I0420 14:22:34.191869 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 14:22:34.191960 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 14:22:34.192025 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 14:22:34.196653 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 14:22:34.197281 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 14:22:34.197352 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 14:22:34.197362 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 14:22:34.200771 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 14:22:34.213198 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 14:22:34.217095 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 14:22:34.220220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 14:22:34.222545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 14:22:34.225744 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 14:22:34.230133 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 14:22:34.233255 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 14:22:34.238453 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 14:22:34.241744 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 14:22:34.241796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 14:22:34.244916 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 14:22:34.247327 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 14:22:34.249666 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 14:22:34.249711 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 14:22:34.249739 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 14:22:34.249718 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 14:22:34.251589 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 14:22:34.256212 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 14:22:34.256304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 14:22:34.258769 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 14:22:34.258822 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 14:22:34.261293 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 14:22:34.263686 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 14:22:34.265702 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 14:22:34.267540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 14:22:34.269886 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:34.270829 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:34.271669 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:34.271934 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:34.295442 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:34.309845 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:34.325083 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:34.343637 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:34.359380 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:34.364954 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:22:46.022739 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 14:22:46.022727159 +0000 UTC m=+11.865612194 I0420 14:22:46.749850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:22:46.749885 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 14:22:46.74987947 +0000 UTC m=+12.592764595 I0420 14:22:46.750576 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 14:22:46.750571617 +0000 UTC m=+12.593456642 E0420 14:22:46.767369 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:22:46.767462 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 14:22:46.767452084 +0000 UTC m=+12.610337119 E0420 14:22:46.767492 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:22:46.767858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:46.767974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:22:46.768019 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 14:22:46.767996086 +0000 UTC m=+12.610881131 E0420 14:22:46.782773 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 14:22:46.782982 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:22:46.783058 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:22:46.783132 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 14:22:46.815119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g4nx6" condition "Approved" to 2026-04-20 14:22:46.815101952 +0000 UTC m=+12.657986987 I0420 14:22:46.826991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g4nx6" condition "Ready" to 2026-04-20 14:22:46.826978489 +0000 UTC m=+12.669863514 I0420 14:22:46.856867 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:22:46.856843239 +0000 UTC m=+12.699728294 I0420 14:22:46.877948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:46.882285 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:22:46.882275062 +0000 UTC m=+12.725160097 I0420 14:22:46.890029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:46.901219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:22:46.901560 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:22:46.901550297 +0000 UTC m=+12.744435332 I0420 14:22:51.783491 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:22:51.783477173 +0000 UTC m=+17.626362238 I0420 14:23:14.970586 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 14:23:14.970527809 +0000 UTC m=+40.813412854 I0420 14:23:14.970594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:23:14.971128 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 14:23:14.971121203 +0000 UTC m=+40.814006238 I0420 14:23:14.983758 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 14:23:14.983743437 +0000 UTC m=+40.826628462 I0420 14:23:14.994478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:14.994601 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 14:23:14.994590579 +0000 UTC m=+40.837475634 I0420 14:23:15.097805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:15.137199 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mdbjh" condition "Approved" to 2026-04-20 14:23:15.137181266 +0000 UTC m=+40.980066301 I0420 14:23:15.171048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-mdbjh" condition "Ready" to 2026-04-20 14:23:15.171035573 +0000 UTC m=+41.013920598 I0420 14:23:15.199528 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:23:15.199507869 +0000 UTC m=+41.042392934 I0420 14:23:15.224009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:15.224350 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:23:15.224342378 +0000 UTC m=+41.067227403 I0420 14:23:15.242321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:23:15.242696 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:23:15.24268769 +0000 UTC m=+41.085572735 I0420 14:25:00.224570 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 14:25:00.224550793 +0000 UTC m=+146.067435848 I0420 14:25:00.224630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:25:00.224686 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 14:25:00.224673446 +0000 UTC m=+146.067558491 E0420 14:25:00.241453 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 14:25:00.241510 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 14:25:00.241500297 +0000 UTC m=+146.084385332 I0420 14:25:00.241558 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 14:25:00.244830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:00.244934 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 14:25:00.24492445 +0000 UTC m=+146.087809495 E0420 14:25:00.256896 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 14:25:00.257098 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 14:25:00.257268 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 14:25:00.257320 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 14:25:00.260668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:25:00.260692 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 14:25:00.260685775 +0000 UTC m=+146.103570810 I0420 14:25:00.260835 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 14:25:00.260821389 +0000 UTC m=+146.103706424 I0420 14:25:00.300181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:00.300431 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 14:25:00.300402475 +0000 UTC m=+146.143287500 I0420 14:25:00.352858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:00.403684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-jnpqz" condition "Approved" to 2026-04-20 14:25:00.403669317 +0000 UTC m=+146.246554342 I0420 14:25:00.419225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:00.431287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-jnpqz" condition "Ready" to 2026-04-20 14:25:00.431273301 +0000 UTC m=+146.274158326 I0420 14:25:00.457905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dwfkw" condition "Approved" to 2026-04-20 14:25:00.457893381 +0000 UTC m=+146.300778416 I0420 14:25:00.464190 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:00.464178694 +0000 UTC m=+146.307063739 I0420 14:25:00.476809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dwfkw" condition "Ready" to 2026-04-20 14:25:00.476793933 +0000 UTC m=+146.319678958 I0420 14:25:00.483908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:00.485479 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:00.485464454 +0000 UTC m=+146.328349519 I0420 14:25:00.495321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:00.504941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:00.505317 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:00.505307339 +0000 UTC m=+146.348192374 I0420 14:25:05.258306 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:05.258296571 +0000 UTC m=+151.101181596 I0420 14:25:05.272683 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-dwfkw" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:05.272668552 +0000 UTC m=+151.115553587 I0420 14:25:05.310417 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:05.310401623 +0000 UTC m=+151.153286658 I0420 14:25:05.331636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:05.332165 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:05.332135434 +0000 UTC m=+151.175020489 I0420 14:25:05.348191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:36.792808 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:27:36.792785 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-04-20 14:27:36.792763937 +0000 UTC m=+302.635648992 I0420 14:27:36.792862 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-04-20 14:27:36.792852049 +0000 UTC m=+302.635737114 I0420 14:27:36.811153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:36.811232 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-04-20 14:27:36.811222197 +0000 UTC m=+302.654107262 I0420 14:27:37.020710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:27:37.050175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-qq5kj" condition "Approved" to 2026-04-20 14:27:37.050143384 +0000 UTC m=+302.893028409 I0420 14:27:37.069023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-qq5kj" condition "Ready" to 2026-04-20 14:27:37.069010625 +0000 UTC m=+302.911895680 I0420 14:27:37.097710 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:27:37.097699726 +0000 UTC m=+302.940584781 I0420 14:27:37.119240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:47.757198 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:28:47.757238 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 14:28:47.757229266 +0000 UTC m=+373.600114321 I0420 14:28:47.757337 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 14:28:47.757324899 +0000 UTC m=+373.600209964 E0420 14:28:47.769164 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:28:47.769225 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 14:28:47.76921492 +0000 UTC m=+373.612099975 E0420 14:28:47.769288 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:28:47.772344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:47.772469 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 14:28:47.772456859 +0000 UTC m=+373.615341924 E0420 14:28:47.777402 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 14:28:47.777497 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:28:47.777534 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:28:47.777576 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 14:28:47.787699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:47.812814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cnpzm" condition "Approved" to 2026-04-20 14:28:47.812794307 +0000 UTC m=+373.655679372 I0420 14:28:47.830311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-cnpzm" condition "Ready" to 2026-04-20 14:28:47.830295237 +0000 UTC m=+373.673180302 I0420 14:28:47.855881 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:28:47.855864494 +0000 UTC m=+373.698749539 I0420 14:28:47.875709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:47.876012 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:28:47.875934635 +0000 UTC m=+373.718819660 I0420 14:28:47.882012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:47.891880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:28:47.892424 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:28:47.892412759 +0000 UTC m=+373.735297824 I0420 14:28:52.777968 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:28:52.777955971 +0000 UTC m=+378.620841026 I0420 14:29:30.122499 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:30.124620 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 14:29:30.124609373 +0000 UTC m=+415.967494398 I0420 14:29:30.123271 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 14:29:30.12326098 +0000 UTC m=+415.966146005 I0420 14:29:30.132929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:30.132954 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 14:29:30.132950288 +0000 UTC m=+415.975835313 I0420 14:29:30.133181 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 14:29:30.133167863 +0000 UTC m=+415.976052898 I0420 14:29:30.133623 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:30.134339 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 14:29:30.134332572 +0000 UTC m=+415.977217597 I0420 14:29:30.133835 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 14:29:30.13383075 +0000 UTC m=+415.976715775 I0420 14:29:30.151586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:30.151669 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 14:29:30.151659698 +0000 UTC m=+415.994544743 I0420 14:29:30.156497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:30.156583 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:30.156611 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 14:29:30.156604679 +0000 UTC m=+415.999489714 I0420 14:29:30.165621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:30.165711 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 14:29:30.165700982 +0000 UTC m=+416.008586017 I0420 14:29:30.332390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:30.371699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7jxvr" condition "Approved" to 2026-04-20 14:29:30.371687913 +0000 UTC m=+416.214572948 I0420 14:29:30.381963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nxw2c" condition "Approved" to 2026-04-20 14:29:30.381951165 +0000 UTC m=+416.224836190 I0420 14:29:30.407816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7jxvr" condition "Ready" to 2026-04-20 14:29:30.40780535 +0000 UTC m=+416.250690375 I0420 14:29:30.414452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nxw2c" condition "Ready" to 2026-04-20 14:29:30.414438303 +0000 UTC m=+416.257323338 I0420 14:29:30.422488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:30.446383 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:30.446366167 +0000 UTC m=+416.289251222 I0420 14:29:30.449271 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:30.449255438 +0000 UTC m=+416.292140473 I0420 14:29:30.473016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:30.473257 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:30.473251908 +0000 UTC m=+416.316136933 I0420 14:29:30.484236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:30.600608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:30.601102 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:30.601094058 +0000 UTC m=+416.443979113 I0420 14:29:30.705756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:31.156644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pz49q" condition "Approved" to 2026-04-20 14:29:31.156630055 +0000 UTC m=+416.999515090 I0420 14:29:31.410879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-pz49q" condition "Ready" to 2026-04-20 14:29:31.41086731 +0000 UTC m=+417.253752345 I0420 14:29:31.648306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0420 14:29:31.691176 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-bqswl\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0420 14:29:32.300289 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-pz49q" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-j2qtr" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0420 14:29:32.323645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m55lq" condition "Approved" to 2026-04-20 14:29:32.323625882 +0000 UTC m=+418.166510907 I0420 14:29:32.341766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m55lq" condition "Ready" to 2026-04-20 14:29:32.341755498 +0000 UTC m=+418.184640533 I0420 14:29:32.601154 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:32.601139339 +0000 UTC m=+418.444024374 I0420 14:29:32.699098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:32.699492 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:32.699484595 +0000 UTC m=+418.542369630 I0420 14:29:32.949317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:32.996049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:38.421749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-85rq9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:38.421792 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-85rq9-tls" condition "Issuing" to 2026-04-20 14:29:38.421781624 +0000 UTC m=+424.264666689 I0420 14:29:38.422537 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-85rq9-tls" condition "Ready" to 2026-04-20 14:29:38.422516932 +0000 UTC m=+424.265401997 I0420 14:29:38.445679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-85rq9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-85rq9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:38.445777 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-85rq9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:29:38.445826 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-85rq9-tls" condition "Issuing" to 2026-04-20 14:29:38.445818165 +0000 UTC m=+424.288703200 I0420 14:29:38.656103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-85rq9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-85rq9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:29:38.664068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-85rq9-c4pqp" condition "Approved" to 2026-04-20 14:29:38.664057876 +0000 UTC m=+424.506942901 I0420 14:29:38.681535 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-85rq9-c4pqp" condition "Ready" to 2026-04-20 14:29:38.681527935 +0000 UTC m=+424.524412960 I0420 14:29:38.712081 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-85rq9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:29:38.712066016 +0000 UTC m=+424.554951071 I0420 14:29:38.735685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-85rq9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-85rq9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:01.279030 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 14:30:01.279013874 +0000 UTC m=+447.121898899 I0420 14:30:01.279088 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:30:01.279130 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 14:30:01.279120367 +0000 UTC m=+447.122005402 I0420 14:30:01.318025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:01.318121 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 14:30:01.318114945 +0000 UTC m=+447.160999970 I0420 14:30:01.507506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:01.534925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-khm47" condition "Approved" to 2026-04-20 14:30:01.534914021 +0000 UTC m=+447.377799046 I0420 14:30:01.552906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-khm47" condition "Ready" to 2026-04-20 14:30:01.552893772 +0000 UTC m=+447.395778807 I0420 14:30:01.624587 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:30:01.624574703 +0000 UTC m=+447.467459738 I0420 14:30:01.644998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:01.645299 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:30:01.645291182 +0000 UTC m=+447.488176217 I0420 14:30:01.648538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:01.664267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:01.664484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:01.664819 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:30:01.664811761 +0000 UTC m=+447.507696796 I0420 14:33:36.691946 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 14:33:36.691933575 +0000 UTC m=+662.534818640 I0420 14:33:36.691984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:33:36.692320 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 14:33:36.692284243 +0000 UTC m=+662.535169318 I0420 14:33:36.707069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:33:36.707238 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 14:33:36.70722771 +0000 UTC m=+662.550112775 I0420 14:33:37.037885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:33:37.071741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sj5ns" condition "Approved" to 2026-04-20 14:33:37.071703558 +0000 UTC m=+662.914588593 I0420 14:33:37.102501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-sj5ns" condition "Ready" to 2026-04-20 14:33:37.102489516 +0000 UTC m=+662.945374561 I0420 14:33:37.129298 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:33:37.129279486 +0000 UTC m=+662.972164521 I0420 14:33:37.152263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:33:37.152593 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:33:37.152585959 +0000 UTC m=+662.995470984 I0420 14:33:37.165466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:33:37.176462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:36:11.927325 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:36:11.927409 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 14:36:11.927400459 +0000 UTC m=+817.770285494 I0420 14:36:11.927378 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 14:36:11.927358938 +0000 UTC m=+817.770244003 I0420 14:36:11.946698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:36:11.946776 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 14:36:11.946769216 +0000 UTC m=+817.789654251 I0420 14:36:12.260175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:36:12.292909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-vr78v" condition "Approved" to 2026-04-20 14:36:12.292888728 +0000 UTC m=+818.135773763 I0420 14:36:12.313198 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-vr78v" condition "Ready" to 2026-04-20 14:36:12.313187358 +0000 UTC m=+818.156072393 I0420 14:36:12.350271 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:36:12.350253381 +0000 UTC m=+818.193138406 I0420 14:36:12.378035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:37:19.828654 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:37:19.828700 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 14:37:19.828690682 +0000 UTC m=+885.671575747 I0420 14:37:19.828809 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 14:37:19.828798955 +0000 UTC m=+885.671684020 I0420 14:37:19.848568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:37:19.848625 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 14:37:19.848618773 +0000 UTC m=+885.691503808 I0420 14:37:20.048761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:37:20.102534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-m6lzt" condition "Approved" to 2026-04-20 14:37:20.102523938 +0000 UTC m=+885.945408973 I0420 14:37:20.117110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-m6lzt" condition "Ready" to 2026-04-20 14:37:20.117100557 +0000 UTC m=+885.959985582 I0420 14:37:20.148640 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:37:20.148625673 +0000 UTC m=+885.991510698 I0420 14:37:20.172080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:37:20.172393 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:37:20.172385349 +0000 UTC m=+886.015270384 I0420 14:37:20.192976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:40:55.727652 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 14:40:55.727634544 +0000 UTC m=+1101.570519629 I0420 14:40:55.728222 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:40:55.728273 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 14:40:55.728262129 +0000 UTC m=+1101.571147194 I0420 14:40:55.743111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:40:55.743180 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:40:55.743199 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 14:40:55.743194728 +0000 UTC m=+1101.586079763 I0420 14:40:55.853138 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-x26fz" condition "Approved" to 2026-04-20 14:40:55.853123857 +0000 UTC m=+1101.696008892 I0420 14:40:55.873427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-x26fz" condition "Ready" to 2026-04-20 14:40:55.873415937 +0000 UTC m=+1101.716300972 I0420 14:40:55.909448 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:40:55.909435515 +0000 UTC m=+1101.752320550 I0420 14:40:55.932106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:40:55.932397 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:40:55.932390451 +0000 UTC m=+1101.775275486 I0420 14:40:55.952696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"