04-20 02:08:38.154505588 +0000 UTC m=+145.203358130 I0420 02:08:38.180043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-hjmtt" condition "Ready" to 2026-04-20 02:08:38.180023692 +0000 UTC m=+145.228876264 I0420 02:08:38.209041 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:38.209022378 +0000 UTC m=+145.257874920 I0420 02:08:38.213771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6j2b9" condition "Approved" to 2026-04-20 02:08:38.213758461 +0000 UTC m=+145.262610993 I0420 02:08:38.229867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:38.230597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6j2b9" condition "Ready" to 2026-04-20 02:08:38.230584405 +0000 UTC m=+145.279436947 I0420 02:08:38.231744 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:38.23168471 +0000 UTC m=+145.280537262 I0420 02:08:38.240810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:38.249911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:38.250880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:38.251067 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:38.251061856 +0000 UTC m=+145.299914388 I0420 02:08:42.993644 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:42.993630102 +0000 UTC m=+150.042482674 I0420 02:08:43.011494 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-6j2b9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:43.011483008 +0000 UTC m=+150.060335550 I0420 02:08:43.039007 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:43.038986876 +0000 UTC m=+150.087839438 I0420 02:08:43.057862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:43.058257 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:43.058249248 +0000 UTC m=+150.107101790 I0420 02:08:43.065406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:43.072311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:08:43.072649 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:08:43.072639723 +0000 UTC m=+150.121492265 I0420 02:11:09.279325 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Ready" to 2026-04-20 02:11:09.279293141 +0000 UTC m=+296.328145703 I0420 02:11:09.279469 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-44.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:11:09.279521 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Issuing" to 2026-04-20 02:11:09.279509728 +0000 UTC m=+296.328362300 I0420 02:11:09.301045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:11:09.301370 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Ready" to 2026-04-20 02:11:09.301360864 +0000 UTC m=+296.350213426 I0420 02:11:09.463261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:11:09.487993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-44.nip.io-tls-trcf5" condition "Approved" to 2026-04-20 02:11:09.487976927 +0000 UTC m=+296.536829449 I0420 02:11:09.505687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-44.nip.io-tls-trcf5" condition "Ready" to 2026-04-20 02:11:09.50567444 +0000 UTC m=+296.554527012 I0420 02:11:09.527901 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:11:09.527892148 +0000 UTC m=+296.576744690 I0420 02:11:09.549574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:12:18.831951 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 02:12:18.831919805 +0000 UTC m=+365.880772377 I0420 02:12:18.832022 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:12:18.832066 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 02:12:18.83205445 +0000 UTC m=+365.880907022 E0420 02:12:18.847465 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 02:12:18.847531 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 02:12:18.847525362 +0000 UTC m=+365.896377904 E0420 02:12:18.847577 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 02:12:18.850992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:12:18.851058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:12:18.851085 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 02:12:18.851078975 +0000 UTC m=+365.899931517 E0420 02:12:18.858697 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 02:12:18.858819 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:12:18.858866 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:12:18.858913 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 02:12:18.893148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:12:18.893185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mdpcp" condition "Approved" to 2026-04-20 02:12:18.893136172 +0000 UTC m=+365.941988734 I0420 02:12:18.905718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mdpcp" condition "Ready" to 2026-04-20 02:12:18.905706162 +0000 UTC m=+365.954558724 I0420 02:12:18.929253 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:12:18.92923117 +0000 UTC m=+365.978083732 I0420 02:12:18.946530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:12:18.946916 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:12:18.946903742 +0000 UTC m=+365.995756314 I0420 02:12:18.963460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:12:18.963732 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:12:18.963723297 +0000 UTC m=+366.012575829 I0420 02:12:23.859444 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:12:23.859425469 +0000 UTC m=+370.908278031 I0420 02:13:01.418491 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 02:13:01.418476424 +0000 UTC m=+408.467328966 I0420 02:13:01.418953 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:13:01.418976 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 02:13:01.41897225 +0000 UTC m=+408.467824782 I0420 02:13:01.419341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:13:01.419366 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 02:13:01.419362003 +0000 UTC m=+408.468214535 I0420 02:13:01.419665 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 02:13:01.419659582 +0000 UTC m=+408.468512114 I0420 02:13:01.419929 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 02:13:01.41992467 +0000 UTC m=+408.468777202 I0420 02:13:01.420208 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:13:01.420229 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 02:13:01.42022299 +0000 UTC m=+408.469075522 I0420 02:13:01.441754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:01.441812 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:13:01.441827 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 02:13:01.441822917 +0000 UTC m=+408.490675449 I0420 02:13:01.458626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:01.458765 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 02:13:01.458753395 +0000 UTC m=+408.507605947 I0420 02:13:01.462235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:01.462325 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 02:13:01.462317189 +0000 UTC m=+408.511169721 I0420 02:13:01.599293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:01.633180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-d6b7k" condition "Approved" to 2026-04-20 02:13:01.633167002 +0000 UTC m=+408.682019574 I0420 02:13:01.659635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-d6b7k" condition "Ready" to 2026-04-20 02:13:01.659623084 +0000 UTC m=+408.708475626 I0420 02:13:01.687372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zjmgw" condition "Approved" to 2026-04-20 02:13:01.687352946 +0000 UTC m=+408.736205508 I0420 02:13:01.704534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zjmgw" condition "Ready" to 2026-04-20 02:13:01.704520852 +0000 UTC m=+408.753373394 I0420 02:13:01.717787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:13:01.717839 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 02:13:01.717830845 +0000 UTC m=+408.766683377 I0420 02:13:01.734169 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:01.734157164 +0000 UTC m=+408.783009696 I0420 02:13:01.743556 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:01.743544813 +0000 UTC m=+408.792397345 I0420 02:13:01.753816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:01.754495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:01.754632 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:01.754623155 +0000 UTC m=+408.803475697 I0420 02:13:01.808225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:01.808788 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:01.808778047 +0000 UTC m=+408.857630619 E0420 02:13:02.260239 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-h4hg4\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0420 02:13:02.314618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-25l6r" condition "Approved" to 2026-04-20 02:13:02.314600124 +0000 UTC m=+409.363452676 I0420 02:13:02.410022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:02.473254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:02.674497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-25l6r" condition "Ready" to 2026-04-20 02:13:02.674485729 +0000 UTC m=+409.723338261 I0420 02:13:03.167230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zvwxz" condition "Approved" to 2026-04-20 02:13:03.167218731 +0000 UTC m=+410.216071263 I0420 02:13:03.319544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zvwxz" condition "Ready" to 2026-04-20 02:13:03.319528954 +0000 UTC m=+410.368381516 I0420 02:13:03.658392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:04.075371 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:04.075351013 +0000 UTC m=+411.124203575 I0420 02:13:04.079140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:04.160445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:10.589764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:13:10.589834 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls" condition "Issuing" to 2026-04-20 02:13:10.589826588 +0000 UTC m=+417.638679150 I0420 02:13:10.589748 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls" condition "Ready" to 2026-04-20 02:13:10.589724965 +0000 UTC m=+417.638577527 I0420 02:13:10.604045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:10.604124 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls" condition "Ready" to 2026-04-20 02:13:10.604118263 +0000 UTC m=+417.652970805 I0420 02:13:10.693350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:10.725227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5t6hs-w2v6p" condition "Approved" to 2026-04-20 02:13:10.725211115 +0000 UTC m=+417.774063647 I0420 02:13:10.748483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-5t6hs-w2v6p" condition "Ready" to 2026-04-20 02:13:10.748442673 +0000 UTC m=+417.797295215 I0420 02:13:10.780320 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:10.780305867 +0000 UTC m=+417.829158409 I0420 02:13:10.803786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:10.804877 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:10.804866758 +0000 UTC m=+417.853719300 I0420 02:13:10.821222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:10.821615 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-5t6hs-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:10.82160663 +0000 UTC m=+417.870459172 I0420 02:13:44.011774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:13:44.011807 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 02:13:44.011799602 +0000 UTC m=+451.060652134 I0420 02:13:44.012241 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 02:13:44.012234306 +0000 UTC m=+451.061086838 I0420 02:13:44.025870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:44.025976 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 02:13:44.025966533 +0000 UTC m=+451.074819085 I0420 02:13:44.122170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:44.267140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-85mxv" condition "Approved" to 2026-04-20 02:13:44.267127164 +0000 UTC m=+451.315979706 I0420 02:13:44.288019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-85mxv" condition "Ready" to 2026-04-20 02:13:44.288001168 +0000 UTC m=+451.336853730 I0420 02:13:44.316774 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:44.316756752 +0000 UTC m=+451.365609294 I0420 02:13:44.335057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:44.335304 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:44.335296822 +0000 UTC m=+451.384149354 I0420 02:13:44.351899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:16:55.665002 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 02:16:55.664954405 +0000 UTC m=+642.713806977 I0420 02:16:55.665277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:16:55.665305 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 02:16:55.665297726 +0000 UTC m=+642.714150268 I0420 02:16:55.683969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:16:55.684042 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 02:16:55.684023269 +0000 UTC m=+642.732875801 I0420 02:16:55.819790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:16:55.852766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-n5zb2" condition "Approved" to 2026-04-20 02:16:55.852750384 +0000 UTC m=+642.901602916 I0420 02:16:55.868320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-n5zb2" condition "Ready" to 2026-04-20 02:16:55.868310937 +0000 UTC m=+642.917163469 I0420 02:16:55.896302 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:16:55.896289883 +0000 UTC m=+642.945142425 I0420 02:16:55.920519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:16:55.920843 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:16:55.920837491 +0000 UTC m=+642.969690023 I0420 02:16:55.942530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:19:18.758943 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:19:18.759001 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 02:19:18.758994471 +0000 UTC m=+785.807847013 I0420 02:19:18.759487 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 02:19:18.759480106 +0000 UTC m=+785.808332648 I0420 02:19:18.778493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:19:18.778623 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 02:19:18.778609962 +0000 UTC m=+785.827462504 I0420 02:19:18.985710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:19:19.015841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zlxv6" condition "Approved" to 2026-04-20 02:19:19.015831411 +0000 UTC m=+786.064683953 I0420 02:19:19.031648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zlxv6" condition "Ready" to 2026-04-20 02:19:19.031636813 +0000 UTC m=+786.080489355 I0420 02:19:19.055829 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:19:19.055814689 +0000 UTC m=+786.104667261 I0420 02:19:19.078218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:19:19.078729 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:19:19.078721095 +0000 UTC m=+786.127573637 I0420 02:19:19.103734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:19:19.104031 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:19:19.104021627 +0000 UTC m=+786.152874169 I0420 02:20:25.289321 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 02:20:25.289282215 +0000 UTC m=+852.338134787 I0420 02:20:25.289817 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:20:25.289888 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 02:20:25.289872844 +0000 UTC m=+852.338725416 I0420 02:20:25.309308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:20:25.309365 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 02:20:25.309359942 +0000 UTC m=+852.358212484 I0420 02:20:25.496793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:20:25.528418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-wtj8c" condition "Approved" to 2026-04-20 02:20:25.528407195 +0000 UTC m=+852.577259727 I0420 02:20:25.555018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-wtj8c" condition "Ready" to 2026-04-20 02:20:25.555006318 +0000 UTC m=+852.603858860 I0420 02:20:25.584241 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:20:25.584227894 +0000 UTC m=+852.633080426 I0420 02:20:25.611495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:20:25.611832 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:20:25.611823049 +0000 UTC m=+852.660675591 I0420 02:20:25.635916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:23:26.154079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:23:26.154163 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 02:23:26.154155502 +0000 UTC m=+1033.203008064 I0420 02:23:26.154077 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 02:23:26.154036028 +0000 UTC m=+1033.202888600 I0420 02:23:26.174526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:23:26.174645 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 02:23:26.174636251 +0000 UTC m=+1033.223488773 I0420 02:23:26.393898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:23:26.424822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-kbwnl" condition "Approved" to 2026-04-20 02:23:26.424811757 +0000 UTC m=+1033.473664299 I0420 02:23:26.445392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-kbwnl" condition "Ready" to 2026-04-20 02:23:26.445376169 +0000 UTC m=+1033.494228741 I0420 02:23:26.476650 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:23:26.476638359 +0000 UTC m=+1033.525490901 I0420 02:23:26.494164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:23:26.494482 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:23:26.494475895 +0000 UTC m=+1033.543328427 I0420 02:23:26.515830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"