I0420 10:17:38.104132 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 10:17:38.104264 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 10:17:38.104334 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 10:17:38.107767 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 10:17:38.108098 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 10:17:38.108181 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 10:17:38.108264 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 10:17:38.110661 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 10:17:38.124193 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 10:17:38.130113 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 10:17:38.130198 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 10:17:38.130240 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 10:17:38.135972 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 10:17:38.138654 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 10:17:38.140729 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 10:17:38.142740 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 10:17:38.144449 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 10:17:38.144475 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 10:17:38.144557 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 10:17:38.146471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 10:17:38.148332 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 10:17:38.154449 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 10:17:38.157819 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 10:17:38.159781 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 10:17:38.159929 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 10:17:38.161911 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 10:17:38.163854 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 10:17:38.165821 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 10:17:38.167631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 10:17:38.169670 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 10:17:38.171301 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 10:17:38.171468 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 10:17:38.178146 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 10:17:38.179831 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:17:38.180915 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:17:38.181790 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:17:38.201121 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:17:38.221745 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:17:38.239172 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:17:38.261704 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:17:38.272122 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:17:38.278428 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:17:38.296812 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:17:52.733049 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 10:17:52.733033857 +0000 UTC m=+14.659206167 I0420 10:17:53.439289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:17:53.439383 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 10:17:53.439369579 +0000 UTC m=+15.365541899 I0420 10:17:53.439781 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 10:17:53.43976915 +0000 UTC m=+15.365941470 E0420 10:17:53.452562 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:17:53.452645 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 10:17:53.452635663 +0000 UTC m=+15.378807953 E0420 10:17:53.452675 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:17:53.454937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:17:53.455020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:17:53.455041 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 10:17:53.455035164 +0000 UTC m=+15.381207444 E0420 10:17:53.465759 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 10:17:53.465849 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:17:53.465888 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:17:53.465932 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 10:17:53.490811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:17:53.494061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7sv4n" condition "Approved" to 2026-04-20 10:17:53.494043945 +0000 UTC m=+15.420216255 I0420 10:17:53.505241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7sv4n" condition "Ready" to 2026-04-20 10:17:53.505229544 +0000 UTC m=+15.431401824 I0420 10:17:53.529539 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:17:53.529526654 +0000 UTC m=+15.455698934 I0420 10:17:53.557841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:17:53.558125 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:17:53.558119175 +0000 UTC m=+15.484291445 I0420 10:17:53.577650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:17:53.580886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:17:58.466338 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:17:58.466320171 +0000 UTC m=+20.392492471 I0420 10:18:22.587279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:18:22.587953 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 10:18:22.587122803 +0000 UTC m=+44.513295083 I0420 10:18:22.587679 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 10:18:22.587337358 +0000 UTC m=+44.513509628 I0420 10:18:22.602095 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 10:18:22.60208214 +0000 UTC m=+44.528254420 I0420 10:18:22.622017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:18:22.622124 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 10:18:22.622106239 +0000 UTC m=+44.548278519 I0420 10:18:22.997367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:18:23.033615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5glh9" condition "Approved" to 2026-04-20 10:18:23.033599456 +0000 UTC m=+44.959771756 I0420 10:18:23.066083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5glh9" condition "Ready" to 2026-04-20 10:18:23.066069986 +0000 UTC m=+44.992242256 I0420 10:18:23.104950 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:18:23.104932103 +0000 UTC m=+45.031104383 I0420 10:18:23.129272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:18:23.129719 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:18:23.129709304 +0000 UTC m=+45.055881574 I0420 10:18:23.145674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:18:23.158230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:10.066561 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 10:20:10.066519881 +0000 UTC m=+151.992692181 I0420 10:20:10.066570 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:20:10.066851 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 10:20:10.06682446 +0000 UTC m=+151.992996760 E0420 10:20:10.081614 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:20:10.081692 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 10:20:10.081677325 +0000 UTC m=+152.007849685 I0420 10:20:10.081786 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:20:10.083032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:10.083086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:20:10.083100 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 10:20:10.083094802 +0000 UTC m=+152.009267072 E0420 10:20:10.090956 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 10:20:10.091114 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:20:10.091165 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 10:20:10.091221 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 10:20:10.095590 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:20:10.095645 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 10:20:10.095618077 +0000 UTC m=+152.021790357 I0420 10:20:10.096109 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 10:20:10.096090329 +0000 UTC m=+152.022262649 I0420 10:20:10.110737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:10.110816 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 10:20:10.110808802 +0000 UTC m=+152.036981082 I0420 10:20:10.214043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:10.234651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:10.244744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5rd2j" condition "Approved" to 2026-04-20 10:20:10.244729018 +0000 UTC m=+152.170901328 I0420 10:20:10.248463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-n6krb" condition "Approved" to 2026-04-20 10:20:10.248447344 +0000 UTC m=+152.174619644 I0420 10:20:10.274330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-n6krb" condition "Ready" to 2026-04-20 10:20:10.274317056 +0000 UTC m=+152.200489336 I0420 10:20:10.275548 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5rd2j" condition "Ready" to 2026-04-20 10:20:10.275535338 +0000 UTC m=+152.201707608 I0420 10:20:10.300672 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:10.30065225 +0000 UTC m=+152.226824520 I0420 10:20:10.327044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:10.327454 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:10.327442865 +0000 UTC m=+152.253615145 I0420 10:20:10.343070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:10.343478 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:10.343466981 +0000 UTC m=+152.269639291 I0420 10:20:10.344316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:15.091631 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:15.091619318 +0000 UTC m=+157.017791618 I0420 10:20:15.108241 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-n6krb" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:15.108228799 +0000 UTC m=+157.034401109 I0420 10:20:15.142848 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:15.142836167 +0000 UTC m=+157.069008437 I0420 10:20:15.161213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:15.216716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:52.512587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:22:52.512660 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Issuing" to 2026-04-20 10:22:52.512623224 +0000 UTC m=+314.438795504 I0420 10:22:52.513123 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready" to 2026-04-20 10:22:52.512576093 +0000 UTC m=+314.438748363 I0420 10:22:52.532263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:52.533701 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready" to 2026-04-20 10:22:52.533686164 +0000 UTC m=+314.459858474 I0420 10:22:52.888606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:52.932988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-4kpvj" condition "Approved" to 2026-04-20 10:22:52.932975339 +0000 UTC m=+314.859147629 I0420 10:22:52.950900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-4kpvj" condition "Ready" to 2026-04-20 10:22:52.950886977 +0000 UTC m=+314.877059257 I0420 10:22:52.974816 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:52.974804121 +0000 UTC m=+314.900976401 I0420 10:22:52.995770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:52.996285 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:52.996275143 +0000 UTC m=+314.922447423 I0420 10:22:53.017057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:03.702083 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:24:03.702135 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 10:24:03.702088662 +0000 UTC m=+385.628260942 I0420 10:24:03.702133 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 10:24:03.702121814 +0000 UTC m=+385.628294114 E0420 10:24:03.712869 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:24:03.712996 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 10:24:03.712986537 +0000 UTC m=+385.639158807 E0420 10:24:03.713081 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:24:03.715731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:03.715851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:24:03.715885 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 10:24:03.715875382 +0000 UTC m=+385.642047662 E0420 10:24:03.727794 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 10:24:03.728011 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:24:03.728085 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:24:03.728149 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 10:24:03.760179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-m9q8w" condition "Approved" to 2026-04-20 10:24:03.760162426 +0000 UTC m=+385.686334706 I0420 10:24:03.772201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-m9q8w" condition "Ready" to 2026-04-20 10:24:03.772189711 +0000 UTC m=+385.698361991 I0420 10:24:03.794738 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:03.794718768 +0000 UTC m=+385.720891078 I0420 10:24:03.811800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:03.812166 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:03.812156333 +0000 UTC m=+385.738328613 I0420 10:24:03.832347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:08.728591 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:08.728576675 +0000 UTC m=+390.654748985 I0420 10:24:47.540642 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 10:24:47.540626039 +0000 UTC m=+429.466798319 I0420 10:24:47.540830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:24:47.540889 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 10:24:47.540882115 +0000 UTC m=+429.467054385 I0420 10:24:47.544147 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 10:24:47.54413606 +0000 UTC m=+429.470308330 I0420 10:24:47.545212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:24:47.545237 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 10:24:47.545232098 +0000 UTC m=+429.471404368 I0420 10:24:47.551223 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 10:24:47.551214745 +0000 UTC m=+429.477387015 I0420 10:24:47.551596 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:24:47.551640 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 10:24:47.551631325 +0000 UTC m=+429.477803595 I0420 10:24:47.580575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:47.580684 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 10:24:47.580675753 +0000 UTC m=+429.506848023 I0420 10:24:47.586034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:47.586248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:47.586320 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:24:47.586351 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 10:24:47.58634534 +0000 UTC m=+429.512517610 I0420 10:24:47.586425 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 10:24:47.586415092 +0000 UTC m=+429.512587372 I0420 10:24:47.823139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:47.858633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-67m9b" condition "Approved" to 2026-04-20 10:24:47.85862247 +0000 UTC m=+429.784794740 I0420 10:24:47.880533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-67m9b" condition "Ready" to 2026-04-20 10:24:47.88051921 +0000 UTC m=+429.806691500 I0420 10:24:47.917640 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:47.917626568 +0000 UTC m=+429.843798838 I0420 10:24:47.944732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:47.945070 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:47.945062473 +0000 UTC m=+429.871234753 I0420 10:24:48.017215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:48.063893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-c7xrt" condition "Approved" to 2026-04-20 10:24:48.063877541 +0000 UTC m=+429.990049821 I0420 10:24:48.087456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-c7xrt" condition "Ready" to 2026-04-20 10:24:48.087432025 +0000 UTC m=+430.013604325 E0420 10:24:48.114203 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-mnq5j\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0420 10:24:48.178641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:48.287408 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-c7xrt" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-b65jt" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0420 10:24:48.380412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kn2np" condition "Approved" to 2026-04-20 10:24:48.380391613 +0000 UTC m=+430.306563923 I0420 10:24:48.734583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kn2np" condition "Ready" to 2026-04-20 10:24:48.734573098 +0000 UTC m=+430.660745378 I0420 10:24:49.131335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kvcjs" condition "Approved" to 2026-04-20 10:24:49.131321542 +0000 UTC m=+431.057493822 I0420 10:24:49.180929 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:49.180914554 +0000 UTC m=+431.107086834 I0420 10:24:49.389034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kvcjs" condition "Ready" to 2026-04-20 10:24:49.389019731 +0000 UTC m=+431.315192041 I0420 10:24:49.677449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:49.677779 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:49.677771649 +0000 UTC m=+431.603943919 I0420 10:24:49.836840 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-kvcjs" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-5ng7p" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0420 10:24:50.226906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:50.280067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:50.337284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-49lq6" condition "Approved" to 2026-04-20 10:24:50.337256173 +0000 UTC m=+432.263428473 I0420 10:24:50.591910 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-49lq6" condition "Ready" to 2026-04-20 10:24:50.591896332 +0000 UTC m=+432.518068612 I0420 10:24:50.927361 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:50.927348298 +0000 UTC m=+432.853520578 I0420 10:24:51.028453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:51.332988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:56.499129 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" condition "Ready" to 2026-04-20 10:24:56.499109338 +0000 UTC m=+438.425281618 I0420 10:24:56.499271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:24:56.499332 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" condition "Issuing" to 2026-04-20 10:24:56.499317623 +0000 UTC m=+438.425489943 I0420 10:24:56.518658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:56.518735 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" condition "Ready" to 2026-04-20 10:24:56.518725969 +0000 UTC m=+438.444898249 I0420 10:24:56.753229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:56.784861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f6ndq-d82gr" condition "Approved" to 2026-04-20 10:24:56.784819017 +0000 UTC m=+438.710991287 I0420 10:24:56.806454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f6ndq-d82gr" condition "Ready" to 2026-04-20 10:24:56.806433601 +0000 UTC m=+438.732605881 I0420 10:24:56.833007 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:56.832994853 +0000 UTC m=+438.759167143 I0420 10:24:56.856767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:56.857170 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:56.857163863 +0000 UTC m=+438.783336143 I0420 10:24:56.861412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:56.871778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:56.872471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:24:56.872897 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f6ndq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:24:56.872861372 +0000 UTC m=+438.799033642 I0420 10:25:26.032730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:25:26.032776 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 10:25:26.032767792 +0000 UTC m=+467.958940072 I0420 10:25:26.032977 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 10:25:26.032950557 +0000 UTC m=+467.959122837 I0420 10:25:26.050901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:26.051083 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 10:25:26.05105614 +0000 UTC m=+467.977228420 I0420 10:25:26.351929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:26.383905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wddg4" condition "Approved" to 2026-04-20 10:25:26.383892647 +0000 UTC m=+468.310064917 I0420 10:25:26.404601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wddg4" condition "Ready" to 2026-04-20 10:25:26.404586948 +0000 UTC m=+468.330759258 I0420 10:25:26.436309 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:25:26.436293245 +0000 UTC m=+468.362465525 I0420 10:25:26.460633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:26.460999 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:25:26.460991041 +0000 UTC m=+468.387163321 I0420 10:25:26.479848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:26.480383 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:25:26.480373496 +0000 UTC m=+468.406545776 I0420 10:28:54.566347 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:28:54.566412 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 10:28:54.566407572 +0000 UTC m=+676.492579852 I0420 10:28:54.566360 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 10:28:54.566314059 +0000 UTC m=+676.492486339 I0420 10:28:54.580939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:28:54.581082 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 10:28:54.581074304 +0000 UTC m=+676.507246594 I0420 10:28:54.710367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:28:54.750011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6mqf9" condition "Approved" to 2026-04-20 10:28:54.749992092 +0000 UTC m=+676.676164402 I0420 10:28:54.767932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6mqf9" condition "Ready" to 2026-04-20 10:28:54.76792146 +0000 UTC m=+676.694093740 I0420 10:28:54.795748 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:28:54.795731503 +0000 UTC m=+676.721903783 I0420 10:28:54.818855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:28:54.819374 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:28:54.819365089 +0000 UTC m=+676.745537389 I0420 10:28:54.843882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:28:54.844385 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:28:54.844371811 +0000 UTC m=+676.770544111 I0420 10:31:25.738293 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 10:31:25.738234205 +0000 UTC m=+827.664406515 I0420 10:31:25.738398 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:31:25.738667 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 10:31:25.738632665 +0000 UTC m=+827.664804935 I0420 10:31:25.757199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:25.757325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:31:25.757388 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 10:31:25.757378053 +0000 UTC m=+827.683550363 I0420 10:31:26.016140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-lqbgg" condition "Approved" to 2026-04-20 10:31:26.016122009 +0000 UTC m=+827.942294319 I0420 10:31:26.036423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-lqbgg" condition "Ready" to 2026-04-20 10:31:26.036409226 +0000 UTC m=+827.962581506 I0420 10:31:26.072083 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:31:26.072058743 +0000 UTC m=+827.998231053 I0420 10:31:26.090085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:26.090474 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:31:26.090465943 +0000 UTC m=+828.016638283 I0420 10:31:26.100337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:26.117221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:32:43.227212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:32:43.227264 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 10:32:43.227232991 +0000 UTC m=+905.153405271 I0420 10:32:43.227909 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 10:32:43.227902759 +0000 UTC m=+905.154075039 I0420 10:32:43.742383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:32:43.742465 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 10:32:43.742457877 +0000 UTC m=+905.668630147 I0420 10:32:44.516252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:32:44.631585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-ddjj7" condition "Approved" to 2026-04-20 10:32:44.631566576 +0000 UTC m=+906.557738886 I0420 10:32:44.683236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-ddjj7" condition "Ready" to 2026-04-20 10:32:44.683223094 +0000 UTC m=+906.609395374 I0420 10:32:49.386478 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:32:49.386465907 +0000 UTC m=+911.312638177 I0420 10:32:49.508388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:32:49.509072 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:32:49.509065512 +0000 UTC m=+911.435237782 I0420 10:32:49.687951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:32:50.000376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:35:51.367999 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 10:35:51.367949456 +0000 UTC m=+1093.294121756 I0420 10:35:51.368043 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:35:51.368113 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 10:35:51.368102531 +0000 UTC m=+1093.294274831 I0420 10:35:51.388106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:35:51.388177 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 10:35:51.38817108 +0000 UTC m=+1093.314343350 I0420 10:35:51.542478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:35:51.578115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8vdgt" condition "Approved" to 2026-04-20 10:35:51.57810554 +0000 UTC m=+1093.504277810 I0420 10:35:51.608764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8vdgt" condition "Ready" to 2026-04-20 10:35:51.608752663 +0000 UTC m=+1093.534924933 I0420 10:35:51.644652 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:35:51.644641004 +0000 UTC m=+1093.570813274 I0420 10:35:51.663433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:35:51.719500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"