I0320 10:15:42.593797 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0320 10:15:42.593980 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0320 10:15:42.594248 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0320 10:15:42.598771 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0320 10:15:42.599182 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0320 10:15:42.599233 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0320 10:15:42.599293 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0320 10:15:42.601860 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0320 10:15:42.618775 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0320 10:15:42.619034 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0320 10:15:42.623507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0320 10:15:42.629648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0320 10:15:42.633238 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0320 10:15:42.637351 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0320 10:15:42.639520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0320 10:15:42.641285 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0320 10:15:42.643127 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0320 10:15:42.645552 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0320 10:15:42.650475 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0320 10:15:42.653914 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0320 10:15:42.656595 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0320 10:15:42.659148 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0320 10:15:42.661602 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0320 10:15:42.664424 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0320 10:15:42.664463 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0320 10:15:42.664537 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0320 10:15:42.666408 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0320 10:15:42.666570 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0320 10:15:42.668219 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0320 10:15:42.668237 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0320 10:15:42.668366 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0320 10:15:42.670391 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0320 10:15:42.673886 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0320 10:15:42.677894 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:15:42.678541 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:15:42.678561 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:15:42.679383 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:15:42.702191 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:15:42.716394 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:15:42.721972 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:15:42.741992 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:15:42.761127 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:15:42.776315 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0320 10:15:56.594377 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-20 10:15:56.594362295 +0000 UTC m=+14.037118071 I0320 10:15:57.274305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:15:57.274396 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-20 10:15:57.274383442 +0000 UTC m=+14.717139238 I0320 10:15:57.274509 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-20 10:15:57.274492365 +0000 UTC m=+14.717248141 E0320 10:15:57.288233 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0320 10:15:57.288321 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-20 10:15:57.28830952 +0000 UTC m=+14.731065296 E0320 10:15:57.288358 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0320 10:15:57.291098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:57.291170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:15:57.291189 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-20 10:15:57.291185138 +0000 UTC m=+14.733940914 E0320 10:15:57.300963 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0320 10:15:57.301160 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 10:15:57.301356 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 10:15:57.301431 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0320 10:15:57.333781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:57.334865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-545td" condition "Approved" to 2026-03-20 10:15:57.334842827 +0000 UTC m=+14.777598633 I0320 10:15:57.348488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-545td" condition "Ready" to 2026-03-20 10:15:57.348473238 +0000 UTC m=+14.791229014 I0320 10:15:57.376183 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:15:57.37615954 +0000 UTC m=+14.818915346 I0320 10:15:57.397653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:57.397976 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:15:57.397947683 +0000 UTC m=+14.840703459 I0320 10:15:57.401251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:57.428300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:15:57.428473 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:15:57.428464272 +0000 UTC m=+14.871220038 I0320 10:15:57.432177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:16:02.301686 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:16:02.301668784 +0000 UTC m=+19.744424590 I0320 10:16:27.561072 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-20 10:16:27.561051814 +0000 UTC m=+45.003807620 I0320 10:16:27.561497 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:16:27.561550 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-20 10:16:27.561538475 +0000 UTC m=+45.004294281 I0320 10:16:27.576457 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-20 10:16:27.576427928 +0000 UTC m=+45.019183714 I0320 10:16:27.586053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:16:27.586268 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:16:27.586307 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-20 10:16:27.586296006 +0000 UTC m=+45.029051812 I0320 10:16:27.822413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:16:27.832803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jtpvr" condition "Approved" to 2026-03-20 10:16:27.832782958 +0000 UTC m=+45.275538764 I0320 10:16:27.860734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jtpvr" condition "Ready" to 2026-03-20 10:16:27.860717086 +0000 UTC m=+45.303472892 I0320 10:16:27.890090 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:16:27.890075473 +0000 UTC m=+45.332831269 I0320 10:16:27.911695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:16:27.911987 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:16:27.911980554 +0000 UTC m=+45.354736330 I0320 10:16:27.974206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:18:41.841878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:18:41.841950 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-20 10:18:41.841942413 +0000 UTC m=+179.284698209 I0320 10:18:41.842346 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-20 10:18:41.84229278 +0000 UTC m=+179.285048556 E0320 10:18:41.860123 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0320 10:18:41.860188 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-20 10:18:41.860179525 +0000 UTC m=+179.302935301 I0320 10:18:41.860257 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0320 10:18:41.863629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:18:41.863702 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-20 10:18:41.863697779 +0000 UTC m=+179.306453545 E0320 10:18:41.872063 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0320 10:18:41.872205 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0320 10:18:41.872238 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-20 10:18:41.872225407 +0000 UTC m=+179.314981183 I0320 10:18:41.872334 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:18:41.872374 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-20 10:18:41.8723644 +0000 UTC m=+179.315120176 I0320 10:18:41.872249 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0320 10:18:41.872554 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0320 10:18:41.885206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:18:41.885267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:18:41.885280 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-20 10:18:41.88527653 +0000 UTC m=+179.328032296 I0320 10:18:42.153487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:18:42.183547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-9h8d9" condition "Approved" to 2026-03-20 10:18:42.183527823 +0000 UTC m=+179.626283619 I0320 10:18:42.206554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-9h8d9" condition "Ready" to 2026-03-20 10:18:42.206542204 +0000 UTC m=+179.649297980 I0320 10:18:42.235144 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:18:42.235134143 +0000 UTC m=+179.677889919 I0320 10:18:42.253955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:18:42.297266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:18:42.506638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:18:42.516318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-v2bkz" condition "Approved" to 2026-03-20 10:18:42.516300857 +0000 UTC m=+179.959056663 I0320 10:18:42.532880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-v2bkz" condition "Ready" to 2026-03-20 10:18:42.532868454 +0000 UTC m=+179.975624230 I0320 10:18:46.873591 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:18:46.873577282 +0000 UTC m=+184.316333078 I0320 10:18:46.892020 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-v2bkz" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:18:46.892011337 +0000 UTC m=+184.334767113 I0320 10:18:46.927322 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:18:46.927290996 +0000 UTC m=+184.370046812 I0320 10:18:46.948451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:18:46.949037 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:18:46.949025281 +0000 UTC m=+184.391781087 I0320 10:18:46.965750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:21:27.022530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-86.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:21:27.022576 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-86.nip.io-tls" condition "Issuing" to 2026-03-20 10:21:27.022565827 +0000 UTC m=+344.465321623 I0320 10:21:27.023115 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-86.nip.io-tls" condition "Ready" to 2026-03-20 10:21:27.023106818 +0000 UTC m=+344.465862624 I0320 10:21:27.041033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-86.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-86.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:21:27.041105 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-86.nip.io-tls" condition "Ready" to 2026-03-20 10:21:27.041095496 +0000 UTC m=+344.483851282 I0320 10:21:27.254653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-86.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-86.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:21:27.290728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-86.nip.io-tls-nrd42" condition "Approved" to 2026-03-20 10:21:27.29071357 +0000 UTC m=+344.733469376 I0320 10:21:27.310758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-86.nip.io-tls-nrd42" condition "Ready" to 2026-03-20 10:21:27.310741509 +0000 UTC m=+344.753497315 I0320 10:21:27.334327 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-86.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:21:27.334318952 +0000 UTC m=+344.777074728 I0320 10:21:27.350467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-86.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-86.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:21:27.389596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-86.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-86.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:22:40.389669 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-20 10:22:40.389639407 +0000 UTC m=+417.832395183 I0320 10:22:40.389738 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:22:40.389781 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-20 10:22:40.38976975 +0000 UTC m=+417.832525556 E0320 10:22:40.402578 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0320 10:22:40.402674 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-20 10:22:40.4026662 +0000 UTC m=+417.845421976 E0320 10:22:40.402824 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0320 10:22:40.405287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:22:40.405360 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-20 10:22:40.405348629 +0000 UTC m=+417.848104405 E0320 10:22:40.457585 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0320 10:22:40.457717 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 10:22:40.457921 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0320 10:22:40.458007 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0320 10:22:40.461777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:22:40.528516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-v8h79" condition "Approved" to 2026-03-20 10:22:40.528503483 +0000 UTC m=+417.971259259 I0320 10:22:40.550113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-v8h79" condition "Ready" to 2026-03-20 10:22:40.550099481 +0000 UTC m=+417.992855277 I0320 10:22:40.730680 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:22:40.730654872 +0000 UTC m=+418.173410648 I0320 10:22:40.747446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:22:40.747744 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:22:40.747726933 +0000 UTC m=+418.190482709 I0320 10:22:40.765449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:22:45.458426 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:22:45.458414548 +0000 UTC m=+422.901170314 I0320 10:23:23.916468 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-20 10:23:23.916458694 +0000 UTC m=+461.359214450 I0320 10:23:23.916751 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:23:23.916768 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-20 10:23:23.916765261 +0000 UTC m=+461.359521027 I0320 10:23:23.923130 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-20 10:23:23.923110918 +0000 UTC m=+461.365866724 I0320 10:23:23.923728 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:23:23.923761 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-20 10:23:23.923755212 +0000 UTC m=+461.366510988 I0320 10:23:23.925514 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:23:23.925554 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-20 10:23:23.925547871 +0000 UTC m=+461.368303647 I0320 10:23:23.925559 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-20 10:23:23.925550231 +0000 UTC m=+461.368306027 I0320 10:23:23.946391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:23.946433 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-20 10:23:23.946428805 +0000 UTC m=+461.389184571 I0320 10:23:23.946692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:23.946722 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-20 10:23:23.946719481 +0000 UTC m=+461.389475247 I0320 10:23:23.947186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:23.947263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:23:23.947293 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-20 10:23:23.947285253 +0000 UTC m=+461.390041029 I0320 10:23:24.103969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:24.134784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4dd25" condition "Approved" to 2026-03-20 10:23:24.134765224 +0000 UTC m=+461.577521020 I0320 10:23:24.155690 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-4dd25" condition "Ready" to 2026-03-20 10:23:24.155675478 +0000 UTC m=+461.598431274 I0320 10:23:24.183552 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:23:24.183532463 +0000 UTC m=+461.626288269 I0320 10:23:24.214041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:24.214452 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:23:24.214442814 +0000 UTC m=+461.657198590 I0320 10:23:24.228369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:24.229099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" E0320 10:23:24.240356 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-fjj2w\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0320 10:23:24.253632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:24.254068 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:23:24.254056135 +0000 UTC m=+461.696811921 I0320 10:23:24.263796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-48vgq" condition "Approved" to 2026-03-20 10:23:24.263784436 +0000 UTC m=+461.706540212 I0320 10:23:24.280529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-48vgq" condition "Ready" to 2026-03-20 10:23:24.280518729 +0000 UTC m=+461.723274495 E0320 10:23:24.496869 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-df429\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0320 10:23:24.550543 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:23:24.550529942 +0000 UTC m=+461.993285718 I0320 10:23:24.703885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:24.704399 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:23:24.704391903 +0000 UTC m=+462.147147679 I0320 10:23:25.110847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-j7jbg" condition "Approved" to 2026-03-20 10:23:25.110825718 +0000 UTC m=+462.553581524 I0320 10:23:25.149976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:25.227086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:25.460862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-j7jbg" condition "Ready" to 2026-03-20 10:23:25.460851707 +0000 UTC m=+462.903607483 I0320 10:23:25.849408 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-j7jbg" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-zg2hz" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0320 10:23:25.901917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:26.067814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7nh4r" condition "Approved" to 2026-03-20 10:23:26.067799296 +0000 UTC m=+463.510555062 I0320 10:23:26.437879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7nh4r" condition "Ready" to 2026-03-20 10:23:26.437860102 +0000 UTC m=+463.880615908 I0320 10:23:26.954211 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:23:26.954197773 +0000 UTC m=+464.396953549 I0320 10:23:26.975860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:27.026276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:35.881938 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:23:35.881971 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls" condition "Issuing" to 2026-03-20 10:23:35.881964896 +0000 UTC m=+473.324720662 I0320 10:23:35.882023 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls" condition "Ready" to 2026-03-20 10:23:35.882006477 +0000 UTC m=+473.324762253 I0320 10:23:35.895875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:35.896001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:23:35.896036 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls" condition "Issuing" to 2026-03-20 10:23:35.896026531 +0000 UTC m=+473.338782337 I0320 10:23:36.077140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:36.084730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dvvfl-m6mtr" condition "Approved" to 2026-03-20 10:23:36.084715388 +0000 UTC m=+473.527471144 I0320 10:23:36.104879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dvvfl-m6mtr" condition "Ready" to 2026-03-20 10:23:36.104867046 +0000 UTC m=+473.547622822 I0320 10:23:36.135614 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:23:36.135599653 +0000 UTC m=+473.578355429 I0320 10:23:36.154709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:36.155156 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:23:36.155147388 +0000 UTC m=+473.597903194 I0320 10:23:36.164300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:23:36.170845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dvvfl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:24:15.438612 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-20 10:24:15.438592438 +0000 UTC m=+512.881348234 I0320 10:24:15.438682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:24:15.438710 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-20 10:24:15.438702321 +0000 UTC m=+512.881458097 I0320 10:24:15.455447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:24:15.455515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:24:15.455531 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-20 10:24:15.455523952 +0000 UTC m=+512.898279728 I0320 10:24:15.767250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:24:15.775769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n25nc" condition "Approved" to 2026-03-20 10:24:15.775731668 +0000 UTC m=+513.218487454 I0320 10:24:15.793903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-n25nc" condition "Ready" to 2026-03-20 10:24:15.79389202 +0000 UTC m=+513.236647796 I0320 10:24:15.824080 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:24:15.824064622 +0000 UTC m=+513.266820428 I0320 10:24:15.842646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:24:15.843074 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:24:15.843061563 +0000 UTC m=+513.285817339 I0320 10:24:15.853463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:24:15.866472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:28:01.728170 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-20 10:28:01.728124259 +0000 UTC m=+739.170880045 I0320 10:28:01.728749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:28:01.728778 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-20 10:28:01.728772354 +0000 UTC m=+739.171528130 I0320 10:28:01.819225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:28:01.819309 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:28:01.819332 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-20 10:28:01.81932336 +0000 UTC m=+739.262079146 I0320 10:28:02.164738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jrgsf" condition "Approved" to 2026-03-20 10:28:02.164726177 +0000 UTC m=+739.607481963 I0320 10:28:02.207710 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jrgsf" condition "Ready" to 2026-03-20 10:28:02.207698611 +0000 UTC m=+739.650454387 I0320 10:28:02.238763 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:28:02.238741153 +0000 UTC m=+739.681496959 I0320 10:28:02.265289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:28:02.265604 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:28:02.265596687 +0000 UTC m=+739.708352463 I0320 10:28:02.293363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:31:15.171962 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:31:15.172031 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-20 10:31:15.172024429 +0000 UTC m=+932.614780235 I0320 10:31:15.172022 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-20 10:31:15.172004849 +0000 UTC m=+932.614760665 I0320 10:31:15.373862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:31:15.373986 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-20 10:31:15.373978343 +0000 UTC m=+932.816734119 I0320 10:31:15.815992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:31:16.199094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-bctbf" condition "Approved" to 2026-03-20 10:31:16.199064587 +0000 UTC m=+933.641820363 I0320 10:31:16.638957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-bctbf" condition "Ready" to 2026-03-20 10:31:16.638942917 +0000 UTC m=+934.081698723 I0320 10:31:17.831653 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:31:17.831630638 +0000 UTC m=+935.274386444 I0320 10:31:17.905926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:31:17.907057 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:31:17.907046604 +0000 UTC m=+935.349802410 I0320 10:31:18.033381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:33:32.687600 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:33:32.687651 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-20 10:33:32.687645031 +0000 UTC m=+1070.130400797 I0320 10:33:32.687991 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-20 10:33:32.687986529 +0000 UTC m=+1070.130742295 I0320 10:33:32.714190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:33:32.714280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:33:32.714302 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-20 10:33:32.714296577 +0000 UTC m=+1070.157052343 I0320 10:33:32.938794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vq9ff" condition "Approved" to 2026-03-20 10:33:32.938782549 +0000 UTC m=+1070.381538325 I0320 10:33:32.962777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vq9ff" condition "Ready" to 2026-03-20 10:33:32.962762172 +0000 UTC m=+1070.405517968 I0320 10:33:32.998069 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:33:32.998052781 +0000 UTC m=+1070.440808587 I0320 10:33:33.016261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:33:33.016690 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:33:33.016681838 +0000 UTC m=+1070.459437624 I0320 10:33:33.035397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:37:29.835636 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:37:29.835685 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-20 10:37:29.835681428 +0000 UTC m=+1307.278437194 I0320 10:37:29.835667 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-20 10:37:29.835659647 +0000 UTC m=+1307.278415413 I0320 10:37:29.855358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:37:29.855446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0320 10:37:29.855465 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-20 10:37:29.855459043 +0000 UTC m=+1307.298214819 I0320 10:37:30.256955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-hsrmr" condition "Approved" to 2026-03-20 10:37:30.256903558 +0000 UTC m=+1307.699659364 I0320 10:37:30.280114 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-hsrmr" condition "Ready" to 2026-03-20 10:37:30.280074173 +0000 UTC m=+1307.722829949 I0320 10:37:30.320137 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:37:30.320121076 +0000 UTC m=+1307.762876852 I0320 10:37:30.353806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:37:30.355957 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-20 10:37:30.355946609 +0000 UTC m=+1307.798702405 I0320 10:37:30.364727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0320 10:37:30.382042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"