I0402 21:25:24.105981 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0402 21:25:24.106110 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0402 21:25:24.106251 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0402 21:25:24.111413 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0402 21:25:24.111912 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0402 21:25:24.111938 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0402 21:25:24.112025 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0402 21:25:24.115910 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0402 21:25:24.139912 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0402 21:25:24.144104 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0402 21:25:24.150569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0402 21:25:24.154812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0402 21:25:24.157489 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0402 21:25:24.160064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0402 21:25:24.162817 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0402 21:25:24.165542 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0402 21:25:24.168002 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0402 21:25:24.174516 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0402 21:25:24.177189 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0402 21:25:24.177245 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0402 21:25:24.180116 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0402 21:25:24.182814 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0402 21:25:24.185455 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0402 21:25:24.188084 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0402 21:25:24.190588 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0402 21:25:24.190607 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0402 21:25:24.190615 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0402 21:25:24.190624 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0402 21:25:24.190695 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0402 21:25:24.192597 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0402 21:25:24.198616 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0402 21:25:24.203636 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0402 21:25:24.203697 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0402 21:25:24.207139 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:24.207428 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:24.221522 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:24.249220 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:24.250939 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:24.271833 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:24.284892 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:24.298218 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:24.315374 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:24.317562 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 21:25:35.559920 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-02 21:25:35.559899836 +0000 UTC m=+11.490746984 I0402 21:25:36.231026 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 21:25:36.231014062 +0000 UTC m=+12.161861170 I0402 21:25:36.231312 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:25:36.231366 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 21:25:36.23135813 +0000 UTC m=+12.162205238 E0402 21:25:36.242846 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 21:25:36.242923 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-02 21:25:36.242916516 +0000 UTC m=+12.173763634 E0402 21:25:36.242961 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 21:25:36.245523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:25:36.245613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:25:36.245677 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 21:25:36.245670662 +0000 UTC m=+12.176517780 E0402 21:25:36.253510 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0402 21:25:36.253634 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:25:36.253658 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:25:36.253688 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0402 21:25:36.285317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:25:36.286158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-77rct" condition "Approved" to 2026-04-02 21:25:36.286146648 +0000 UTC m=+12.216993766 I0402 21:25:36.303345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-77rct" condition "Ready" to 2026-04-02 21:25:36.303335347 +0000 UTC m=+12.234182455 I0402 21:25:36.325307 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:25:36.325291941 +0000 UTC m=+12.256139079 I0402 21:25:36.341403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:25:41.254654 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:25:41.254641355 +0000 UTC m=+17.185488473 I0402 21:25:58.905264 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 21:25:58.905244671 +0000 UTC m=+34.836091819 I0402 21:25:58.905245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:25:58.905445 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 21:25:58.905433325 +0000 UTC m=+34.836280443 I0402 21:25:58.922364 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-02 21:25:58.922349079 +0000 UTC m=+34.853196207 I0402 21:25:58.926266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:25:58.926371 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:25:58.926409 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 21:25:58.926400325 +0000 UTC m=+34.857247443 I0402 21:25:59.151954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cd27r" condition "Approved" to 2026-04-02 21:25:59.151943175 +0000 UTC m=+35.082790283 I0402 21:25:59.185759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cd27r" condition "Ready" to 2026-04-02 21:25:59.185743981 +0000 UTC m=+35.116591109 I0402 21:25:59.216794 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:25:59.216776111 +0000 UTC m=+35.147623259 I0402 21:25:59.243324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:25:59.243758 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:25:59.243749665 +0000 UTC m=+35.174596783 I0402 21:25:59.250787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:25:59.264368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:25:59.265107 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:25:59.265091453 +0000 UTC m=+35.195938591 I0402 21:30:29.446204 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-85.nip.io-tls" condition "Ready" to 2026-04-02 21:30:29.446159175 +0000 UTC m=+305.377006323 I0402 21:30:29.446246 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-85.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:30:29.446533 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-85.nip.io-tls" condition "Issuing" to 2026-04-02 21:30:29.446515383 +0000 UTC m=+305.377362531 I0402 21:30:29.471180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:30:29.471304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-85.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:30:29.471365 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-85.nip.io-tls" condition "Issuing" to 2026-04-02 21:30:29.471354616 +0000 UTC m=+305.402201754 I0402 21:30:29.691217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-85.nip.io-tls-fdrrr" condition "Approved" to 2026-04-02 21:30:29.691201919 +0000 UTC m=+305.622049067 I0402 21:30:29.718622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-85.nip.io-tls-fdrrr" condition "Ready" to 2026-04-02 21:30:29.718608208 +0000 UTC m=+305.649455326 I0402 21:30:29.747568 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-85.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:30:29.747553093 +0000 UTC m=+305.678400211 I0402 21:30:29.769595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:30:29.771158 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-85.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:30:29.771142407 +0000 UTC m=+305.701989545 I0402 21:30:29.779846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:30:29.789513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:31:35.607300 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:31:35.607335 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 21:31:35.607327834 +0000 UTC m=+371.538174942 I0402 21:31:35.607301 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 21:31:35.607264751 +0000 UTC m=+371.538111899 E0402 21:31:35.618064 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 21:31:35.618154 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-02 21:31:35.618143003 +0000 UTC m=+371.548990121 E0402 21:31:35.618212 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 21:31:35.619195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:31:35.619269 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 21:31:35.619261791 +0000 UTC m=+371.550108919 E0402 21:31:35.628113 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0402 21:31:35.628196 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:31:35.628219 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 21:31:35.628246 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0402 21:31:35.635294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:31:35.653101 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qrxmx" condition "Approved" to 2026-04-02 21:31:35.653089094 +0000 UTC m=+371.583936242 I0402 21:31:35.665970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qrxmx" condition "Ready" to 2026-04-02 21:31:35.665957582 +0000 UTC m=+371.596804720 I0402 21:31:35.686305 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:31:35.686286492 +0000 UTC m=+371.617133640 I0402 21:31:35.702780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:31:40.628977 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:31:40.628962791 +0000 UTC m=+376.559809939 I0402 21:32:17.391964 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:32:17.392021 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 21:32:17.392011219 +0000 UTC m=+413.322858337 I0402 21:32:17.392274 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 21:32:17.392258185 +0000 UTC m=+413.323105293 I0402 21:32:17.393592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:32:17.393623 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 21:32:17.393618748 +0000 UTC m=+413.324465856 I0402 21:32:17.393669 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 21:32:17.393658129 +0000 UTC m=+413.324505247 I0402 21:32:17.403041 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 21:32:17.403026692 +0000 UTC m=+413.333873810 I0402 21:32:17.403055 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:32:17.403329 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 21:32:17.403315039 +0000 UTC m=+413.334162157 I0402 21:32:17.432939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:17.432994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:32:17.433103 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 21:32:17.433094939 +0000 UTC m=+413.363942057 I0402 21:32:17.433688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:17.433733 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 21:32:17.433729414 +0000 UTC m=+413.364576522 I0402 21:32:17.437004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:17.437106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:32:17.437143 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 21:32:17.437132845 +0000 UTC m=+413.367979963 I0402 21:32:17.637479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:17.695552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-97hq5" condition "Approved" to 2026-04-02 21:32:17.695537655 +0000 UTC m=+413.626384773 I0402 21:32:17.723424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-97hq5" condition "Ready" to 2026-04-02 21:32:17.723412419 +0000 UTC m=+413.654259537 I0402 21:32:17.754006 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:32:17.753993509 +0000 UTC m=+413.684840617 I0402 21:32:17.772486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:17.772856 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:32:17.772848007 +0000 UTC m=+413.703695125 I0402 21:32:17.800887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:17.801329 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:32:17.801315386 +0000 UTC m=+413.732162504 I0402 21:32:17.806507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2dnp8" condition "Approved" to 2026-04-02 21:32:17.806493349 +0000 UTC m=+413.737340477 I0402 21:32:17.822584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2dnp8" condition "Ready" to 2026-04-02 21:32:17.822567893 +0000 UTC m=+413.753415021 I0402 21:32:17.856293 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:32:17.856277976 +0000 UTC m=+413.787125084 I0402 21:32:17.933523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:17.988400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-x2xjf" condition "Approved" to 2026-04-02 21:32:17.988381745 +0000 UTC m=+413.919228873 I0402 21:32:18.143237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-x2xjf" condition "Ready" to 2026-04-02 21:32:18.143223036 +0000 UTC m=+414.074070154 I0402 21:32:18.739308 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:32:18.739292024 +0000 UTC m=+414.670139132 I0402 21:32:18.885920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:18.886254 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:32:18.886247898 +0000 UTC m=+414.817095006 I0402 21:32:19.088988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:24.724933 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xsmgj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:32:24.724967 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xsmgj-tls" condition "Issuing" to 2026-04-02 21:32:24.724959174 +0000 UTC m=+420.655806292 I0402 21:32:24.725037 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xsmgj-tls" condition "Ready" to 2026-04-02 21:32:24.725020596 +0000 UTC m=+420.655867704 I0402 21:32:24.741882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xsmgj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xsmgj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:24.741970 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xsmgj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:32:24.742044 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-xsmgj-tls" condition "Issuing" to 2026-04-02 21:32:24.742022751 +0000 UTC m=+420.672869869 I0402 21:32:24.883691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xsmgj-j77nm" condition "Approved" to 2026-04-02 21:32:24.883675658 +0000 UTC m=+420.814522776 I0402 21:32:24.902130 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-xsmgj-j77nm" condition "Ready" to 2026-04-02 21:32:24.902118277 +0000 UTC m=+420.832965395 I0402 21:32:24.929599 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-xsmgj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:32:24.929586442 +0000 UTC m=+420.860433560 I0402 21:32:24.951880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-xsmgj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-xsmgj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:46.465809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:32:46.465829 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 21:32:46.464940148 +0000 UTC m=+442.395787286 I0402 21:32:46.465857 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 21:32:46.46584911 +0000 UTC m=+442.396696218 I0402 21:32:46.486058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:46.486125 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 21:32:46.486118713 +0000 UTC m=+442.416965821 I0402 21:32:46.727033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:46.760367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rbqj8" condition "Approved" to 2026-04-02 21:32:46.76035371 +0000 UTC m=+442.691200818 I0402 21:32:46.779282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rbqj8" condition "Ready" to 2026-04-02 21:32:46.779271661 +0000 UTC m=+442.710118779 I0402 21:32:46.804836 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:32:46.80482434 +0000 UTC m=+442.735671458 I0402 21:32:46.825744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:46.826035 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:32:46.826028535 +0000 UTC m=+442.756875633 I0402 21:32:46.843923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:32:46.845124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:36:02.665433 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 21:36:02.665381061 +0000 UTC m=+638.596228199 I0402 21:36:02.665596 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:36:02.665685 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 21:36:02.665672908 +0000 UTC m=+638.596520026 I0402 21:36:02.705504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:36:02.705588 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 21:36:02.705581585 +0000 UTC m=+638.636428703 I0402 21:36:02.893450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:36:02.929740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8zdm2" condition "Approved" to 2026-04-02 21:36:02.929730767 +0000 UTC m=+638.860577875 I0402 21:36:02.944346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-8zdm2" condition "Ready" to 2026-04-02 21:36:02.944339774 +0000 UTC m=+638.875186882 I0402 21:36:02.964202 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:36:02.964196935 +0000 UTC m=+638.895044043 I0402 21:36:02.986463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:36:02.986808 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:36:02.986802162 +0000 UTC m=+638.917649280 I0402 21:36:03.006742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:38:21.631918 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:38:21.632007 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 21:38:21.6319982 +0000 UTC m=+777.562845338 I0402 21:38:21.632063 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 21:38:21.632041981 +0000 UTC m=+777.562889119 I0402 21:38:21.649606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:38:21.649665 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 21:38:21.649659171 +0000 UTC m=+777.580506289 I0402 21:38:21.919343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:38:21.955732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qxfqz" condition "Approved" to 2026-04-02 21:38:21.95571156 +0000 UTC m=+777.886558698 I0402 21:38:21.976155 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qxfqz" condition "Ready" to 2026-04-02 21:38:21.976139608 +0000 UTC m=+777.906986756 I0402 21:38:22.005422 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:38:22.005410956 +0000 UTC m=+777.936258094 I0402 21:38:22.028947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:38:22.029273 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:38:22.029268037 +0000 UTC m=+777.960115145 I0402 21:38:22.039180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:38:22.048435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:38:22.048732 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:38:22.048724861 +0000 UTC m=+777.979571969 I0402 21:38:22.049398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:39:17.573312 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 21:39:17.57329553 +0000 UTC m=+833.504142648 I0402 21:39:17.573303 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:39:17.573559 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 21:39:17.573539086 +0000 UTC m=+833.504386204 I0402 21:39:17.587485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:39:17.587592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:39:17.587609 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 21:39:17.58760376 +0000 UTC m=+833.518450888 I0402 21:39:17.824459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-dmg44" condition "Approved" to 2026-04-02 21:39:17.824447294 +0000 UTC m=+833.755294402 I0402 21:39:17.844401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-dmg44" condition "Ready" to 2026-04-02 21:39:17.844384567 +0000 UTC m=+833.775231685 I0402 21:39:17.879142 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:39:17.879126712 +0000 UTC m=+833.809973840 I0402 21:39:17.907418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:39:17.907737 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:39:17.907730152 +0000 UTC m=+833.838577260 I0402 21:39:17.929606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:39:17.929916 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:39:17.929908299 +0000 UTC m=+833.860755407 I0402 21:42:09.790655 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 21:42:09.790759 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-02 21:42:09.790745238 +0000 UTC m=+1005.721592396 I0402 21:42:09.790761 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 21:42:09.790745188 +0000 UTC m=+1005.721592336 I0402 21:42:09.808632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:42:09.808698 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 21:42:09.80869149 +0000 UTC m=+1005.739538608 I0402 21:42:09.930092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:42:09.963050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gskp8" condition "Approved" to 2026-04-02 21:42:09.963033913 +0000 UTC m=+1005.893881031 I0402 21:42:09.982585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gskp8" condition "Ready" to 2026-04-02 21:42:09.982573713 +0000 UTC m=+1005.913420821 I0402 21:42:10.015076 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:42:10.015061374 +0000 UTC m=+1005.945908512 I0402 21:42:10.038213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:42:10.038785 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 21:42:10.038777705 +0000 UTC m=+1005.969624823 I0402 21:42:10.051367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 21:42:10.063235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"