I0319 09:01:51.443274 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0319 09:01:51.443372 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0319 09:01:51.443453 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0319 09:01:51.450273 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0319 09:01:51.450873 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0319 09:01:51.450950 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0319 09:01:51.451065 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0319 09:01:51.454016 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0319 09:01:51.474140 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0319 09:01:51.480269 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0319 09:01:51.480556 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0319 09:01:51.485128 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0319 09:01:51.492265 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0319 09:01:51.496907 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0319 09:01:51.497080 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0319 09:01:51.499163 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0319 09:01:51.501346 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0319 09:01:51.503636 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0319 09:01:51.505318 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0319 09:01:51.505410 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0319 09:01:51.508809 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0319 09:01:51.514537 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0319 09:01:51.514658 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0319 09:01:51.519152 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0319 09:01:51.522530 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0319 09:01:51.524651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0319 09:01:51.526558 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0319 09:01:51.528421 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0319 09:01:51.528455 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0319 09:01:51.530385 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0319 09:01:51.532507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0319 09:01:51.535137 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0319 09:01:51.535304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0319 09:01:51.539966 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 09:01:51.540478 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 09:01:51.541137 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 09:01:51.541212 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 09:01:51.541321 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 09:01:51.541627 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 09:01:51.541848 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 09:01:51.541921 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 09:01:51.542246 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 09:01:51.575744 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0319 09:02:09.439672 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-19 09:02:09.439649648 +0000 UTC m=+18.027906275 I0319 09:02:10.143170 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-19 09:02:10.143147766 +0000 UTC m=+18.731404393 I0319 09:02:10.144201 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:02:10.144310 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-19 09:02:10.144300299 +0000 UTC m=+18.732556886 E0319 09:02:10.159862 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0319 09:02:10.159997 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-19 09:02:10.159986112 +0000 UTC m=+18.748242709 E0319 09:02:10.160029 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0319 09:02:10.164341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:02:10.164493 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-19 09:02:10.164480283 +0000 UTC m=+18.752736910 E0319 09:02:10.171117 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0319 09:02:10.171216 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0319 09:02:10.171240 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0319 09:02:10.171269 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0319 09:02:10.179300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:02:10.201456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tc9js" condition "Approved" to 2026-03-19 09:02:10.201442362 +0000 UTC m=+18.789698959 I0319 09:02:10.215517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tc9js" condition "Ready" to 2026-03-19 09:02:10.215505963 +0000 UTC m=+18.803762580 I0319 09:02:10.237092 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:02:10.237076414 +0000 UTC m=+18.825333001 I0319 09:02:10.253007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:02:10.253345 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:02:10.253335359 +0000 UTC m=+18.841591956 I0319 09:02:10.271801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:02:15.171900 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:02:15.171883613 +0000 UTC m=+23.760140230 I0319 09:02:35.028718 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-19 09:02:35.028694876 +0000 UTC m=+43.616951473 I0319 09:02:35.028744 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:02:35.028791 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-19 09:02:35.028783318 +0000 UTC m=+43.617039905 I0319 09:02:35.043002 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-19 09:02:35.042985712 +0000 UTC m=+43.631242299 I0319 09:02:35.052062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:02:35.052139 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:02:35.052317 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-19 09:02:35.052306909 +0000 UTC m=+43.640563506 I0319 09:02:35.278705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:02:35.293190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-x7l4k" condition "Approved" to 2026-03-19 09:02:35.293169015 +0000 UTC m=+43.881425652 I0319 09:02:35.326738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-x7l4k" condition "Ready" to 2026-03-19 09:02:35.326724486 +0000 UTC m=+43.914981083 I0319 09:02:35.357952 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:02:35.357911139 +0000 UTC m=+43.946167766 I0319 09:02:35.389509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:02:35.390009 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:02:35.389998151 +0000 UTC m=+43.978254758 I0319 09:02:35.398358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:02:35.408554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:02:35.408889 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:02:35.408879678 +0000 UTC m=+43.997136275 I0319 09:04:18.779884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:04:18.780001 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-19 09:04:18.779989772 +0000 UTC m=+147.368246369 I0319 09:04:18.779905 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-19 09:04:18.779242718 +0000 UTC m=+147.367499325 E0319 09:04:18.792673 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0319 09:04:18.792726 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-19 09:04:18.792720865 +0000 UTC m=+147.380977462 I0319 09:04:18.792742 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0319 09:04:18.795265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:04:18.795336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:04:18.795367 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-19 09:04:18.795360005 +0000 UTC m=+147.383616602 E0319 09:04:18.799601 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0319 09:04:18.799868 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0319 09:04:18.799893 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0319 09:04:18.799933 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0319 09:04:18.810215 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:04:18.810237 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-19 09:04:18.810233259 +0000 UTC m=+147.398489856 I0319 09:04:18.810460 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-19 09:04:18.810456073 +0000 UTC m=+147.398712670 I0319 09:04:18.828814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:04:18.828909 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:04:18.828940 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-19 09:04:18.828930935 +0000 UTC m=+147.417187562 I0319 09:04:18.945343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:04:18.955912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-9r78c" condition "Approved" to 2026-03-19 09:04:18.955889143 +0000 UTC m=+147.544145770 I0319 09:04:18.985026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-9r78c" condition "Ready" to 2026-03-19 09:04:18.985013987 +0000 UTC m=+147.573270614 I0319 09:04:19.014372 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:04:19.014346756 +0000 UTC m=+147.602603383 I0319 09:04:19.023380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-szvkg" condition "Approved" to 2026-03-19 09:04:19.023362008 +0000 UTC m=+147.611618605 I0319 09:04:19.036918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:04:19.037422 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:04:19.037412876 +0000 UTC m=+147.625669463 I0319 09:04:19.042289 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-szvkg" condition "Ready" to 2026-03-19 09:04:19.042277778 +0000 UTC m=+147.630534365 I0319 09:04:19.056468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:04:19.056495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:04:19.057659 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:04:19.057635651 +0000 UTC m=+147.645892278 I0319 09:04:23.800466 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:04:23.800454639 +0000 UTC m=+152.388711236 I0319 09:04:23.818245 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-szvkg" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:04:23.818237517 +0000 UTC m=+152.406494114 I0319 09:04:23.848049 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:04:23.848027935 +0000 UTC m=+152.436284562 I0319 09:04:23.866267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:04:23.866827 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:04:23.866820723 +0000 UTC m=+152.455077300 I0319 09:04:23.880718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:04:23.882696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:06:50.275994 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Ready" to 2026-03-19 09:06:50.275979189 +0000 UTC m=+298.864235806 I0319 09:06:50.276011 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-220.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:06:50.276109 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Issuing" to 2026-03-19 09:06:50.276083171 +0000 UTC m=+298.864339788 I0319 09:06:50.294058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:06:50.294168 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-220.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:06:50.294193 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Issuing" to 2026-03-19 09:06:50.29418528 +0000 UTC m=+298.882441877 I0319 09:06:50.487632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:06:50.494247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-220.nip.io-tls-lrvlc" condition "Approved" to 2026-03-19 09:06:50.494234823 +0000 UTC m=+299.082491420 I0319 09:06:50.518756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-220.nip.io-tls-lrvlc" condition "Ready" to 2026-03-19 09:06:50.518745673 +0000 UTC m=+299.107002270 I0319 09:06:50.545800 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:06:50.545780341 +0000 UTC m=+299.134036938 I0319 09:06:50.567201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:06:50.567762 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:06:50.567749452 +0000 UTC m=+299.156006049 I0319 09:06:50.577118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:06:50.584988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:06:50.585372 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-220.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:06:50.585361933 +0000 UTC m=+299.173618510 I0319 09:06:50.587068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-220.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-220.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:00.347644 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-19 09:08:00.347615647 +0000 UTC m=+368.935872244 I0319 09:08:00.347694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:08:00.347745 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-19 09:08:00.3477332 +0000 UTC m=+368.935989817 E0319 09:08:00.361831 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0319 09:08:00.361880 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-19 09:08:00.361869936 +0000 UTC m=+368.950126533 E0319 09:08:00.361924 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0319 09:08:00.363098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:00.363224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:08:00.363254 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-19 09:08:00.363244172 +0000 UTC m=+368.951500759 E0319 09:08:00.372541 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0319 09:08:00.372710 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0319 09:08:00.372801 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0319 09:08:00.372906 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0319 09:08:00.405229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:00.410828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mqw6q" condition "Approved" to 2026-03-19 09:08:00.410810399 +0000 UTC m=+368.999067026 I0319 09:08:00.426764 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mqw6q" condition "Ready" to 2026-03-19 09:08:00.426751299 +0000 UTC m=+369.015007896 I0319 09:08:00.453759 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:08:00.453741637 +0000 UTC m=+369.041998234 I0319 09:08:00.470203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:00.470670 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:08:00.470653946 +0000 UTC m=+369.058910573 I0319 09:08:00.494673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:05.377142 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:08:05.376641469 +0000 UTC m=+373.964898096 I0319 09:08:44.672897 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-19 09:08:44.672864795 +0000 UTC m=+413.261121392 I0319 09:08:44.672931 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-19 09:08:44.672915386 +0000 UTC m=+413.261171973 I0319 09:08:44.673155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:08:44.673232 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-19 09:08:44.673222432 +0000 UTC m=+413.261479029 I0319 09:08:44.673278 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:08:44.673446 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-19 09:08:44.673432526 +0000 UTC m=+413.261689153 I0319 09:08:44.676287 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:08:44.676336 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-19 09:08:44.67632409 +0000 UTC m=+413.264580717 I0319 09:08:44.676395 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-19 09:08:44.676377951 +0000 UTC m=+413.264634548 I0319 09:08:44.706586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:44.706687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:08:44.706713 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-19 09:08:44.706704803 +0000 UTC m=+413.294961400 I0319 09:08:44.708221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:44.708267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:08:44.708288 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-19 09:08:44.708284473 +0000 UTC m=+413.296541070 I0319 09:08:44.708335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:44.708432 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-19 09:08:44.708423595 +0000 UTC m=+413.296680182 I0319 09:08:44.862607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:44.868005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2nwlk" condition "Approved" to 2026-03-19 09:08:44.867993752 +0000 UTC m=+413.456250339 I0319 09:08:44.870268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:44.884961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2nwlk" condition "Ready" to 2026-03-19 09:08:44.884943551 +0000 UTC m=+413.473200168 I0319 09:08:44.911697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7pjmw" condition "Approved" to 2026-03-19 09:08:44.911681975 +0000 UTC m=+413.499938562 I0319 09:08:44.941758 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:08:44.941806 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-19 09:08:44.941796952 +0000 UTC m=+413.530053549 I0319 09:08:44.943081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7pjmw" condition "Ready" to 2026-03-19 09:08:44.942409244 +0000 UTC m=+413.530665831 I0319 09:08:44.961243 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:08:44.961229308 +0000 UTC m=+413.549485895 I0319 09:08:45.010931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:45.066776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qm2x5" condition "Approved" to 2026-03-19 09:08:45.066751937 +0000 UTC m=+413.655008554 I0319 09:08:45.109635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:45.210580 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:08:45.210557545 +0000 UTC m=+413.798814142 I0319 09:08:45.263559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:45.264153 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:08:45.264137366 +0000 UTC m=+413.852393983 I0319 09:08:45.568971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-qm2x5" condition "Ready" to 2026-03-19 09:08:45.568952808 +0000 UTC m=+414.157209425 I0319 09:08:45.720409 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:08:45.720394252 +0000 UTC m=+414.308650839 I0319 09:08:45.766495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:46.068521 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-75qzs" condition "Approved" to 2026-03-19 09:08:46.06849523 +0000 UTC m=+414.656751857 I0319 09:08:46.113516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:46.238795 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:08:46.238769649 +0000 UTC m=+414.827026266 I0319 09:08:46.472776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-75qzs" condition "Ready" to 2026-03-19 09:08:46.472757217 +0000 UTC m=+415.061013844 I0319 09:08:46.712671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:46.713110 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:08:46.713099545 +0000 UTC m=+415.301356162 I0319 09:08:47.310781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:47.364184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:47.459676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:47.509666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:47.811891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:47.859333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:50.869239 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls" condition "Ready" to 2026-03-19 09:08:50.86921663 +0000 UTC m=+419.457473247 I0319 09:08:50.869384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:08:50.869428 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls" condition "Issuing" to 2026-03-19 09:08:50.869416424 +0000 UTC m=+419.457673021 I0319 09:08:50.882914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:50.883005 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls" condition "Ready" to 2026-03-19 09:08:50.88299739 +0000 UTC m=+419.471254007 I0319 09:08:51.239243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:51.277156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qf7lw-4p64p" condition "Approved" to 2026-03-19 09:08:51.277136315 +0000 UTC m=+419.865392932 I0319 09:08:51.298114 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-qf7lw-4p64p" condition "Ready" to 2026-03-19 09:08:51.29809963 +0000 UTC m=+419.886356237 I0319 09:08:51.329148 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:08:51.329139625 +0000 UTC m=+419.917396232 I0319 09:08:51.355034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:08:51.395026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-qf7lw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:09:04.641012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:09:04.641055 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-19 09:09:04.64104513 +0000 UTC m=+433.229301717 I0319 09:09:04.641394 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-19 09:09:04.641373196 +0000 UTC m=+433.229629793 I0319 09:09:04.656312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:09:04.656402 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:09:04.656441 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-19 09:09:04.656433863 +0000 UTC m=+433.244690460 I0319 09:09:04.982602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2lr8g" condition "Approved" to 2026-03-19 09:09:04.982579946 +0000 UTC m=+433.570836533 I0319 09:09:05.003739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2lr8g" condition "Ready" to 2026-03-19 09:09:05.003723919 +0000 UTC m=+433.591980516 I0319 09:09:05.035333 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:09:05.035312551 +0000 UTC m=+433.623569138 I0319 09:09:05.052839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:09:05.053122 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:09:05.053109279 +0000 UTC m=+433.641365876 I0319 09:09:05.073556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:12:38.992218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:12:38.992255 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-19 09:12:38.992248434 +0000 UTC m=+647.580505031 I0319 09:12:38.992268 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-19 09:12:38.992250734 +0000 UTC m=+647.580507331 I0319 09:12:39.009711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:12:39.009908 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-19 09:12:39.009891205 +0000 UTC m=+647.598147822 I0319 09:12:39.259157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:12:39.295334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-s7bsb" condition "Approved" to 2026-03-19 09:12:39.295321095 +0000 UTC m=+647.883577712 I0319 09:12:39.315798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-s7bsb" condition "Ready" to 2026-03-19 09:12:39.315781368 +0000 UTC m=+647.904037975 I0319 09:12:39.355920 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:12:39.35589615 +0000 UTC m=+647.944152767 I0319 09:12:39.379753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:12:39.380068 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:12:39.380061713 +0000 UTC m=+647.968318300 I0319 09:12:39.396625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:12:39.396818 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:12:39.396810717 +0000 UTC m=+647.985067314 I0319 09:14:58.957680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:14:58.957771 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-19 09:14:58.957763286 +0000 UTC m=+787.546019873 I0319 09:14:58.957846 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-19 09:14:58.957819027 +0000 UTC m=+787.546075644 I0319 09:14:58.974578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:14:58.974761 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:14:58.974832 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-19 09:14:58.974822084 +0000 UTC m=+787.563078681 I0319 09:14:59.254264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kcgdb" condition "Approved" to 2026-03-19 09:14:59.254248934 +0000 UTC m=+787.842505531 I0319 09:14:59.273184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kcgdb" condition "Ready" to 2026-03-19 09:14:59.273173027 +0000 UTC m=+787.861429624 I0319 09:14:59.300669 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:14:59.30065772 +0000 UTC m=+787.888914317 I0319 09:14:59.321049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:14:59.371377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:16:02.702611 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-19 09:16:02.702596254 +0000 UTC m=+851.290852851 I0319 09:16:02.702723 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:16:02.702814 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-19 09:16:02.702804368 +0000 UTC m=+851.291060985 I0319 09:16:02.720279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:16:02.720416 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-19 09:16:02.720405787 +0000 UTC m=+851.308662404 I0319 09:16:02.982736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:16:03.018856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5j7fn" condition "Approved" to 2026-03-19 09:16:03.01883178 +0000 UTC m=+851.607088397 I0319 09:16:03.038001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5j7fn" condition "Ready" to 2026-03-19 09:16:03.037990769 +0000 UTC m=+851.626247356 I0319 09:16:03.072624 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:16:03.072596144 +0000 UTC m=+851.660852761 I0319 09:16:03.095017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:19:01.269155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:19:01.269150 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-19 09:19:01.269139158 +0000 UTC m=+1029.857395755 I0319 09:19:01.269220 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-19 09:19:01.269215069 +0000 UTC m=+1029.857471656 I0319 09:19:01.284795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:19:01.284958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0319 09:19:01.285030 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-19 09:19:01.285019676 +0000 UTC m=+1029.873276303 I0319 09:19:01.429053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2vdvz" condition "Approved" to 2026-03-19 09:19:01.429037642 +0000 UTC m=+1030.017294259 I0319 09:19:01.447606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2vdvz" condition "Ready" to 2026-03-19 09:19:01.44759406 +0000 UTC m=+1030.035850657 I0319 09:19:01.477441 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:19:01.477425528 +0000 UTC m=+1030.065682125 I0319 09:19:01.493968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0319 09:19:01.494566 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-19 09:19:01.494556138 +0000 UTC m=+1030.082812765 I0319 09:19:01.521514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"