I0417 05:58:48.175963 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0417 05:58:48.176374 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0417 05:58:48.176564 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0417 05:58:48.183999 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0417 05:58:48.184664 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0417 05:58:48.184746 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0417 05:58:48.184749 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0417 05:58:48.189062 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0417 05:58:48.205672 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0417 05:58:48.211070 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0417 05:58:48.215065 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0417 05:58:48.218771 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0417 05:58:48.218969 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0417 05:58:48.224702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0417 05:58:48.228504 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0417 05:58:48.231852 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0417 05:58:48.235542 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0417 05:58:48.235837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0417 05:58:48.239737 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0417 05:58:48.243846 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0417 05:58:48.247464 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0417 05:58:48.253834 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0417 05:58:48.258244 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0417 05:58:48.260396 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0417 05:58:48.260426 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0417 05:58:48.260552 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0417 05:58:48.262615 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0417 05:58:48.264563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0417 05:58:48.266477 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0417 05:58:48.268494 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0417 05:58:48.268512 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0417 05:58:48.268586 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0417 05:58:48.270809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0417 05:58:48.273705 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 05:58:48.277518 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 05:58:48.277839 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 05:58:48.298812 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 05:58:48.312281 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 05:58:48.335671 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 05:58:48.353456 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 05:58:48.362974 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 05:58:48.371247 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 05:58:48.393359 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0417 05:59:00.238201 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-17 05:59:00.238183056 +0000 UTC m=+12.100445549 I0417 05:59:00.967568 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-17 05:59:00.967550649 +0000 UTC m=+12.829813142 I0417 05:59:00.967969 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 05:59:00.968077 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 05:59:00.968065141 +0000 UTC m=+12.830327644 E0417 05:59:00.990058 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 05:59:00.990204 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-17 05:59:00.990190208 +0000 UTC m=+12.852452711 E0417 05:59:00.990264 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 05:59:00.991097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 05:59:00.991170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 05:59:00.991230 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-17 05:59:00.991185671 +0000 UTC m=+12.853448144 E0417 05:59:01.000444 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0417 05:59:01.000634 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 05:59:01.000691 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 05:59:01.000735 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0417 05:59:01.027685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 05:59:01.028643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2hjgg" condition "Approved" to 2026-04-17 05:59:01.028615303 +0000 UTC m=+12.890877766 I0417 05:59:01.041999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2hjgg" condition "Ready" to 2026-04-17 05:59:01.04198111 +0000 UTC m=+12.904243583 I0417 05:59:01.070398 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 05:59:01.070383426 +0000 UTC m=+12.932645889 I0417 05:59:01.086717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 05:59:01.087203 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 05:59:01.087189456 +0000 UTC m=+12.949451959 I0417 05:59:01.098675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 05:59:01.100088 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 05:59:01.100067172 +0000 UTC m=+12.962329655 I0417 05:59:01.103653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 05:59:06.001970 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 05:59:06.001954781 +0000 UTC m=+17.864217294 I0417 05:59:31.622164 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 05:59:31.622139317 +0000 UTC m=+43.484401800 I0417 05:59:31.622199 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 05:59:31.622246 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-17 05:59:31.62223497 +0000 UTC m=+43.484497433 I0417 05:59:31.635903 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-17 05:59:31.635885227 +0000 UTC m=+43.498147700 I0417 05:59:31.643874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 05:59:31.643965 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-17 05:59:31.64395429 +0000 UTC m=+43.506216753 I0417 05:59:32.038277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 05:59:32.078726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bg6t6" condition "Approved" to 2026-04-17 05:59:32.078710175 +0000 UTC m=+43.940972648 I0417 05:59:32.109902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-bg6t6" condition "Ready" to 2026-04-17 05:59:32.109882893 +0000 UTC m=+43.972145396 I0417 05:59:32.142058 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 05:59:32.142042505 +0000 UTC m=+44.004304978 I0417 05:59:32.164742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:01:32.461099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:01:32.461247 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-17 06:01:32.461232772 +0000 UTC m=+164.323495295 I0417 06:01:32.461571 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 06:01:32.461552759 +0000 UTC m=+164.323815232 E0417 06:01:32.480183 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 06:01:32.480255 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-17 06:01:32.48024802 +0000 UTC m=+164.342510493 I0417 06:01:32.480280 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 06:01:32.482068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:01:32.482168 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-17 06:01:32.482156907 +0000 UTC m=+164.344419410 E0417 06:01:32.491168 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0417 06:01:32.491329 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0417 06:01:32.491371 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0417 06:01:32.491444 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0417 06:01:32.495025 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-17 06:01:32.495016917 +0000 UTC m=+164.357279390 I0417 06:01:32.495054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:01:32.495075 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-17 06:01:32.495070008 +0000 UTC m=+164.357332481 I0417 06:01:32.513716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:01:32.513795 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-17 06:01:32.51378733 +0000 UTC m=+164.376049803 I0417 06:01:32.713416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:01:32.750684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6smb2" condition "Approved" to 2026-04-17 06:01:32.750658623 +0000 UTC m=+164.612921146 I0417 06:01:32.754695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:01:32.767505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-6smb2" condition "Ready" to 2026-04-17 06:01:32.767491969 +0000 UTC m=+164.629754442 I0417 06:01:32.785997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-q8wgg" condition "Approved" to 2026-04-17 06:01:32.785982206 +0000 UTC m=+164.648244679 I0417 06:01:32.813556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-q8wgg" condition "Ready" to 2026-04-17 06:01:32.813538301 +0000 UTC m=+164.675800774 I0417 06:01:32.842249 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:01:32.842235793 +0000 UTC m=+164.704498266 I0417 06:01:32.860781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:01:32.861093 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:01:32.861087328 +0000 UTC m=+164.723349791 I0417 06:01:32.866659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:01:32.878259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:01:32.878640 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:01:32.878629281 +0000 UTC m=+164.740891744 I0417 06:01:37.492189 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:01:37.492173598 +0000 UTC m=+169.354436091 I0417 06:01:37.512459 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-6smb2" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:01:37.512439146 +0000 UTC m=+169.374701639 I0417 06:01:37.549529 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:01:37.549517772 +0000 UTC m=+169.411780245 I0417 06:01:37.568456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:01:37.569056 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:01:37.569045742 +0000 UTC m=+169.431308235 I0417 06:01:37.585204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:01:37.585570 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:01:37.58556098 +0000 UTC m=+169.447823453 I0417 06:01:37.596105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:04:18.615641 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-04-17 06:04:18.615579605 +0000 UTC m=+330.477842098 I0417 06:04:18.616441 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:04:18.616544 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-04-17 06:04:18.616534648 +0000 UTC m=+330.478797151 I0417 06:04:18.638713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:04:18.638820 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:04:18.638855 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-04-17 06:04:18.638844313 +0000 UTC m=+330.501106816 I0417 06:04:18.754678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:04:18.760917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-vrqzw" condition "Approved" to 2026-04-17 06:04:18.760894413 +0000 UTC m=+330.623156916 I0417 06:04:18.778617 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-vrqzw" condition "Ready" to 2026-04-17 06:04:18.778605278 +0000 UTC m=+330.640867751 I0417 06:04:18.808746 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:04:18.808736092 +0000 UTC m=+330.670998565 I0417 06:04:18.831385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:04:18.878474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:05:29.563565 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 06:05:29.56353161 +0000 UTC m=+401.425794083 I0417 06:05:29.563832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:05:29.563886 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-17 06:05:29.563875419 +0000 UTC m=+401.426137912 I0417 06:05:29.576142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:05:29.576239 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-17 06:05:29.576233365 +0000 UTC m=+401.438495838 E0417 06:05:29.576582 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0417 06:05:29.576685 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-17 06:05:29.576672717 +0000 UTC m=+401.438935210 E0417 06:05:29.576751 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 06:05:29.588410 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0417 06:05:29.588569 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 06:05:29.588620 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0417 06:05:29.588669 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0417 06:05:29.592912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:05:29.649357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cqrn5" condition "Approved" to 2026-04-17 06:05:29.649341681 +0000 UTC m=+401.511604184 I0417 06:05:29.664344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cqrn5" condition "Ready" to 2026-04-17 06:05:29.664332341 +0000 UTC m=+401.526594814 I0417 06:05:29.686948 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:05:29.686930753 +0000 UTC m=+401.549193256 I0417 06:05:29.705383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:05:29.705767 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:05:29.705758696 +0000 UTC m=+401.568021169 I0417 06:05:29.713617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:05:29.720088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:05:34.589422 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:05:34.589402514 +0000 UTC m=+406.451665007 I0417 06:06:12.574138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:06:12.574200 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 06:06:12.57419254 +0000 UTC m=+444.436455013 I0417 06:06:12.574550 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 06:06:12.574545118 +0000 UTC m=+444.436807591 I0417 06:06:12.590692 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:06:12.590734 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-17 06:06:12.590725539 +0000 UTC m=+444.452988022 I0417 06:06:12.590925 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 06:06:12.590914053 +0000 UTC m=+444.453176506 I0417 06:06:12.594013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:06:12.594056 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-17 06:06:12.594047329 +0000 UTC m=+444.456309812 I0417 06:06:12.594249 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 06:06:12.594239854 +0000 UTC m=+444.456502327 I0417 06:06:12.606319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:12.606403 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-17 06:06:12.606395767 +0000 UTC m=+444.468658230 I0417 06:06:12.622420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:12.622494 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-17 06:06:12.622486004 +0000 UTC m=+444.484748477 I0417 06:06:12.627152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:12.627214 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-17 06:06:12.627207598 +0000 UTC m=+444.489470101 I0417 06:06:12.821216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:12.849844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mjk6f" condition "Approved" to 2026-04-17 06:06:12.849828491 +0000 UTC m=+444.712090964 I0417 06:06:12.866648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mjk6f" condition "Ready" to 2026-04-17 06:06:12.866638776 +0000 UTC m=+444.728901249 I0417 06:06:12.896925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:12.937664 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:06:12.937727 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-17 06:06:12.937719398 +0000 UTC m=+444.799981861 I0417 06:06:12.944130 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7blg8" condition "Approved" to 2026-04-17 06:06:12.944111052 +0000 UTC m=+444.806373525 I0417 06:06:12.946314 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:06:12.946304065 +0000 UTC m=+444.808566518 I0417 06:06:12.967315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:12.967656 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:06:12.96764751 +0000 UTC m=+444.829909973 I0417 06:06:12.969648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7blg8" condition "Ready" to 2026-04-17 06:06:12.969636978 +0000 UTC m=+444.831899441 I0417 06:06:12.971068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:13.076024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4r64w" condition "Approved" to 2026-04-17 06:06:13.075999189 +0000 UTC m=+444.938261692 I0417 06:06:13.124328 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:06:13.124304974 +0000 UTC m=+444.986567467 I0417 06:06:13.532412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4r64w" condition "Ready" to 2026-04-17 06:06:13.532395225 +0000 UTC m=+445.394657698 I0417 06:06:13.622737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:13.670662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:14.133640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qj4zs" condition "Approved" to 2026-04-17 06:06:14.13361323 +0000 UTC m=+445.995875703 I0417 06:06:14.221598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:14.680522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qj4zs" condition "Ready" to 2026-04-17 06:06:14.680511875 +0000 UTC m=+446.542774338 I0417 06:06:15.073262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:15.123436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:15.172108 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:06:15.172085769 +0000 UTC m=+447.034348272 I0417 06:06:15.323245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:15.323832 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:06:15.323821654 +0000 UTC m=+447.186084147 I0417 06:06:15.522017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:20.740298 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-78bs7-tls" condition "Ready" to 2026-04-17 06:06:20.740274746 +0000 UTC m=+452.602537239 I0417 06:06:20.740375 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-78bs7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:06:20.740438 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-78bs7-tls" condition "Issuing" to 2026-04-17 06:06:20.740423019 +0000 UTC m=+452.602685522 I0417 06:06:20.756058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-78bs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-78bs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:20.756200 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-78bs7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:06:20.756252 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-78bs7-tls" condition "Issuing" to 2026-04-17 06:06:20.756240921 +0000 UTC m=+452.618503424 I0417 06:06:20.907430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-78bs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-78bs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:20.919773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-78bs7-bx9c2" condition "Approved" to 2026-04-17 06:06:20.919732269 +0000 UTC m=+452.781994762 I0417 06:06:20.940811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-78bs7-bx9c2" condition "Ready" to 2026-04-17 06:06:20.940798347 +0000 UTC m=+452.803060820 I0417 06:06:20.971812 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-78bs7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:06:20.971797544 +0000 UTC m=+452.834060017 I0417 06:06:20.994874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-78bs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-78bs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:20.995259 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-78bs7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:06:20.995249858 +0000 UTC m=+452.857512331 I0417 06:06:21.021112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-78bs7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-78bs7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:48.280989 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:06:48.281037 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 06:06:48.281027783 +0000 UTC m=+480.143290256 I0417 06:06:48.280988 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-17 06:06:48.28091606 +0000 UTC m=+480.143178553 I0417 06:06:48.301055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:06:48.301115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:06:48.301129 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-17 06:06:48.301123387 +0000 UTC m=+480.163385850 I0417 06:06:48.708372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nclb5" condition "Approved" to 2026-04-17 06:06:48.708355488 +0000 UTC m=+480.570617961 I0417 06:06:48.734151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-nclb5" condition "Ready" to 2026-04-17 06:06:48.734136859 +0000 UTC m=+480.596399332 I0417 06:06:48.767644 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:06:48.767630966 +0000 UTC m=+480.629893439 I0417 06:06:48.788600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:10:12.070877 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:10:12.070900 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-17 06:10:12.070881484 +0000 UTC m=+683.933143977 I0417 06:10:12.070954 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 06:10:12.070947125 +0000 UTC m=+683.933209598 I0417 06:10:12.089138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:10:12.089225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:10:12.089254 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-17 06:10:12.089245177 +0000 UTC m=+683.951507650 I0417 06:10:12.275305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vqjjz" condition "Approved" to 2026-04-17 06:10:12.275292981 +0000 UTC m=+684.137555454 I0417 06:10:12.295577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vqjjz" condition "Ready" to 2026-04-17 06:10:12.295562101 +0000 UTC m=+684.157824604 I0417 06:10:12.318123 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:10:12.318109956 +0000 UTC m=+684.180372429 I0417 06:10:12.351015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:10:12.351676 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:10:12.351665528 +0000 UTC m=+684.213928001 I0417 06:10:12.372069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:10:12.372103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:10:12.372348 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:10:12.372340248 +0000 UTC m=+684.234602721 I0417 06:12:36.110804 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-17 06:12:36.110759638 +0000 UTC m=+827.973022141 I0417 06:12:36.110871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:12:36.110965 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 06:12:36.110954883 +0000 UTC m=+827.973217376 I0417 06:12:36.129905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:12:36.130090 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:12:36.130151 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-17 06:12:36.130120847 +0000 UTC m=+827.992383330 I0417 06:12:36.289022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4g22t" condition "Approved" to 2026-04-17 06:12:36.288991473 +0000 UTC m=+828.151253946 I0417 06:12:36.313238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4g22t" condition "Ready" to 2026-04-17 06:12:36.31321985 +0000 UTC m=+828.175482323 I0417 06:12:36.348955 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:12:36.348939563 +0000 UTC m=+828.211202026 I0417 06:12:36.365107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:12:36.365482 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:12:36.365476474 +0000 UTC m=+828.227738947 I0417 06:12:36.385879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:13:44.087114 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-17 06:13:44.087099384 +0000 UTC m=+895.949361857 I0417 06:13:44.087645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:13:44.087696 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 06:13:44.087691668 +0000 UTC m=+895.949954141 I0417 06:13:44.103106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:13:44.103169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:13:44.103234 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-17 06:13:44.103226564 +0000 UTC m=+895.965489057 I0417 06:13:44.217574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:13:44.222071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-p6wgb" condition "Approved" to 2026-04-17 06:13:44.222062023 +0000 UTC m=+896.084324486 I0417 06:13:44.239784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-p6wgb" condition "Ready" to 2026-04-17 06:13:44.239768412 +0000 UTC m=+896.102030915 I0417 06:13:44.282527 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:13:44.282515987 +0000 UTC m=+896.144778460 I0417 06:13:44.297837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:13:44.298232 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:13:44.298225348 +0000 UTC m=+896.160487821 I0417 06:13:44.318044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:16:44.392923 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-17 06:16:44.392878525 +0000 UTC m=+1076.255141028 I0417 06:16:44.392992 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:16:44.393050 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 06:16:44.393042669 +0000 UTC m=+1076.255305172 I0417 06:16:44.409829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0417 06:16:44.409916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0417 06:16:44.409994 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-17 06:16:44.409936678 +0000 UTC m=+1076.272199141 I0417 06:16:44.616721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rsbrl" condition "Approved" to 2026-04-17 06:16:44.6166891 +0000 UTC m=+1076.478951593 I0417 06:16:44.632840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rsbrl" condition "Ready" to 2026-04-17 06:16:44.632828981 +0000 UTC m=+1076.495091434 I0417 06:16:44.661813 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-17 06:16:44.661801263 +0000 UTC m=+1076.524063736 I0417 06:16:44.684063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"