I0420 11:52:02.538718 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 11:52:02.538987 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 11:52:02.539173 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 11:52:02.544231 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 11:52:02.544744 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 11:52:02.544891 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 11:52:02.544954 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 11:52:02.547549 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 11:52:02.568285 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 11:52:02.568596 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 11:52:02.576948 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 11:52:02.580957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 11:52:02.583135 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 11:52:02.585111 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 11:52:02.587247 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 11:52:02.589454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 11:52:02.592506 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 11:52:02.592842 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 11:52:02.596563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 11:52:02.599246 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 11:52:02.602009 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 11:52:02.602072 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 11:52:02.602100 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 11:52:02.604571 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 11:52:02.606699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 11:52:02.609036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 11:52:02.610798 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 11:52:02.614998 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 11:52:02.619789 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 11:52:02.619836 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 11:52:02.619866 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 11:52:02.623732 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 11:52:02.626018 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 11:52:02.628531 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:52:02.628606 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:52:02.629840 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:52:02.629841 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:52:02.629877 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:52:02.629965 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:52:02.630511 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:52:02.630543 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:52:02.631006 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:52:02.716349 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 11:52:14.937928 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 11:52:14.937912198 +0000 UTC m=+12.434904988 I0420 11:52:15.617137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:52:15.617212 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 11:52:15.617201999 +0000 UTC m=+13.114194789 I0420 11:52:15.617467 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 11:52:15.617444115 +0000 UTC m=+13.114436915 E0420 11:52:15.630632 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 11:52:15.630691 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 11:52:15.630686635 +0000 UTC m=+13.127679405 E0420 11:52:15.630708 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 11:52:15.633891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:52:15.633941 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:52:15.633958 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 11:52:15.633953119 +0000 UTC m=+13.130945889 E0420 11:52:15.645583 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 11:52:15.645671 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 11:52:15.645758 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 11:52:15.646647 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 11:52:15.676045 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-q9bsl" condition "Approved" to 2026-04-20 11:52:15.676033564 +0000 UTC m=+13.173026354 I0420 11:52:15.688786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-q9bsl" condition "Ready" to 2026-04-20 11:52:15.688768632 +0000 UTC m=+13.185761432 I0420 11:52:15.707842 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:52:15.707822485 +0000 UTC m=+13.204815285 I0420 11:52:15.727845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:52:15.728220 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:52:15.728206717 +0000 UTC m=+13.225199517 I0420 11:52:15.740398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:52:15.740678 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:52:15.74067011 +0000 UTC m=+13.237662870 I0420 11:52:20.645932 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:52:20.645921533 +0000 UTC m=+18.142914293 I0420 11:52:40.644833 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 11:52:40.64481924 +0000 UTC m=+38.141812010 I0420 11:52:40.644903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:52:40.644947 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 11:52:40.644937602 +0000 UTC m=+38.141930372 I0420 11:52:40.658207 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 11:52:40.658196786 +0000 UTC m=+38.155189556 I0420 11:52:40.662918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:52:40.663008 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:52:40.663031 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 11:52:40.663024779 +0000 UTC m=+38.160017549 I0420 11:52:40.830650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:52:40.841906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-th9qt" condition "Approved" to 2026-04-20 11:52:40.841896504 +0000 UTC m=+38.338889294 I0420 11:52:40.871686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-th9qt" condition "Ready" to 2026-04-20 11:52:40.871676041 +0000 UTC m=+38.368668811 I0420 11:52:40.902648 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:52:40.902635913 +0000 UTC m=+38.399628683 I0420 11:52:40.929577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:52:40.930075 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:52:40.93006254 +0000 UTC m=+38.427055320 I0420 11:52:40.935391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:52:40.949085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:52:40.949749 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:52:40.94972036 +0000 UTC m=+38.446713160 I0420 11:54:16.840909 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 11:54:16.840833693 +0000 UTC m=+134.337826493 I0420 11:54:16.841250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:54:16.841325 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 11:54:16.841310663 +0000 UTC m=+134.338303433 I0420 11:54:16.856126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:54:16.856228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:54:16.856261 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 11:54:16.856249884 +0000 UTC m=+134.353242684 E0420 11:54:16.857127 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 11:54:16.857207 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 11:54:16.857198326 +0000 UTC m=+134.354191096 I0420 11:54:16.857256 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 11:54:16.865151 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 11:54:16.865244 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 11:54:16.865275 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 11:54:16.865307 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 11:54:16.870274 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:54:16.870318 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 11:54:16.870307964 +0000 UTC m=+134.367300734 I0420 11:54:16.870383 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 11:54:16.870371276 +0000 UTC m=+134.367364076 I0420 11:54:16.887946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:54:16.888137 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 11:54:16.888125311 +0000 UTC m=+134.385118121 I0420 11:54:16.998461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:54:17.032630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zzpmd" condition "Approved" to 2026-04-20 11:54:17.032612764 +0000 UTC m=+134.529605554 I0420 11:54:17.050618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zzpmd" condition "Ready" to 2026-04-20 11:54:17.050606465 +0000 UTC m=+134.547599235 I0420 11:54:17.086260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:54:17.093672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-4fpq2" condition "Approved" to 2026-04-20 11:54:17.093652466 +0000 UTC m=+134.590645266 I0420 11:54:17.127445 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-4fpq2" condition "Ready" to 2026-04-20 11:54:17.127430866 +0000 UTC m=+134.624423626 I0420 11:54:17.160243 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:54:17.160220364 +0000 UTC m=+134.657213154 I0420 11:54:17.181118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:54:17.181457 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:54:17.181447968 +0000 UTC m=+134.678440738 I0420 11:54:17.194180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:54:17.195966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:54:17.196279 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:54:17.196272116 +0000 UTC m=+134.693264886 I0420 11:54:21.866381 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:54:21.866365773 +0000 UTC m=+139.363358573 I0420 11:54:21.883227 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-zzpmd" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:54:21.883209617 +0000 UTC m=+139.380202417 I0420 11:54:21.909794 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:54:21.909774182 +0000 UTC m=+139.406766982 I0420 11:54:21.928687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:54:21.929104 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:54:21.929096013 +0000 UTC m=+139.426088773 I0420 11:54:21.936833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:54:21.948335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:54:21.948378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:54:21.948616 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:54:21.948607868 +0000 UTC m=+139.445600638 I0420 11:56:48.729069 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-74.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:56:48.729548 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready" to 2026-04-20 11:56:48.729530561 +0000 UTC m=+286.226523361 I0420 11:56:48.729983 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Issuing" to 2026-04-20 11:56:48.729301015 +0000 UTC m=+286.226293815 I0420 11:56:48.746538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:56:48.746614 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready" to 2026-04-20 11:56:48.746603888 +0000 UTC m=+286.243596668 I0420 11:56:48.900600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:56:48.929566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-74.nip.io-tls-q985g" condition "Approved" to 2026-04-20 11:56:48.929541897 +0000 UTC m=+286.426534667 I0420 11:56:48.949941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-74.nip.io-tls-q985g" condition "Ready" to 2026-04-20 11:56:48.949926232 +0000 UTC m=+286.446919002 I0420 11:56:48.974933 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:48.974926024 +0000 UTC m=+286.471918794 I0420 11:56:49.001944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:56:49.002443 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:49.002434674 +0000 UTC m=+286.499427444 I0420 11:56:49.017417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-74.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-74.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:56:49.017821 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-74.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:56:49.017811212 +0000 UTC m=+286.514804012 I0420 11:58:07.973089 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:58:07.973138 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 11:58:07.973126988 +0000 UTC m=+365.470119778 I0420 11:58:07.973710 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 11:58:07.973701751 +0000 UTC m=+365.470694541 E0420 11:58:07.989285 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 11:58:07.989340 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 11:58:07.989333985 +0000 UTC m=+365.486326755 E0420 11:58:07.989378 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 11:58:07.991356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:07.991432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:58:07.991540 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 11:58:07.991530677 +0000 UTC m=+365.488523447 E0420 11:58:08.004002 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 11:58:08.004269 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 11:58:08.004319 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 11:58:08.004368 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 11:58:08.023971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:08.029794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-p875j" condition "Approved" to 2026-04-20 11:58:08.029784471 +0000 UTC m=+365.526777241 I0420 11:58:08.041218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-p875j" condition "Ready" to 2026-04-20 11:58:08.041201207 +0000 UTC m=+365.538193977 I0420 11:58:08.060579 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:58:08.060563969 +0000 UTC m=+365.557556739 I0420 11:58:08.073808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:13.004949 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:58:13.004933065 +0000 UTC m=+370.501925885 I0420 11:58:49.149085 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 11:58:49.148901175 +0000 UTC m=+406.645893935 I0420 11:58:49.149098 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:58:49.149382 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 11:58:49.149370866 +0000 UTC m=+406.646363666 I0420 11:58:49.153793 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 11:58:49.153787209 +0000 UTC m=+406.650779979 I0420 11:58:49.154118 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:58:49.154147 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 11:58:49.154135007 +0000 UTC m=+406.651127777 I0420 11:58:49.154364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:58:49.154383 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 11:58:49.154380023 +0000 UTC m=+406.651372793 I0420 11:58:49.154572 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 11:58:49.154568337 +0000 UTC m=+406.651561107 I0420 11:58:49.176968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:49.177360 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 11:58:49.177348879 +0000 UTC m=+406.674341659 I0420 11:58:49.181465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:49.181582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:58:49.181630 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 11:58:49.181620879 +0000 UTC m=+406.678613649 I0420 11:58:49.183531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:49.183602 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 11:58:49.183594285 +0000 UTC m=+406.680587055 I0420 11:58:49.468581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wmkvs" condition "Approved" to 2026-04-20 11:58:49.468563429 +0000 UTC m=+406.965556229 I0420 11:58:49.496832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wmkvs" condition "Ready" to 2026-04-20 11:58:49.496818699 +0000 UTC m=+406.993811469 I0420 11:58:49.507408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:49.520581 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:58:49.520565364 +0000 UTC m=+407.017558164 I0420 11:58:49.543236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ml7wx" condition "Approved" to 2026-04-20 11:58:49.543214383 +0000 UTC m=+407.040207153 I0420 11:58:49.545941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:49.560937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-ml7wx" condition "Ready" to 2026-04-20 11:58:49.560920246 +0000 UTC m=+407.057913036 I0420 11:58:49.588541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:49.594956 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:58:49.594945141 +0000 UTC m=+407.091937911 I0420 11:58:49.743487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:49.743920 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:58:49.743909439 +0000 UTC m=+407.240902209 I0420 11:58:49.804987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:49.850218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-n4x5s" condition "Approved" to 2026-04-20 11:58:49.850199342 +0000 UTC m=+407.347192132 I0420 11:58:50.253972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-n4x5s" condition "Ready" to 2026-04-20 11:58:50.253960811 +0000 UTC m=+407.750953571 I0420 11:58:50.446253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:50.496535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:50.745484 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:58:50.745469219 +0000 UTC m=+408.242461989 I0420 11:58:50.846151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:50.846557 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:58:50.84654901 +0000 UTC m=+408.343541780 I0420 11:58:51.044413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:57.408896 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls" condition "Ready" to 2026-04-20 11:58:57.40887084 +0000 UTC m=+414.905863630 I0420 11:58:57.409596 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:58:57.409627 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls" condition "Issuing" to 2026-04-20 11:58:57.409613207 +0000 UTC m=+414.906605997 I0420 11:58:57.424741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:57.424844 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls" condition "Ready" to 2026-04-20 11:58:57.424833002 +0000 UTC m=+414.921825772 I0420 11:58:57.579275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:57.603294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qfj9m-szvq4" condition "Approved" to 2026-04-20 11:58:57.60327634 +0000 UTC m=+415.100269110 I0420 11:58:57.626567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qfj9m-szvq4" condition "Ready" to 2026-04-20 11:58:57.626556553 +0000 UTC m=+415.123549323 I0420 11:58:57.658854 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:58:57.658840327 +0000 UTC m=+415.155833097 I0420 11:58:57.687384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:57.687794 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:58:57.687783133 +0000 UTC m=+415.184775893 I0420 11:58:57.694824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:57.705600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:58:57.705917 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qfj9m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:58:57.705905787 +0000 UTC m=+415.202898557 I0420 11:59:18.777266 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 11:59:18.777250873 +0000 UTC m=+436.274243673 I0420 11:59:18.777971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:59:18.778138 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 11:59:18.778129765 +0000 UTC m=+436.275122565 I0420 11:59:18.792139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:59:18.792243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 11:59:18.792291 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 11:59:18.792284654 +0000 UTC m=+436.289277454 I0420 11:59:19.082789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 11:59:19.089560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wrxtk" condition "Approved" to 2026-04-20 11:59:19.089548899 +0000 UTC m=+436.586541669 I0420 11:59:19.111968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wrxtk" condition "Ready" to 2026-04-20 11:59:19.111949651 +0000 UTC m=+436.608942451 I0420 11:59:19.135790 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 11:59:19.135774185 +0000 UTC m=+436.632766945 I0420 11:59:19.155925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:02:42.503619 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:02:42.503640 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 12:02:42.503620047 +0000 UTC m=+640.000612877 I0420 12:02:42.503715 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 12:02:42.503702439 +0000 UTC m=+640.000695239 I0420 12:02:42.523482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:02:42.523634 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 12:02:42.523625212 +0000 UTC m=+640.020617982 I0420 12:02:42.695006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:02:42.724138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jkkqp" condition "Approved" to 2026-04-20 12:02:42.724126739 +0000 UTC m=+640.221119509 I0420 12:02:42.741782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jkkqp" condition "Ready" to 2026-04-20 12:02:42.741767216 +0000 UTC m=+640.238760006 I0420 12:02:42.767731 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:02:42.767716905 +0000 UTC m=+640.264709665 I0420 12:02:42.794076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:02:42.798286 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:02:42.798268955 +0000 UTC m=+640.295261755 I0420 12:02:42.800215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:02:42.817502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:02:42.817857 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:02:42.817848519 +0000 UTC m=+640.314841289 I0420 12:05:06.627630 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 12:05:06.627581594 +0000 UTC m=+784.124574384 I0420 12:05:06.627720 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:05:06.627895 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 12:05:06.627883211 +0000 UTC m=+784.124876031 I0420 12:05:06.646354 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:05:06.646559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:05:06.646705 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 12:05:06.646582547 +0000 UTC m=+784.143575337 I0420 12:05:07.053273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:05:07.063177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8dsgf" condition "Approved" to 2026-04-20 12:05:07.063164952 +0000 UTC m=+784.560157722 I0420 12:05:07.082240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8dsgf" condition "Ready" to 2026-04-20 12:05:07.082229897 +0000 UTC m=+784.579222667 I0420 12:05:07.107917 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:05:07.107904423 +0000 UTC m=+784.604897193 I0420 12:05:07.127758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:05:07.128074 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:05:07.128069225 +0000 UTC m=+784.625061985 I0420 12:05:07.140861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:05:07.146999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:06:13.884492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:06:13.884542 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 12:06:13.884534654 +0000 UTC m=+851.381527424 I0420 12:06:13.884535 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 12:06:13.884524464 +0000 UTC m=+851.381517264 I0420 12:06:13.900452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:06:13.900531 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 12:06:13.900522878 +0000 UTC m=+851.397515648 I0420 12:06:14.199681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:06:14.230448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-clpkv" condition "Approved" to 2026-04-20 12:06:14.230437654 +0000 UTC m=+851.727430424 I0420 12:06:14.248560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-clpkv" condition "Ready" to 2026-04-20 12:06:14.24854944 +0000 UTC m=+851.745542220 I0420 12:06:14.277865 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:06:14.277851981 +0000 UTC m=+851.774844751 I0420 12:06:14.299573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:09:12.064846 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 12:09:12.064802016 +0000 UTC m=+1029.561794816 I0420 12:09:12.064982 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 12:09:12.065105 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 12:09:12.065091783 +0000 UTC m=+1029.562084583 I0420 12:09:12.081704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:09:12.081811 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 12:09:12.081799974 +0000 UTC m=+1029.578792744 I0420 12:09:12.386427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:09:12.420629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-fp9sl" condition "Approved" to 2026-04-20 12:09:12.420611102 +0000 UTC m=+1029.917603902 I0420 12:09:12.443305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-fp9sl" condition "Ready" to 2026-04-20 12:09:12.44329457 +0000 UTC m=+1029.940287330 I0420 12:09:12.472900 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:09:12.472885626 +0000 UTC m=+1029.969878396 I0420 12:09:12.499619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:09:12.499986 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 12:09:12.499979223 +0000 UTC m=+1029.996971993 I0420 12:09:12.506139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 12:09:12.518609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"