I0505 11:21:58.466534 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0505 11:21:58.466647 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0505 11:21:58.466715 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0505 11:21:58.472021 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0505 11:21:58.472436 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0505 11:21:58.472567 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0505 11:21:58.472583 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0505 11:21:58.475527 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0505 11:21:58.488857 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0505 11:21:58.492104 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0505 11:21:58.494745 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0505 11:21:58.500549 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0505 11:21:58.504752 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0505 11:21:58.504896 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0505 11:21:58.507903 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0505 11:21:58.507922 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0505 11:21:58.508002 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0505 11:21:58.509877 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0505 11:21:58.511755 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0505 11:21:58.513502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0505 11:21:58.515208 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0505 11:21:58.531442 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0505 11:21:58.533727 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0505 11:21:58.533768 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0505 11:21:58.533798 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0505 11:21:58.536001 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0505 11:21:58.538078 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0505 11:21:58.540240 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0505 11:21:58.540318 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0505 11:21:58.542317 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0505 11:21:58.544429 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0505 11:21:58.546280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0505 11:21:58.551676 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0505 11:21:58.555886 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:21:58.555984 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:21:58.556585 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:21:58.573525 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:21:58.590152 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:21:58.611033 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:21:58.630537 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:21:58.643278 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:21:58.662419 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:21:58.663273 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 11:22:11.045563 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-05 11:22:11.04551995 +0000 UTC m=+12.610926289 I0505 11:22:11.794359 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 11:22:11.794340997 +0000 UTC m=+13.359747346 I0505 11:22:11.794997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:22:11.795169 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 11:22:11.795120936 +0000 UTC m=+13.360527285 E0505 11:22:11.812379 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 11:22:11.812499 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-05 11:22:11.812490718 +0000 UTC m=+13.377897037 E0505 11:22:11.812547 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 11:22:11.814595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:11.814736 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:22:11.814793 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 11:22:11.814780966 +0000 UTC m=+13.380187295 E0505 11:22:11.828216 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0505 11:22:11.828761 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:22:11.828952 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:22:11.829123 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0505 11:22:11.862361 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7p82q" condition "Approved" to 2026-05-05 11:22:11.862290373 +0000 UTC m=+13.427696712 I0505 11:22:11.878071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7p82q" condition "Ready" to 2026-05-05 11:22:11.878054843 +0000 UTC m=+13.443461162 I0505 11:22:11.899172 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:11.899155219 +0000 UTC m=+13.464561558 I0505 11:22:11.919805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:11.920280 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:11.920271035 +0000 UTC m=+13.485677384 I0505 11:22:11.926277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:11.937377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:16.829066 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:16.829051695 +0000 UTC m=+18.394458044 I0505 11:22:34.977700 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 11:22:34.977682563 +0000 UTC m=+36.543088912 I0505 11:22:34.977985 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:22:34.978050 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 11:22:34.978037053 +0000 UTC m=+36.543443392 I0505 11:22:35.002021 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-05 11:22:35.002007102 +0000 UTC m=+36.567413431 I0505 11:22:35.005612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:35.005748 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:22:35.005789 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 11:22:35.005780208 +0000 UTC m=+36.571186547 I0505 11:22:35.164983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qvgw8" condition "Approved" to 2026-05-05 11:22:35.16496817 +0000 UTC m=+36.730374509 I0505 11:22:35.202079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qvgw8" condition "Ready" to 2026-05-05 11:22:35.202059102 +0000 UTC m=+36.767465421 I0505 11:22:35.231925 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:35.23190569 +0000 UTC m=+36.797312009 I0505 11:22:35.254452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:35.254688 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:35.254680029 +0000 UTC m=+36.820086348 I0505 11:22:35.271980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:22:35.272364 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:22:35.272351737 +0000 UTC m=+36.837758056 I0505 11:22:35.280526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:02.432234 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-87.nip.io-tls" condition "Ready" to 2026-05-05 11:27:02.432214871 +0000 UTC m=+303.997621180 I0505 11:27:02.432266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-87.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:27:02.432348 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-87.nip.io-tls" condition "Issuing" to 2026-05-05 11:27:02.432341464 +0000 UTC m=+303.997747783 I0505 11:27:02.457048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-87.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-87.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:02.457140 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-87.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:27:02.457161 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-87.nip.io-tls" condition "Issuing" to 2026-05-05 11:27:02.457154233 +0000 UTC m=+304.022560552 I0505 11:27:03.039030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-87.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-87.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:03.047919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-87.nip.io-tls-gg2g8" condition "Approved" to 2026-05-05 11:27:03.047901386 +0000 UTC m=+304.613307735 I0505 11:27:03.074339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-87.nip.io-tls-gg2g8" condition "Ready" to 2026-05-05 11:27:03.074311724 +0000 UTC m=+304.639718073 I0505 11:27:03.099194 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-87.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:03.099183684 +0000 UTC m=+304.664590003 I0505 11:27:03.127019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-87.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-87.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:03.127334 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-87.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:03.127324777 +0000 UTC m=+304.692731096 I0505 11:27:03.148759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-87.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-87.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:27:03.148978 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-87.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:27:03.148973166 +0000 UTC m=+304.714379485 I0505 11:27:03.149174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-87.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-87.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:09.172687 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 11:28:09.172632704 +0000 UTC m=+370.738039043 I0505 11:28:09.172937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:28:09.173056 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 11:28:09.173043055 +0000 UTC m=+370.738449374 I0505 11:28:09.189250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:09.189383 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 11:28:09.189367302 +0000 UTC m=+370.754773661 E0505 11:28:09.191228 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 11:28:09.191311 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-05 11:28:09.191294119 +0000 UTC m=+370.756700468 E0505 11:28:09.191422 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:28:09.205075 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0505 11:28:09.205257 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:28:09.205350 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 11:28:09.205441 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0505 11:28:09.208184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:09.234721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-v5tq9" condition "Approved" to 2026-05-05 11:28:09.234703595 +0000 UTC m=+370.800109894 I0505 11:28:09.250393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-v5tq9" condition "Ready" to 2026-05-05 11:28:09.250376513 +0000 UTC m=+370.815782832 I0505 11:28:09.275377 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:09.275359602 +0000 UTC m=+370.840765921 I0505 11:28:09.291894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:09.292478 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:09.292468981 +0000 UTC m=+370.857875300 I0505 11:28:09.305338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:09.308027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:14.206028 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:14.206008913 +0000 UTC m=+375.771415252 I0505 11:28:54.226665 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 11:28:54.226645254 +0000 UTC m=+415.792051563 I0505 11:28:54.226773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:28:54.226896 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 11:28:54.226887061 +0000 UTC m=+415.792293380 I0505 11:28:54.229711 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 11:28:54.229698702 +0000 UTC m=+415.795105011 I0505 11:28:54.230025 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:28:54.230044 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 11:28:54.230040841 +0000 UTC m=+415.795447140 I0505 11:28:54.233682 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 11:28:54.233676305 +0000 UTC m=+415.799082614 I0505 11:28:54.234047 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:28:54.234074 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 11:28:54.234069684 +0000 UTC m=+415.799476013 I0505 11:28:54.260298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:54.260411 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:28:54.260440 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 11:28:54.260431709 +0000 UTC m=+415.825838018 I0505 11:28:54.265820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:54.265906 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 11:28:54.265899269 +0000 UTC m=+415.831305578 I0505 11:28:54.268865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:54.268958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:28:54.269004 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 11:28:54.268995389 +0000 UTC m=+415.834401708 I0505 11:28:54.432801 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xq7bq" condition "Approved" to 2026-05-05 11:28:54.432774879 +0000 UTC m=+415.998181188 I0505 11:28:54.456498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xq7bq" condition "Ready" to 2026-05-05 11:28:54.456486926 +0000 UTC m=+416.021893225 I0505 11:28:54.483989 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:54.483969779 +0000 UTC m=+416.049376098 I0505 11:28:54.527227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:54.527700 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:54.527690708 +0000 UTC m=+416.093097037 I0505 11:28:54.589538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:54.589949 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:54.589938491 +0000 UTC m=+416.155344790 I0505 11:28:54.624127 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qxjdm" condition "Approved" to 2026-05-05 11:28:54.624110555 +0000 UTC m=+416.189516854 I0505 11:28:54.643698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qxjdm" condition "Ready" to 2026-05-05 11:28:54.643687237 +0000 UTC m=+416.209093556 I0505 11:28:54.674532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:54.675938 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:54.675915071 +0000 UTC m=+416.241321410 I0505 11:28:54.770045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:54.770373 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:54.770362937 +0000 UTC m=+416.335769256 I0505 11:28:54.875989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8qbk8" condition "Approved" to 2026-05-05 11:28:54.875959099 +0000 UTC m=+416.441365448 E0505 11:28:54.917938 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-cbt2d\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0505 11:28:55.027769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8qbk8" condition "Ready" to 2026-05-05 11:28:55.027750574 +0000 UTC m=+416.593156923 I0505 11:28:55.569722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:55.621256 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:55.621232201 +0000 UTC m=+417.186638540 I0505 11:28:55.770195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:55.770803 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:28:55.770791308 +0000 UTC m=+417.336197647 I0505 11:28:56.021780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:28:56.067851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:02.133789 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls" condition "Ready" to 2026-05-05 11:29:02.133762009 +0000 UTC m=+423.699168338 I0505 11:29:02.134058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:02.134130 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls" condition "Issuing" to 2026-05-05 11:29:02.134114678 +0000 UTC m=+423.699521017 I0505 11:29:02.152187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:02.152302 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:02.152338 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls" condition "Issuing" to 2026-05-05 11:29:02.152327465 +0000 UTC m=+423.717733804 I0505 11:29:02.348428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:02.355946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s5zzp-9r9x5" condition "Approved" to 2026-05-05 11:29:02.355922855 +0000 UTC m=+423.921329174 I0505 11:29:02.378846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-s5zzp-9r9x5" condition "Ready" to 2026-05-05 11:29:02.378830071 +0000 UTC m=+423.944236390 I0505 11:29:02.409256 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:02.409238318 +0000 UTC m=+423.974644637 I0505 11:29:02.430212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:02.430567 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:02.430557255 +0000 UTC m=+423.995963564 I0505 11:29:02.448879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:02.449142 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-s5zzp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:02.44913435 +0000 UTC m=+424.014540669 I0505 11:29:24.225314 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 11:29:24.225300479 +0000 UTC m=+445.790706788 I0505 11:29:24.225486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:24.225561 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 11:29:24.225553035 +0000 UTC m=+445.790959344 I0505 11:29:24.252172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:29:24.252272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:29:24.252297 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 11:29:24.25228831 +0000 UTC m=+445.817694639 I0505 11:29:24.420885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mk7s2" condition "Approved" to 2026-05-05 11:29:24.420866363 +0000 UTC m=+445.986272692 I0505 11:29:24.442443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mk7s2" condition "Ready" to 2026-05-05 11:29:24.442428075 +0000 UTC m=+446.007834394 I0505 11:29:24.471273 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:29:24.471260433 +0000 UTC m=+446.036666742 I0505 11:29:24.487875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:32:36.657805 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 11:32:36.657774076 +0000 UTC m=+638.223180395 I0505 11:32:36.657884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:32:36.658001 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 11:32:36.657986511 +0000 UTC m=+638.223392860 I0505 11:32:36.677899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:32:36.678058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:32:36.678124 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 11:32:36.678112687 +0000 UTC m=+638.243519006 I0505 11:32:37.002200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cj9xp" condition "Approved" to 2026-05-05 11:32:37.002180788 +0000 UTC m=+638.567587097 I0505 11:32:37.021442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cj9xp" condition "Ready" to 2026-05-05 11:32:37.021431402 +0000 UTC m=+638.586837711 I0505 11:32:37.059188 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:32:37.05917129 +0000 UTC m=+638.624577599 I0505 11:32:37.084031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:32:37.084562 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:32:37.084547168 +0000 UTC m=+638.649953517 I0505 11:32:37.099324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:32:37.099803 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:32:37.09978825 +0000 UTC m=+638.665194569 I0505 11:34:53.907070 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-05 11:34:53.907028193 +0000 UTC m=+775.472434512 I0505 11:34:53.907337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:34:53.907506 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-05 11:34:53.907491605 +0000 UTC m=+775.472897954 I0505 11:34:53.928013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:34:53.928073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:34:53.928088 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-05 11:34:53.928082862 +0000 UTC m=+775.493489181 I0505 11:34:54.099471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jwpdh" condition "Approved" to 2026-05-05 11:34:54.099453708 +0000 UTC m=+775.664860027 I0505 11:34:54.118573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jwpdh" condition "Ready" to 2026-05-05 11:34:54.118559016 +0000 UTC m=+775.683965325 I0505 11:34:54.144827 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:34:54.144810695 +0000 UTC m=+775.710217014 I0505 11:34:54.161943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:34:54.162314 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:34:54.162306933 +0000 UTC m=+775.727713242 I0505 11:34:54.183712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:34:54.186377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:35:51.881338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:35:51.881433 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-05 11:35:51.881400621 +0000 UTC m=+833.446806960 I0505 11:35:51.881496 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-05 11:35:51.881484283 +0000 UTC m=+833.446890592 I0505 11:35:51.897191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:35:51.897267 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-05 11:35:51.897259318 +0000 UTC m=+833.462665657 I0505 11:35:52.129709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:35:52.155641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-sgjzv" condition "Approved" to 2026-05-05 11:35:52.155620186 +0000 UTC m=+833.721026525 I0505 11:35:52.183008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-sgjzv" condition "Ready" to 2026-05-05 11:35:52.182997182 +0000 UTC m=+833.748403491 I0505 11:35:52.209030 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:35:52.209015974 +0000 UTC m=+833.774422293 I0505 11:35:52.230470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:35:52.230694 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:35:52.230687457 +0000 UTC m=+833.796093766 I0505 11:35:52.254357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:35:52.259099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:35:52.259390 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:35:52.259381057 +0000 UTC m=+833.824787376 I0505 11:38:51.225140 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-05 11:38:51.22505448 +0000 UTC m=+1012.790460829 I0505 11:38:51.225309 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:38:51.225412 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-05 11:38:51.225401109 +0000 UTC m=+1012.790807448 I0505 11:38:51.247534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:38:51.247636 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:38:51.247665 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-05 11:38:51.247656916 +0000 UTC m=+1012.813063265 I0505 11:38:51.440575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7td4q" condition "Approved" to 2026-05-05 11:38:51.440562404 +0000 UTC m=+1013.005968713 I0505 11:38:51.457112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7td4q" condition "Ready" to 2026-05-05 11:38:51.457100378 +0000 UTC m=+1013.022506687 I0505 11:38:51.487019 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:38:51.487005316 +0000 UTC m=+1013.052411665 I0505 11:38:51.507950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:38:51.508311 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:38:51.50830412 +0000 UTC m=+1013.073710439 I0505 11:38:51.519042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:38:51.530422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:45:05.655690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:45:05.655691 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-05 11:45:05.655652611 +0000 UTC m=+1387.221058950 I0505 11:45:05.655774 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-05 11:45:05.655756774 +0000 UTC m=+1387.221163123 I0505 11:45:05.674559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:45:05.674740 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:45:05.674826 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-05 11:45:05.67481889 +0000 UTC m=+1387.240225209 I0505 11:45:05.858271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:45:05.864404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-vckkn" condition "Approved" to 2026-05-05 11:45:05.864388592 +0000 UTC m=+1387.429794931 I0505 11:45:05.886190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-vckkn" condition "Ready" to 2026-05-05 11:45:05.886173597 +0000 UTC m=+1387.451579936 I0505 11:45:05.915386 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:45:05.915371127 +0000 UTC m=+1387.480777446 I0505 11:45:05.936832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:46:29.838572 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-05 11:46:29.838554358 +0000 UTC m=+1471.403960697 I0505 11:46:29.838742 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:46:29.838799 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-05 11:46:29.838786605 +0000 UTC m=+1471.404192924 I0505 11:46:29.856451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:46:29.856564 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 11:46:29.856596 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-05 11:46:29.856585659 +0000 UTC m=+1471.421992008 I0505 11:46:30.006020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-bsqxd" condition "Approved" to 2026-05-05 11:46:30.006005844 +0000 UTC m=+1471.571412163 I0505 11:46:30.029270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-bsqxd" condition "Ready" to 2026-05-05 11:46:30.029262315 +0000 UTC m=+1471.594668634 I0505 11:46:30.060371 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:46:30.060350392 +0000 UTC m=+1471.625756711 I0505 11:46:30.082279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 11:46:30.082753 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 11:46:30.082741042 +0000 UTC m=+1471.648147391 I0505 11:46:30.102169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"