I0505 11:22:31.539556 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0505 11:22:31.539832 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0505 11:22:31.540010 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0505 11:22:31.545403 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0505 11:22:31.545815 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0505 11:22:31.545904 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0505 11:22:31.545924 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0505 11:22:31.548554 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0505 11:22:31.564213 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0505 11:22:31.568633 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0505 11:22:31.568838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0505 11:22:31.573517 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0505 11:22:31.577610 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0505 11:22:31.580534 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0505 11:22:31.580562 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0505 11:22:31.580622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0505 11:22:31.582473 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0505 11:22:31.584457 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0505 11:22:31.586042 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0505 11:22:31.586233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0505 11:22:31.587923 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0505 11:22:31.592622 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0505 11:22:31.596541 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0505 11:22:31.599921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0505 11:22:31.601567 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0505 11:22:31.601591 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0505 11:22:31.601619 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0505 11:22:31.603390 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0505 11:22:31.605141 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0505 11:22:31.606956 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0505 11:22:31.608604 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0505 11:22:31.611025 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0505 11:22:31.615656 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0505 11:22:31.618345 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:22:31.619073 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:22:31.619142 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:22:31.619326 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:22:31.619390 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:22:31.619414 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:22:31.619525 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:22:31.619993 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:22:31.620302 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:22:31.704332 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:22:45.034447 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-05 11:22:45.034432092 +0000 UTC m=+13.530812224 I0505 11:22:45.705018 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:22:45.705074 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 11:22:45.705063717 +0000 UTC m=+14.201443839 I0505 11:22:45.705014 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 11:22:45.704999905 +0000 UTC m=+14.201380027 I0505 11:22:45.724578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:45.724642 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 11:22:45.724634068 +0000 UTC m=+14.221014170 E0505 11:22:45.724790 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 11:22:45.724886 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-05 11:22:45.724878134 +0000 UTC m=+14.221258246 E0505 11:22:45.724915 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:22:45.736278 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0505 11:22:45.736723 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:22:45.736793 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:22:45.736845 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0505 11:22:45.739717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:45.759966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-z85gx" condition "Approved" to 2026-05-05 11:22:45.759942021 +0000 UTC m=+14.256322133 I0505 11:22:45.780274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-z85gx" condition "Ready" to 2026-05-05 11:22:45.780262302 +0000 UTC m=+14.276642404 I0505 11:22:45.803554 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:45.803543692 +0000 UTC m=+14.299923794 I0505 11:22:45.823210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:45.823759 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:45.823747009 +0000 UTC m=+14.320127131 I0505 11:22:45.827892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:45.837228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:45.837588 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:45.837576501 +0000 UTC m=+14.333956633 I0505 11:22:50.741457 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:50.741439973 +0000 UTC m=+19.237820105 I0505 11:23:08.538824 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 11:23:08.538805511 +0000 UTC m=+37.035185633 I0505 11:23:08.538995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:23:08.539273 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 11:23:08.539169261 +0000 UTC m=+37.035549393 I0505 11:23:08.558242 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-05 11:23:08.558225977 +0000 UTC m=+37.054606079 I0505 11:23:08.568596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:23:08.568697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:23:08.568743 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 11:23:08.568734441 +0000 UTC m=+37.065114553 I0505 11:23:08.845854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:23:08.854189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g9dvk" condition "Approved" to 2026-05-05 11:23:08.854175611 +0000 UTC m=+37.350555733 I0505 11:23:08.887317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g9dvk" condition "Ready" to 2026-05-05 11:23:08.887307053 +0000 UTC m=+37.383687145 I0505 11:23:08.917402 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:23:08.917387756 +0000 UTC m=+37.413767858 I0505 11:23:08.936569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:24:51.094774 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-05 11:24:51.094752452 +0000 UTC m=+139.591132604 I0505 11:24:51.094982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:24:51.095027 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-05 11:24:51.095018479 +0000 UTC m=+139.591398601 E0505 11:24:51.107877 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 11:24:51.107918 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-05 11:24:51.107911513 +0000 UTC m=+139.604291615 I0505 11:24:51.107954 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 11:24:51.110541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:24:51.110629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:24:51.110657 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-05 11:24:51.110647705 +0000 UTC m=+139.607027837 E0505 11:24:51.118105 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0505 11:24:51.118527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:24:51.118577 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-05 11:24:51.118566417 +0000 UTC m=+139.614946519 E0505 11:24:51.118614 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 11:24:51.118702 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0505 11:24:51.118862 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0505 11:24:51.118942 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-05 11:24:51.118926966 +0000 UTC m=+139.615307098 I0505 11:24:51.133183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:24:51.133299 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-05 11:24:51.133290569 +0000 UTC m=+139.629670661 I0505 11:24:51.224534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:24:51.258460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-mn9rv" condition "Approved" to 2026-05-05 11:24:51.258447375 +0000 UTC m=+139.754827477 I0505 11:24:51.273756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-mn9rv" condition "Ready" to 2026-05-05 11:24:51.273741022 +0000 UTC m=+139.770121124 I0505 11:24:51.337167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-rv7ft" condition "Approved" to 2026-05-05 11:24:51.337150472 +0000 UTC m=+139.833530604 I0505 11:24:51.369432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-rv7ft" condition "Ready" to 2026-05-05 11:24:51.369411542 +0000 UTC m=+139.865791674 I0505 11:24:51.397042 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:24:51.397023668 +0000 UTC m=+139.893403790 I0505 11:24:51.418386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:24:51.418768 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:24:51.418758997 +0000 UTC m=+139.915139099 I0505 11:24:51.422789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:24:51.436068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:24:51.437029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:24:51.437401 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:24:51.437388983 +0000 UTC m=+139.933769115 I0505 11:24:56.118660 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:24:56.118647651 +0000 UTC m=+144.615027773 I0505 11:24:56.136931 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-mn9rv" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:24:56.136913918 +0000 UTC m=+144.633294050 I0505 11:24:56.163316 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:24:56.163298451 +0000 UTC m=+144.659678583 I0505 11:24:56.182549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:24:56.182866 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:24:56.182858963 +0000 UTC m=+144.679239065 I0505 11:24:56.202911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:22.468363 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-25.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:27:22.468399 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Issuing" to 2026-05-05 11:27:22.468392476 +0000 UTC m=+290.964772578 I0505 11:27:22.469016 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready" to 2026-05-05 11:27:22.469010522 +0000 UTC m=+290.965390624 I0505 11:27:22.485718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:22.485778 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready" to 2026-05-05 11:27:22.48577134 +0000 UTC m=+290.982151442 I0505 11:27:22.625351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:22.655027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-25.nip.io-tls-2tmc8" condition "Approved" to 2026-05-05 11:27:22.655015831 +0000 UTC m=+291.151395933 I0505 11:27:22.673259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-25.nip.io-tls-2tmc8" condition "Ready" to 2026-05-05 11:27:22.673248918 +0000 UTC m=+291.169629020 I0505 11:27:22.701608 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:22.701597091 +0000 UTC m=+291.197977213 I0505 11:27:22.731038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:22.733023 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:22.733012063 +0000 UTC m=+291.229392195 I0505 11:27:22.742481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:22.747722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-25.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-25.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:22.748117 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-25.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:22.748107668 +0000 UTC m=+291.244487790 I0505 11:28:31.368928 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:28:31.368960 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 11:28:31.368952403 +0000 UTC m=+359.865332505 I0505 11:28:31.369314 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 11:28:31.369307281 +0000 UTC m=+359.865687383 E0505 11:28:31.380407 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 11:28:31.380454 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-05 11:28:31.380445204 +0000 UTC m=+359.876825306 E0505 11:28:31.380504 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 11:28:31.382158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:31.382225 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:28:31.382247 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 11:28:31.38224026 +0000 UTC m=+359.878620362 E0505 11:28:31.391674 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0505 11:28:31.391805 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:28:31.391850 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:28:31.391892 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0505 11:28:31.418258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gvmgd" condition "Approved" to 2026-05-05 11:28:31.418241863 +0000 UTC m=+359.914621955 I0505 11:28:31.430920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gvmgd" condition "Ready" to 2026-05-05 11:28:31.430906505 +0000 UTC m=+359.927286617 I0505 11:28:31.456235 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:31.456217747 +0000 UTC m=+359.952597879 I0505 11:28:31.472771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:31.473924 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:31.473907607 +0000 UTC m=+359.970287809 I0505 11:28:31.487533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:31.487785 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:31.487776247 +0000 UTC m=+359.984156349 I0505 11:28:31.491818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:36.392862 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:36.39284875 +0000 UTC m=+364.889228882 I0505 11:29:13.067951 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 11:29:13.067938157 +0000 UTC m=+401.564318259 I0505 11:29:13.068311 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 11:29:13.068306486 +0000 UTC m=+401.564686588 I0505 11:29:13.068319 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:13.068361 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 11:29:13.068353857 +0000 UTC m=+401.564733959 I0505 11:29:13.068626 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:13.068650 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 11:29:13.068646375 +0000 UTC m=+401.565026477 I0505 11:29:13.076037 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:13.076074 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 11:29:13.076067052 +0000 UTC m=+401.572447144 I0505 11:29:13.076270 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 11:29:13.076263358 +0000 UTC m=+401.572643470 I0505 11:29:13.090059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:13.090109 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:13.090123 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 11:29:13.090118399 +0000 UTC m=+401.586498481 I0505 11:29:13.094497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:13.094563 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:13.094585 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 11:29:13.094579683 +0000 UTC m=+401.590959775 I0505 11:29:13.097668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:13.097746 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 11:29:13.097738762 +0000 UTC m=+401.594118864 I0505 11:29:13.347537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:13.360494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fvpch" condition "Approved" to 2026-05-05 11:29:13.360474471 +0000 UTC m=+401.856854563 I0505 11:29:13.380676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:13.388711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fvpch" condition "Ready" to 2026-05-05 11:29:13.388700917 +0000 UTC m=+401.885081009 I0505 11:29:13.389234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vqdm6" condition "Approved" to 2026-05-05 11:29:13.389225991 +0000 UTC m=+401.885606093 I0505 11:29:13.393257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fm6r6" condition "Approved" to 2026-05-05 11:29:13.393244982 +0000 UTC m=+401.889625084 I0505 11:29:13.411022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-vqdm6" condition "Ready" to 2026-05-05 11:29:13.411010693 +0000 UTC m=+401.907390795 I0505 11:29:13.417812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fm6r6" condition "Ready" to 2026-05-05 11:29:13.417805065 +0000 UTC m=+401.914185157 I0505 11:29:13.553189 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:13.553180671 +0000 UTC m=+402.049560763 I0505 11:29:13.698780 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:13.698750306 +0000 UTC m=+402.195130428 E0505 11:29:13.756656 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-nsck8\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0505 11:29:13.900054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:13.900406 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:13.900397503 +0000 UTC m=+402.396777615 I0505 11:29:13.950380 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:13.950362901 +0000 UTC m=+402.446743033 I0505 11:29:14.049923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:14.050354 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:14.050345908 +0000 UTC m=+402.546726030 I0505 11:29:14.300198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:14.300670 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:14.300660631 +0000 UTC m=+402.797040763 I0505 11:29:14.452854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:14.709665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:14.851481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:14.903039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:15.000090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:20.899589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:20.899633 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" condition "Issuing" to 2026-05-05 11:29:20.89962342 +0000 UTC m=+409.396003552 I0505 11:29:20.900028 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" condition "Ready" to 2026-05-05 11:29:20.90002084 +0000 UTC m=+409.396400972 I0505 11:29:20.914147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:20.914241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:20.914270 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" condition "Issuing" to 2026-05-05 11:29:20.914264262 +0000 UTC m=+409.410644364 I0505 11:29:21.153517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:21.158635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wkgwm-c85dg" condition "Approved" to 2026-05-05 11:29:21.158627133 +0000 UTC m=+409.655007235 I0505 11:29:21.181643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wkgwm-c85dg" condition "Ready" to 2026-05-05 11:29:21.181630147 +0000 UTC m=+409.678010249 I0505 11:29:21.211257 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:21.211241388 +0000 UTC m=+409.707621510 I0505 11:29:21.228132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:21.228984 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:21.228974769 +0000 UTC m=+409.725354871 I0505 11:29:21.241888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:21.242299 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:21.242289247 +0000 UTC m=+409.738669379 I0505 11:29:21.248353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wkgwm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:44.135723 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 11:29:44.13570792 +0000 UTC m=+432.632088022 I0505 11:29:44.135816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:44.135851 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 11:29:44.135844894 +0000 UTC m=+432.632224986 I0505 11:29:45.118318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:45.118457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:45.118486 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 11:29:45.118479183 +0000 UTC m=+433.614859285 I0505 11:29:46.187310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zqzfg" condition "Approved" to 2026-05-05 11:29:46.187297635 +0000 UTC m=+434.683677727 I0505 11:29:46.187655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:46.214644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zqzfg" condition "Ready" to 2026-05-05 11:29:46.214631843 +0000 UTC m=+434.711011945 I0505 11:29:46.261488 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:46.261475557 +0000 UTC m=+434.757855649 I0505 11:29:46.283398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:46.284045 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:46.284035052 +0000 UTC m=+434.780415174 I0505 11:29:46.304348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:32:59.441660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:32:59.441632 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 11:32:59.441586877 +0000 UTC m=+627.937967009 I0505 11:32:59.441700 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 11:32:59.441692639 +0000 UTC m=+627.938072751 I0505 11:32:59.461462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:32:59.461570 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 11:32:59.461560431 +0000 UTC m=+627.957940553 I0505 11:32:59.533706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:32:59.564356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-52xgj" condition "Approved" to 2026-05-05 11:32:59.564348047 +0000 UTC m=+628.060728139 I0505 11:32:59.589230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-52xgj" condition "Ready" to 2026-05-05 11:32:59.589218248 +0000 UTC m=+628.085598350 I0505 11:32:59.618494 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:32:59.618479401 +0000 UTC m=+628.114859503 I0505 11:32:59.639961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:32:59.640331 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:32:59.640324724 +0000 UTC m=+628.136704826 I0505 11:32:59.649273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:32:59.663290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:35:21.501327 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:35:21.501408 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-05 11:35:21.501398717 +0000 UTC m=+769.997778849 I0505 11:35:21.502072 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-05 11:35:21.502063564 +0000 UTC m=+769.998443696 I0505 11:35:21.522083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:35:21.522252 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:35:21.522295 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-05 11:35:21.522272442 +0000 UTC m=+770.018652574 I0505 11:35:21.612871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:35:21.620651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kcvsn" condition "Approved" to 2026-05-05 11:35:21.62064136 +0000 UTC m=+770.117021462 I0505 11:35:21.644461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kcvsn" condition "Ready" to 2026-05-05 11:35:21.644450251 +0000 UTC m=+770.140830363 I0505 11:35:21.671998 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:35:21.671980479 +0000 UTC m=+770.168360601 I0505 11:35:21.701032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:35:21.701352 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:35:21.701346005 +0000 UTC m=+770.197726107 I0505 11:35:21.745677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:36:25.260807 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:36:25.260880 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-05 11:36:25.260873581 +0000 UTC m=+833.757253673 I0505 11:36:25.260932 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-05 11:36:25.260915102 +0000 UTC m=+833.757295204 I0505 11:36:25.276416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:36:25.276579 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-05 11:36:25.276563158 +0000 UTC m=+833.772943320 I0505 11:36:25.494603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:36:25.532639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-kzfv9" condition "Approved" to 2026-05-05 11:36:25.532616093 +0000 UTC m=+834.028996225 I0505 11:36:25.553964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-kzfv9" condition "Ready" to 2026-05-05 11:36:25.553955477 +0000 UTC m=+834.050335569 I0505 11:36:25.580174 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:36:25.580162267 +0000 UTC m=+834.076542369 I0505 11:36:25.614970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:36:25.615268 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:36:25.615262038 +0000 UTC m=+834.111642130 I0505 11:36:25.641712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:39:05.728555 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-05 11:39:05.728532228 +0000 UTC m=+994.224912390 I0505 11:39:05.729120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:39:05.729187 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-05 11:39:05.729176735 +0000 UTC m=+994.225556867 I0505 11:39:05.748991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:39:05.749227 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:39:05.749261 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-05 11:39:05.749252138 +0000 UTC m=+994.245632270 I0505 11:39:06.099527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-m7rq4" condition "Approved" to 2026-05-05 11:39:06.099513908 +0000 UTC m=+994.595894000 I0505 11:39:06.119602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-m7rq4" condition "Ready" to 2026-05-05 11:39:06.119590701 +0000 UTC m=+994.615970813 I0505 11:39:06.146077 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:39:06.146067249 +0000 UTC m=+994.642447361 I0505 11:39:06.166749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:39:06.167474 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:39:06.167464117 +0000 UTC m=+994.663844249 I0505 11:39:06.189488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:45:16.819028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:45:16.819071 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-05 11:45:16.819060774 +0000 UTC m=+1365.315440896 I0505 11:45:16.819151 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-05 11:45:16.819136206 +0000 UTC m=+1365.315516338 I0505 11:45:16.838118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:45:16.838204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:45:16.838226 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-05 11:45:16.838219265 +0000 UTC m=+1365.334599397 I0505 11:45:17.274155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-ggrwd" condition "Approved" to 2026-05-05 11:45:17.274142919 +0000 UTC m=+1365.770523011 I0505 11:45:17.290190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-ggrwd" condition "Ready" to 2026-05-05 11:45:17.290179331 +0000 UTC m=+1365.786559433 I0505 11:45:17.321727 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:45:17.321713601 +0000 UTC m=+1365.818093703 I0505 11:45:17.343250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:45:17.406365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:46:41.875965 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:46:41.876034 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-05 11:46:41.876025309 +0000 UTC m=+1450.372405411 I0505 11:46:41.876609 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-05 11:46:41.876602394 +0000 UTC m=+1450.372982496 I0505 11:46:41.893345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:46:41.894211 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-05 11:46:41.894197886 +0000 UTC m=+1450.390578038 I0505 11:46:42.042578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:46:42.073241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-c9287" condition "Approved" to 2026-05-05 11:46:42.073228023 +0000 UTC m=+1450.569608115 I0505 11:46:42.089562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-c9287" condition "Ready" to 2026-05-05 11:46:42.089546672 +0000 UTC m=+1450.585926804 I0505 11:46:42.118024 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:46:42.118007573 +0000 UTC m=+1450.614387695 I0505 11:46:42.137460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:46:42.137792 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:46:42.137786181 +0000 UTC m=+1450.634166283 I0505 11:46:42.159525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"