I0409 02:07:10.470890 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0409 02:07:10.471077 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0409 02:07:10.471219 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0409 02:07:10.475499 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0409 02:07:10.475988 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0409 02:07:10.476083 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0409 02:07:10.476221 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0409 02:07:10.478919 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0409 02:07:10.561202 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0409 02:07:10.567364 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0409 02:07:10.575994 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0409 02:07:10.578909 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0409 02:07:10.578939 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0409 02:07:10.578951 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0409 02:07:10.578981 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0409 02:07:10.581391 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0409 02:07:10.584042 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0409 02:07:10.586874 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0409 02:07:10.589099 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0409 02:07:10.589127 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0409 02:07:10.589212 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0409 02:07:10.591344 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0409 02:07:10.591434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0409 02:07:10.596580 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0409 02:07:10.599655 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0409 02:07:10.602235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0409 02:07:10.604915 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0409 02:07:10.609064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0409 02:07:10.613666 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0409 02:07:10.616931 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0409 02:07:10.619528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0409 02:07:10.627349 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0409 02:07:10.631049 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0409 02:07:10.633782 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:10.633798 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:10.634209 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:10.634795 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:10.654684 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:10.677978 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:10.694239 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:10.714809 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:10.729648 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:10.732310 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 02:07:23.667048 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 02:07:23.667027497 +0000 UTC m=+13.235177491 I0409 02:07:24.444948 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 02:07:24.444930086 +0000 UTC m=+14.013080089 I0409 02:07:24.446334 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:24.446369 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 02:07:24.446362018 +0000 UTC m=+14.014512021 I0409 02:07:24.481947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:24.482261 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:24.482397 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 02:07:24.482335616 +0000 UTC m=+14.050485619 E0409 02:07:24.486905 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:07:24.487078 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 02:07:24.487063883 +0000 UTC m=+14.055213896 E0409 02:07:24.487152 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:07:24.533475 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0409 02:07:24.533681 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:07:24.533762 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:07:24.533840 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0409 02:07:24.630189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b6ks6" condition "Approved" to 2026-04-09 02:07:24.630169168 +0000 UTC m=+14.198319171 I0409 02:07:24.692579 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b6ks6" condition "Ready" to 2026-04-09 02:07:24.692470308 +0000 UTC m=+14.260620331 I0409 02:07:24.823711 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:24.823694367 +0000 UTC m=+14.391844380 I0409 02:07:24.857688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:24.858032 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:24.858022497 +0000 UTC m=+14.426172480 I0409 02:07:24.985167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:24.987105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:29.534197 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:29.534174354 +0000 UTC m=+19.102324357 I0409 02:07:54.091991 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 02:07:54.091972927 +0000 UTC m=+43.660122910 I0409 02:07:54.092138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:54.092207 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 02:07:54.092190372 +0000 UTC m=+43.660340385 I0409 02:07:54.105965 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 02:07:54.105949324 +0000 UTC m=+43.674099307 I0409 02:07:54.117697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:54.117797 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:07:54.117829 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 02:07:54.117820023 +0000 UTC m=+43.685969996 I0409 02:07:54.706500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fnqdw" condition "Approved" to 2026-04-09 02:07:54.70648562 +0000 UTC m=+44.274635603 I0409 02:07:54.750891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fnqdw" condition "Ready" to 2026-04-09 02:07:54.750876547 +0000 UTC m=+44.319026530 I0409 02:07:54.785520 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:54.785496361 +0000 UTC m=+44.353646364 I0409 02:07:54.814862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:07:54.815357 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:07:54.815343238 +0000 UTC m=+44.383493251 I0409 02:07:54.840191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:45.625014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:09:45.625178 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-09 02:09:45.625158483 +0000 UTC m=+155.193308466 I0409 02:09:45.625211 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-09 02:09:45.625060291 +0000 UTC m=+155.193210304 E0409 02:09:45.639059 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 02:09:45.639121 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-09 02:09:45.639110094 +0000 UTC m=+155.207260077 I0409 02:09:45.639179 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 02:09:45.642529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:45.642789 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:09:45.642828 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-09 02:09:45.642816955 +0000 UTC m=+155.210966968 E0409 02:09:45.649514 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0409 02:09:45.650513 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:09:45.650549 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-09 02:09:45.650540091 +0000 UTC m=+155.218690094 I0409 02:09:45.650683 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-09 02:09:45.650660474 +0000 UTC m=+155.218810457 E0409 02:09:45.651431 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 02:09:45.651478 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0409 02:09:45.651548 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0409 02:09:45.668489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:45.668582 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-09 02:09:45.668572301 +0000 UTC m=+155.236722284 I0409 02:09:45.829948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:45.861234 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-ztlpq" condition "Approved" to 2026-04-09 02:09:45.86121133 +0000 UTC m=+155.429361313 I0409 02:09:45.881228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-ztlpq" condition "Ready" to 2026-04-09 02:09:45.881214441 +0000 UTC m=+155.449364444 I0409 02:09:46.029731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-fzv42" condition "Approved" to 2026-04-09 02:09:46.029713317 +0000 UTC m=+155.597863300 I0409 02:09:46.054116 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-fzv42" condition "Ready" to 2026-04-09 02:09:46.054101303 +0000 UTC m=+155.622251276 I0409 02:09:46.084784 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:46.084766795 +0000 UTC m=+155.652916808 I0409 02:09:46.107988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:46.108357 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:46.108347905 +0000 UTC m=+155.676497888 I0409 02:09:46.112739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:46.121879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:46.122216 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:46.122208414 +0000 UTC m=+155.690358407 I0409 02:09:50.650572 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:50.650525337 +0000 UTC m=+160.218675340 I0409 02:09:50.663582 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-ztlpq" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:50.663559398 +0000 UTC m=+160.231709371 I0409 02:09:50.704907 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:50.704888831 +0000 UTC m=+160.273038814 I0409 02:09:50.726824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:50.727277 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:50.727269544 +0000 UTC m=+160.295419527 I0409 02:09:50.743258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:50.745955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:09:50.746237 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:09:50.746231913 +0000 UTC m=+160.314381896 I0409 02:12:34.382733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-155.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:12:34.382802 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready" to 2026-04-09 02:12:34.38275983 +0000 UTC m=+323.950909843 I0409 02:12:34.382793 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Issuing" to 2026-04-09 02:12:34.3827707 +0000 UTC m=+323.950920683 I0409 02:12:34.406914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:12:34.407129 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-155.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:12:34.407230 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Issuing" to 2026-04-09 02:12:34.407217382 +0000 UTC m=+323.975367405 I0409 02:12:34.693473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:12:34.697892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-155.nip.io-tls-njphc" condition "Approved" to 2026-04-09 02:12:34.697880968 +0000 UTC m=+324.266030981 I0409 02:12:34.714834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-155.nip.io-tls-njphc" condition "Ready" to 2026-04-09 02:12:34.714818353 +0000 UTC m=+324.282968326 I0409 02:12:34.744313 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:12:34.744296135 +0000 UTC m=+324.312446148 I0409 02:12:34.770126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:12:34.770392 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:12:34.770386674 +0000 UTC m=+324.338536647 I0409 02:12:34.794956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:46.154081 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:13:46.154139 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 02:13:46.154116136 +0000 UTC m=+395.722266149 I0409 02:13:46.154166 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 02:13:46.154152977 +0000 UTC m=+395.722302960 E0409 02:13:46.169106 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:13:46.169288 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-09 02:13:46.169269901 +0000 UTC m=+395.737419914 E0409 02:13:46.169476 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 02:13:46.174155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:46.174991 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 02:13:46.174349503 +0000 UTC m=+395.742499526 E0409 02:13:46.182463 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0409 02:13:46.182540 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:13:46.182566 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 02:13:46.182600 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0409 02:13:46.186330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:46.187827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:46.188115 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 02:13:46.188103537 +0000 UTC m=+395.756253530 I0409 02:13:46.191225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lvvz9" condition "Approved" to 2026-04-09 02:13:46.191205995 +0000 UTC m=+395.759355998 I0409 02:13:46.200312 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 02:13:46.200284795 +0000 UTC m=+395.768434798 I0409 02:13:46.202983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lvvz9" condition "Ready" to 2026-04-09 02:13:46.202973304 +0000 UTC m=+395.771123287 I0409 02:13:46.208454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:46.222381 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:13:46.222363152 +0000 UTC m=+395.790513135 I0409 02:13:46.243870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:46.244247 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:13:46.244234804 +0000 UTC m=+395.812384807 I0409 02:13:46.250428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:46.256262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:13:46.256536 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:13:46.256526345 +0000 UTC m=+395.824676318 I0409 02:13:51.183327 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:13:51.183306597 +0000 UTC m=+400.751456600 I0409 02:14:30.159089 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 02:14:30.159074348 +0000 UTC m=+439.727224331 I0409 02:14:30.159420 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:30.159449 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 02:14:30.159439016 +0000 UTC m=+439.727588999 I0409 02:14:30.175427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:30.175462 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 02:14:30.175457243 +0000 UTC m=+439.743607216 I0409 02:14:30.175462 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 02:14:30.175443793 +0000 UTC m=+439.743593766 I0409 02:14:30.175518 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:30.175557 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 02:14:30.175548055 +0000 UTC m=+439.743698028 I0409 02:14:30.175765 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 02:14:30.17576231 +0000 UTC m=+439.743912283 I0409 02:14:30.200271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:30.200458 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:30.200511 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 02:14:30.200498571 +0000 UTC m=+439.768648594 I0409 02:14:30.212755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:30.212822 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 02:14:30.212814155 +0000 UTC m=+439.780964128 I0409 02:14:30.222984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:30.223145 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 02:14:30.223109395 +0000 UTC m=+439.791259378 I0409 02:14:30.339161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:30.374608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:30.379382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pshjp" condition "Approved" to 2026-04-09 02:14:30.379370306 +0000 UTC m=+439.947520289 I0409 02:14:30.385908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-s24nm" condition "Approved" to 2026-04-09 02:14:30.385891402 +0000 UTC m=+439.954041385 I0409 02:14:30.404007 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pshjp" condition "Ready" to 2026-04-09 02:14:30.403995575 +0000 UTC m=+439.972145558 I0409 02:14:30.405374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-s24nm" condition "Ready" to 2026-04-09 02:14:30.405358616 +0000 UTC m=+439.973508609 I0409 02:14:30.430669 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:30.4306504 +0000 UTC m=+439.998800403 I0409 02:14:30.441735 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:30.441722106 +0000 UTC m=+440.009872099 I0409 02:14:30.454083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:30.454653 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:30.454646244 +0000 UTC m=+440.022796227 I0409 02:14:30.466934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:30.603937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:30.711626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:31.053713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:31.205016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:31.268832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fdmzr" condition "Approved" to 2026-04-09 02:14:31.268812638 +0000 UTC m=+440.836962641 I0409 02:14:31.376782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fdmzr" condition "Ready" to 2026-04-09 02:14:31.376769174 +0000 UTC m=+440.944919147 I0409 02:14:31.806585 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:31.806553971 +0000 UTC m=+441.374703984 I0409 02:14:31.906603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:31.907228 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:31.907215174 +0000 UTC m=+441.475365187 I0409 02:14:32.103842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:38.622690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:38.622734 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls" condition "Ready" to 2026-04-09 02:14:38.622713474 +0000 UTC m=+448.190863477 I0409 02:14:38.622742 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls" condition "Issuing" to 2026-04-09 02:14:38.622729204 +0000 UTC m=+448.190879217 I0409 02:14:38.640571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:38.640665 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:14:38.640693 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls" condition "Issuing" to 2026-04-09 02:14:38.640685655 +0000 UTC m=+448.208835658 I0409 02:14:38.991078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jfq9p-8ctqc" condition "Approved" to 2026-04-09 02:14:38.991063343 +0000 UTC m=+448.559213326 I0409 02:14:39.021572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jfq9p-8ctqc" condition "Ready" to 2026-04-09 02:14:39.021562002 +0000 UTC m=+448.589711985 I0409 02:14:39.053182 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:39.053166107 +0000 UTC m=+448.621316090 I0409 02:14:39.075434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:39.075902 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:39.075891063 +0000 UTC m=+448.644041066 I0409 02:14:39.091065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:14:39.091312 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jfq9p-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:14:39.091304496 +0000 UTC m=+448.659454499 I0409 02:15:04.797134 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 02:15:04.797102904 +0000 UTC m=+474.365252897 I0409 02:15:04.797501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:15:04.797538 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 02:15:04.797529824 +0000 UTC m=+474.365679817 I0409 02:15:04.810441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:04.810504 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:15:04.810523 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 02:15:04.810517843 +0000 UTC m=+474.378667826 I0409 02:15:04.969046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:04.980971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5dl22" condition "Approved" to 2026-04-09 02:15:04.980956461 +0000 UTC m=+474.549106444 I0409 02:15:04.999286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5dl22" condition "Ready" to 2026-04-09 02:15:04.999274899 +0000 UTC m=+474.567424882 I0409 02:15:05.025069 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:05.025052964 +0000 UTC m=+474.593202977 I0409 02:15:05.042636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:05.043137 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:05.043129396 +0000 UTC m=+474.611279379 I0409 02:15:05.061230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:15:05.061604 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:15:05.061595078 +0000 UTC m=+474.629745061 I0409 02:15:05.064206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:18:10.588476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:18:10.588604 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 02:18:10.588570167 +0000 UTC m=+660.156720240 I0409 02:18:10.588697 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 02:18:10.58868252 +0000 UTC m=+660.156832533 I0409 02:18:10.608302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:18:10.608395 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 02:18:10.608385519 +0000 UTC m=+660.176535502 I0409 02:18:11.049182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:18:11.091265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7lkj6" condition "Approved" to 2026-04-09 02:18:11.091256278 +0000 UTC m=+660.659406251 I0409 02:18:11.114660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-7lkj6" condition "Ready" to 2026-04-09 02:18:11.114643589 +0000 UTC m=+660.682793582 I0409 02:18:11.151061 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:18:11.151044081 +0000 UTC m=+660.719194064 I0409 02:18:11.176211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:18:11.176568 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:18:11.17656006 +0000 UTC m=+660.744710043 I0409 02:18:11.198046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:18:11.199628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:18:11.200149 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:18:11.200139206 +0000 UTC m=+660.768289189 I0409 02:20:35.754822 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-09 02:20:35.754777335 +0000 UTC m=+805.322927318 I0409 02:20:35.754991 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:20:35.755127 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-09 02:20:35.755112722 +0000 UTC m=+805.323262735 I0409 02:20:35.771266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:20:35.771414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:20:35.771446 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-09 02:20:35.771437276 +0000 UTC m=+805.339587259 I0409 02:20:35.952610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-5vmpq" condition "Approved" to 2026-04-09 02:20:35.952590384 +0000 UTC m=+805.520740357 I0409 02:20:35.970060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-5vmpq" condition "Ready" to 2026-04-09 02:20:35.970045053 +0000 UTC m=+805.538195036 I0409 02:20:36.007373 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:20:36.007349132 +0000 UTC m=+805.575499105 I0409 02:20:36.033503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:20:36.034081 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:20:36.034069477 +0000 UTC m=+805.602219480 I0409 02:20:36.038598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:20:36.059263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:20:36.063661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:20:36.064105 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:20:36.064096433 +0000 UTC m=+805.632246396 I0409 02:21:42.148915 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-09 02:21:42.14879982 +0000 UTC m=+871.716949803 I0409 02:21:42.148892 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:21:42.148980 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-09 02:21:42.148970664 +0000 UTC m=+871.717120677 I0409 02:21:42.167553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:42.167737 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-09 02:21:42.167728511 +0000 UTC m=+871.735878474 I0409 02:21:42.371559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:42.407477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-mzxvh" condition "Approved" to 2026-04-09 02:21:42.407462843 +0000 UTC m=+871.975612816 I0409 02:21:42.430278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-mzxvh" condition "Ready" to 2026-04-09 02:21:42.43026523 +0000 UTC m=+871.998415213 I0409 02:21:42.462533 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:21:42.462518146 +0000 UTC m=+872.030668129 I0409 02:21:42.491868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:42.492216 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:21:42.492209117 +0000 UTC m=+872.060359080 I0409 02:21:42.505440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:42.512483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:21:42.512861 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:21:42.512851416 +0000 UTC m=+872.081001399 I0409 02:24:46.298452 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-09 02:24:46.298406534 +0000 UTC m=+1055.866556547 I0409 02:24:46.299059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:24:46.299163 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-09 02:24:46.29915016 +0000 UTC m=+1055.867300173 I0409 02:24:46.315411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:24:46.315488 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 02:24:46.315511 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-09 02:24:46.315505614 +0000 UTC m=+1055.883655597 I0409 02:24:46.638253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:24:46.648607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-57pdn" condition "Approved" to 2026-04-09 02:24:46.64858788 +0000 UTC m=+1056.216737863 I0409 02:24:46.671765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-57pdn" condition "Ready" to 2026-04-09 02:24:46.671750155 +0000 UTC m=+1056.239900138 I0409 02:24:46.701670 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:24:46.70165151 +0000 UTC m=+1056.269801493 I0409 02:24:46.729812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 02:24:46.730283 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 02:24:46.730272296 +0000 UTC m=+1056.298422279 I0409 02:24:46.753431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"