I0420 10:20:01.361053 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 10:20:01.361226 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 10:20:01.361319 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 10:20:01.367258 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 10:20:01.369079 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 10:20:01.369100 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 10:20:01.369133 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 10:20:01.373382 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 10:20:01.394752 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 10:20:01.399228 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 10:20:01.402509 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 10:20:01.406993 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 10:20:01.407099 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 10:20:01.412446 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 10:20:01.418059 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 10:20:01.421782 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 10:20:01.421816 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 10:20:01.421838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 10:20:01.423809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 10:20:01.425772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 10:20:01.427422 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 10:20:01.429314 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 10:20:01.431809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 10:20:01.437542 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 10:20:01.440146 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 10:20:01.441805 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 10:20:01.444183 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 10:20:01.444220 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 10:20:01.444261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 10:20:01.446158 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 10:20:01.447825 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 10:20:01.449683 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 10:20:01.450248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 10:20:01.453270 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:20:01.454759 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:20:01.455076 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:20:01.476211 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:20:01.496058 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:20:01.518604 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:20:01.533912 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:20:01.550487 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:20:01.558814 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:20:01.577331 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 10:20:13.602208 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 10:20:13.602180432 +0000 UTC m=+12.280043517 I0420 10:20:14.385806 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 10:20:14.385787719 +0000 UTC m=+13.063650834 I0420 10:20:14.386319 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:20:14.386404 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 10:20:14.386389797 +0000 UTC m=+13.064252892 E0420 10:20:14.400351 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:20:14.400527 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 10:20:14.400518621 +0000 UTC m=+13.078381696 E0420 10:20:14.400560 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:20:14.401318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:14.401398 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:20:14.401428 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 10:20:14.401418127 +0000 UTC m=+13.079281202 E0420 10:20:14.409461 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 10:20:14.409574 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:20:14.409621 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:20:14.409678 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 10:20:14.443612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:14.451194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kh8c5" condition "Approved" to 2026-04-20 10:20:14.451177771 +0000 UTC m=+13.129040866 I0420 10:20:14.463592 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kh8c5" condition "Ready" to 2026-04-20 10:20:14.463577555 +0000 UTC m=+13.141440660 I0420 10:20:14.485638 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:14.485615826 +0000 UTC m=+13.163478941 I0420 10:20:14.503594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:14.503775 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:14.503768805 +0000 UTC m=+13.181631880 I0420 10:20:14.512326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:14.519238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:19.410276 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:19.410266853 +0000 UTC m=+18.088129918 I0420 10:20:41.003160 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 10:20:41.003138728 +0000 UTC m=+39.681001863 I0420 10:20:41.003663 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:20:41.003839 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 10:20:41.003823407 +0000 UTC m=+39.681686522 I0420 10:20:41.018591 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 10:20:41.018578469 +0000 UTC m=+39.696441544 I0420 10:20:41.025116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:41.025180 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:20:41.025199 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 10:20:41.025191529 +0000 UTC m=+39.703054604 I0420 10:20:41.140844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:41.150589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rpgtp" condition "Approved" to 2026-04-20 10:20:41.150573497 +0000 UTC m=+39.828436592 I0420 10:20:41.188513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rpgtp" condition "Ready" to 2026-04-20 10:20:41.188497043 +0000 UTC m=+39.866360118 I0420 10:20:41.226334 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:41.226315025 +0000 UTC m=+39.904178100 I0420 10:20:41.251069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:41.251390 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:41.251385342 +0000 UTC m=+39.929248397 I0420 10:20:41.267747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:41.270750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:20:41.271140 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:20:41.271129357 +0000 UTC m=+39.948992432 I0420 10:22:25.390822 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 10:22:25.390690566 +0000 UTC m=+144.068553621 I0420 10:22:25.390937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:22:25.390991 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 10:22:25.390977964 +0000 UTC m=+144.068841059 E0420 10:22:25.405957 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:22:25.406116 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 10:22:25.406096165 +0000 UTC m=+144.083959340 I0420 10:22:25.406409 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:22:25.408833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:25.408935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:22:25.408975 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 10:22:25.408965627 +0000 UTC m=+144.086828702 E0420 10:22:25.418119 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 10:22:25.418309 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 10:22:25.418364 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 10:22:25.418419 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 10:22:25.419256 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 10:22:25.4192197 +0000 UTC m=+144.097082805 I0420 10:22:25.419991 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:22:25.420018 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 10:22:25.420009882 +0000 UTC m=+144.097872947 I0420 10:22:25.440422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:25.440772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:22:25.440814 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 10:22:25.440802866 +0000 UTC m=+144.118665971 I0420 10:22:25.611824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-8fn5l" condition "Approved" to 2026-04-20 10:22:25.611810458 +0000 UTC m=+144.289673553 I0420 10:22:25.647589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-8fn5l" condition "Ready" to 2026-04-20 10:22:25.647563118 +0000 UTC m=+144.325426223 I0420 10:22:25.653419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-2pfws" condition "Approved" to 2026-04-20 10:22:25.653407605 +0000 UTC m=+144.331270670 I0420 10:22:25.675033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-2pfws" condition "Ready" to 2026-04-20 10:22:25.675019353 +0000 UTC m=+144.352882418 I0420 10:22:25.684116 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:25.684077941 +0000 UTC m=+144.361941006 I0420 10:22:25.700522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:30.419267 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:30.419249364 +0000 UTC m=+149.097112469 I0420 10:22:30.436339 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-2pfws" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:30.436324791 +0000 UTC m=+149.114187876 I0420 10:22:30.467889 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:30.467872112 +0000 UTC m=+149.145735187 I0420 10:22:30.494317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:30.494915 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:30.494907794 +0000 UTC m=+149.172770859 I0420 10:22:30.513521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:22:30.514017 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:22:30.514006658 +0000 UTC m=+149.191869723 I0420 10:22:30.517083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:18.364829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-140.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:25:18.364912 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Issuing" to 2026-04-20 10:25:18.364901169 +0000 UTC m=+317.042764284 I0420 10:25:18.364904 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready" to 2026-04-20 10:25:18.364700644 +0000 UTC m=+317.042563769 I0420 10:25:18.383167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:18.383295 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-140.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:25:18.383338 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Issuing" to 2026-04-20 10:25:18.383323795 +0000 UTC m=+317.061186900 I0420 10:25:18.570364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-140.nip.io-tls-62n9m" condition "Approved" to 2026-04-20 10:25:18.570342891 +0000 UTC m=+317.248205996 I0420 10:25:18.595259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-140.nip.io-tls-62n9m" condition "Ready" to 2026-04-20 10:25:18.595238762 +0000 UTC m=+317.273101877 I0420 10:25:18.631203 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:25:18.631184896 +0000 UTC m=+317.309047992 I0420 10:25:18.654927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:18.655326 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:25:18.655316575 +0000 UTC m=+317.333179640 I0420 10:25:18.673202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:25:18.673846 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:25:18.673831774 +0000 UTC m=+317.351694869 I0420 10:26:32.591639 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:26:32.591751 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 10:26:32.591714011 +0000 UTC m=+391.269577116 I0420 10:26:32.591759 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 10:26:32.591713781 +0000 UTC m=+391.269576856 E0420 10:26:32.607815 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:26:32.607885 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 10:26:32.607869923 +0000 UTC m=+391.285733038 E0420 10:26:32.608077 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 10:26:32.609413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:26:32.609494 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:26:32.609591 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 10:26:32.609579991 +0000 UTC m=+391.287443106 E0420 10:26:32.622612 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 10:26:32.622857 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:26:32.622917 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 10:26:32.622989 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 10:26:32.660515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hd8jb" condition "Approved" to 2026-04-20 10:26:32.660490265 +0000 UTC m=+391.338353360 I0420 10:26:32.661192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:26:32.675853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hd8jb" condition "Ready" to 2026-04-20 10:26:32.675839244 +0000 UTC m=+391.353702319 I0420 10:26:32.707145 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:26:32.707131467 +0000 UTC m=+391.384994532 I0420 10:26:32.728308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:26:32.728620 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:26:32.728612691 +0000 UTC m=+391.406475766 I0420 10:26:32.743588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:26:32.743974 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:26:32.743961159 +0000 UTC m=+391.421824234 I0420 10:26:37.623098 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:26:37.623083175 +0000 UTC m=+396.300946290 I0420 10:27:20.055792 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 10:27:20.055775234 +0000 UTC m=+438.733638299 I0420 10:27:20.056150 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:20.056170 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 10:27:20.056166845 +0000 UTC m=+438.734029900 I0420 10:27:20.060830 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:20.060880 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 10:27:20.06086985 +0000 UTC m=+438.738732935 I0420 10:27:20.061155 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 10:27:20.061132047 +0000 UTC m=+438.738995132 I0420 10:27:20.062450 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 10:27:20.062442254 +0000 UTC m=+438.740305319 I0420 10:27:20.062498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:20.062545 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 10:27:20.062535097 +0000 UTC m=+438.740398162 I0420 10:27:20.082887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:20.082982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:20.083180 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 10:27:20.083168557 +0000 UTC m=+438.761031632 I0420 10:27:20.088704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:20.088800 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 10:27:20.088789117 +0000 UTC m=+438.766652192 I0420 10:27:20.100992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:20.101096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:20.101126 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 10:27:20.101118019 +0000 UTC m=+438.778981084 I0420 10:27:20.324644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5bgmh" condition "Approved" to 2026-04-20 10:27:20.324627422 +0000 UTC m=+439.002490497 I0420 10:27:20.350286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5bgmh" condition "Ready" to 2026-04-20 10:27:20.350270025 +0000 UTC m=+439.028133090 I0420 10:27:20.413390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:20.413426 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 10:27:20.413419579 +0000 UTC m=+439.091282644 I0420 10:27:20.423628 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:20.423614739 +0000 UTC m=+439.101477814 I0420 10:27:20.443006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:20.443446 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:20.443436385 +0000 UTC m=+439.121299450 I0420 10:27:20.455348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:20.457298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:20.483304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zr6kn" condition "Approved" to 2026-04-20 10:27:20.483287444 +0000 UTC m=+439.161150519 I0420 10:27:20.498484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kw9sp" condition "Approved" to 2026-04-20 10:27:20.498447427 +0000 UTC m=+439.176310522 I0420 10:27:20.506344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-zr6kn" condition "Ready" to 2026-04-20 10:27:20.506331182 +0000 UTC m=+439.184194247 I0420 10:27:20.521630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kw9sp" condition "Ready" to 2026-04-20 10:27:20.521607668 +0000 UTC m=+439.199470733 I0420 10:27:21.105096 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:21.105070511 +0000 UTC m=+439.782933606 I0420 10:27:21.399441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:21.400032 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:21.400020595 +0000 UTC m=+440.077883700 I0420 10:27:21.486312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:21.505416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wfhhf" condition "Approved" to 2026-04-20 10:27:21.505400434 +0000 UTC m=+440.183263499 I0420 10:27:22.057984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wfhhf" condition "Ready" to 2026-04-20 10:27:22.057957246 +0000 UTC m=+440.735820341 I0420 10:27:22.245070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:22.297885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:22.568657 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:22.56864263 +0000 UTC m=+441.246505715 I0420 10:27:22.648880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:22.951312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:27.942820 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t47cx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:27.942867 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-t47cx-tls" condition "Issuing" to 2026-04-20 10:27:27.942858306 +0000 UTC m=+446.620721411 I0420 10:27:27.942805 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-t47cx-tls" condition "Ready" to 2026-04-20 10:27:27.942786023 +0000 UTC m=+446.620649128 I0420 10:27:27.963578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t47cx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t47cx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:27.963707 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-t47cx-tls" condition "Ready" to 2026-04-20 10:27:27.963696301 +0000 UTC m=+446.641559396 I0420 10:27:28.212522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t47cx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t47cx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:28.256223 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-t47cx-5n5n8" condition "Approved" to 2026-04-20 10:27:28.256200814 +0000 UTC m=+446.934063919 I0420 10:27:28.285602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-t47cx-5n5n8" condition "Ready" to 2026-04-20 10:27:28.285583444 +0000 UTC m=+446.963446519 I0420 10:27:28.330104 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-t47cx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:28.330084345 +0000 UTC m=+447.007947410 I0420 10:27:28.351917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t47cx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t47cx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:28.352551 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-t47cx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:28.352543676 +0000 UTC m=+447.030406751 I0420 10:27:28.364432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t47cx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t47cx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:28.391033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-t47cx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-t47cx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:49.715300 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 10:27:49.715283641 +0000 UTC m=+468.393146716 I0420 10:27:49.715707 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:49.715727 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 10:27:49.715723123 +0000 UTC m=+468.393586198 I0420 10:27:49.733829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:49.733930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:27:49.734000 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 10:27:49.733990126 +0000 UTC m=+468.411853201 I0420 10:27:49.945422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:49.957275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-78d4p" condition "Approved" to 2026-04-20 10:27:49.95724487 +0000 UTC m=+468.635107945 I0420 10:27:49.982090 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-78d4p" condition "Ready" to 2026-04-20 10:27:49.9820715 +0000 UTC m=+468.659934565 I0420 10:27:50.019065 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:27:50.019048207 +0000 UTC m=+468.696911272 I0420 10:27:50.038504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:27:50.105110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:18.747545 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 10:31:18.747351584 +0000 UTC m=+677.425214679 I0420 10:31:18.747582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:31:18.747896 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 10:31:18.747863329 +0000 UTC m=+677.425726454 I0420 10:31:18.769082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:18.769196 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 10:31:18.769185198 +0000 UTC m=+677.447048273 I0420 10:31:18.890796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:31:18.925320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tjmgr" condition "Approved" to 2026-04-20 10:31:18.925298121 +0000 UTC m=+677.603161196 I0420 10:31:18.948998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tjmgr" condition "Ready" to 2026-04-20 10:31:18.948983559 +0000 UTC m=+677.626846634 I0420 10:31:18.982335 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:31:18.982317151 +0000 UTC m=+677.660180226 I0420 10:31:19.009508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:33:51.150754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:33:51.150788 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 10:33:51.150782644 +0000 UTC m=+829.828645719 I0420 10:33:51.150730 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 10:33:51.150710262 +0000 UTC m=+829.828573317 I0420 10:33:51.172505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:33:51.172581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:33:51.172602 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 10:33:51.172594248 +0000 UTC m=+829.850457323 I0420 10:33:51.344848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:33:51.356655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8v67l" condition "Approved" to 2026-04-20 10:33:51.356639927 +0000 UTC m=+830.034503002 I0420 10:33:51.381034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8v67l" condition "Ready" to 2026-04-20 10:33:51.381014383 +0000 UTC m=+830.058877488 I0420 10:33:51.418024 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:33:51.41800679 +0000 UTC m=+830.095869865 I0420 10:33:51.441749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:33:51.442333 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:33:51.442322934 +0000 UTC m=+830.120186029 I0420 10:33:51.478952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:33:51.479951 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:33:51.479939019 +0000 UTC m=+830.157802114 I0420 10:35:09.487314 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:35:09.487352 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 10:35:09.487291631 +0000 UTC m=+908.165154716 I0420 10:35:09.487361 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 10:35:09.487356153 +0000 UTC m=+908.165219228 I0420 10:35:09.508249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:35:09.508411 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 10:35:09.508401473 +0000 UTC m=+908.186264538 I0420 10:35:09.670898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:35:09.707468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-l58bn" condition "Approved" to 2026-04-20 10:35:09.707453111 +0000 UTC m=+908.385316196 I0420 10:35:09.732647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-l58bn" condition "Ready" to 2026-04-20 10:35:09.73263592 +0000 UTC m=+908.410498975 I0420 10:35:09.765392 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:35:09.765370356 +0000 UTC m=+908.443233461 I0420 10:35:09.795405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:35:09.795782 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:35:09.795762555 +0000 UTC m=+908.473625630 I0420 10:35:09.818868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:35:09.819356 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:35:09.819344178 +0000 UTC m=+908.497207253 I0420 10:38:23.037246 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 10:38:23.03705634 +0000 UTC m=+1101.714919415 I0420 10:38:23.037741 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:38:23.037832 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 10:38:23.037823742 +0000 UTC m=+1101.715686817 I0420 10:38:23.057114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:38:23.057210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 10:38:23.057233 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 10:38:23.057224796 +0000 UTC m=+1101.735087871 I0420 10:38:23.382067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:38:23.390274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rm7qb" condition "Approved" to 2026-04-20 10:38:23.390260472 +0000 UTC m=+1102.068123577 I0420 10:38:23.414405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rm7qb" condition "Ready" to 2026-04-20 10:38:23.41439152 +0000 UTC m=+1102.092254595 I0420 10:38:23.451503 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:38:23.45148769 +0000 UTC m=+1102.129350765 I0420 10:38:23.472873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:38:23.473369 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:38:23.473358985 +0000 UTC m=+1102.151222070 I0420 10:38:23.495597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 10:38:23.495782 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 10:38:23.495775105 +0000 UTC m=+1102.173638170