I0423 16:59:30.665774 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0423 16:59:30.665913 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0423 16:59:30.666015 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0423 16:59:30.672305 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0423 16:59:30.672851 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0423 16:59:30.672890 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0423 16:59:30.672942 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0423 16:59:30.680607 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0423 16:59:30.695405 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0423 16:59:30.695642 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0423 16:59:30.695682 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0423 16:59:30.695696 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0423 16:59:30.700237 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0423 16:59:30.702791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0423 16:59:30.707896 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0423 16:59:30.710800 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0423 16:59:30.710892 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0423 16:59:30.713484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0423 16:59:30.715722 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0423 16:59:30.718147 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0423 16:59:30.720822 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0423 16:59:30.722978 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0423 16:59:30.725733 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0423 16:59:30.732136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0423 16:59:30.734904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0423 16:59:30.737757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0423 16:59:30.740772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0423 16:59:30.745121 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0423 16:59:30.745167 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0423 16:59:30.745199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0423 16:59:30.749384 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0423 16:59:30.752453 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0423 16:59:30.756566 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0423 16:59:30.760389 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 16:59:30.760498 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 16:59:30.762013 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 16:59:30.762414 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 16:59:30.778935 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 16:59:30.795071 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 16:59:30.837689 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 16:59:30.846337 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 16:59:30.873838 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 16:59:30.889872 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0423 16:59:48.100118 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-23 16:59:48.100094883 +0000 UTC m=+17.463913831 I0423 16:59:48.885278 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-23 16:59:48.885256511 +0000 UTC m=+18.249075489 I0423 16:59:48.885296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 16:59:48.885392 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-23 16:59:48.885379414 +0000 UTC m=+18.249198392 E0423 16:59:48.910944 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 16:59:48.911030 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-23 16:59:48.911021972 +0000 UTC m=+18.274840900 E0423 16:59:48.911054 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 16:59:48.914174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 16:59:48.914245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 16:59:48.914267 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-23 16:59:48.91426227 +0000 UTC m=+18.278081208 E0423 16:59:48.922821 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0423 16:59:48.922928 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 16:59:48.922961 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 16:59:48.923017 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0423 16:59:48.960249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 16:59:48.960779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-d7lsk" condition "Approved" to 2026-04-23 16:59:48.960770121 +0000 UTC m=+18.324589049 I0423 16:59:48.978121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-d7lsk" condition "Ready" to 2026-04-23 16:59:48.978104518 +0000 UTC m=+18.341923486 I0423 16:59:49.010091 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 16:59:49.010076428 +0000 UTC m=+18.373895376 I0423 16:59:49.036493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 16:59:53.923347 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 16:59:53.923301452 +0000 UTC m=+23.287120400 I0423 16:59:55.150956 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-23 16:59:55.150937478 +0000 UTC m=+24.514756456 I0423 16:59:55.151036 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 16:59:55.151207 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 16:59:55.151189894 +0000 UTC m=+24.515008852 I0423 16:59:55.170666 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-23 16:59:55.170643583 +0000 UTC m=+24.534462531 I0423 16:59:55.196190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 16:59:55.196414 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 16:59:55.196506 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-23 16:59:55.196498134 +0000 UTC m=+24.560317082 I0423 16:59:55.879554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 16:59:55.886362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w5dwm" condition "Approved" to 2026-04-23 16:59:55.886350558 +0000 UTC m=+25.250169496 I0423 16:59:55.928668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w5dwm" condition "Ready" to 2026-04-23 16:59:55.928657385 +0000 UTC m=+25.292476323 I0423 16:59:55.957685 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 16:59:55.957669043 +0000 UTC m=+25.321487981 I0423 16:59:55.986788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 16:59:55.987159 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 16:59:55.987142151 +0000 UTC m=+25.350961089 I0423 16:59:55.997643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 16:59:56.018004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0423 16:59:59.368821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 16:59:59.368868 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-23 16:59:59.368859971 +0000 UTC m=+28.732678919 I0423 16:59:59.369301 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-23 16:59:59.369270641 +0000 UTC m=+28.733089609 E0423 16:59:59.383267 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 16:59:59.383307 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-23 16:59:59.383298889 +0000 UTC m=+28.747117837 I0423 16:59:59.383348 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 16:59:59.387403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 16:59:59.387455 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-23 16:59:59.387449209 +0000 UTC m=+28.751268157 E0423 16:59:59.400428 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0423 16:59:59.400516 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0423 16:59:59.400538 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0423 16:59:59.400661 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0423 16:59:59.404579 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-23 16:59:59.404571999 +0000 UTC m=+28.768390927 I0423 16:59:59.404653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 16:59:59.404682 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-23 16:59:59.404670802 +0000 UTC m=+28.768489750 I0423 16:59:59.419117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0423 16:59:59.419372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 16:59:59.419453 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-23 16:59:59.419393947 +0000 UTC m=+28.783212885 I0423 16:59:59.508902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0423 16:59:59.539657 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-qgpbb" condition "Approved" to 2026-04-23 16:59:59.539643356 +0000 UTC m=+28.903462304 I0423 16:59:59.559464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-qgpbb" condition "Ready" to 2026-04-23 16:59:59.559452282 +0000 UTC m=+28.923271220 I0423 16:59:59.638581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 16:59:59.865805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-lrs4c" condition "Approved" to 2026-04-23 16:59:59.865790744 +0000 UTC m=+29.229609692 I0423 16:59:59.895902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-lrs4c" condition "Ready" to 2026-04-23 16:59:59.895885187 +0000 UTC m=+29.259704165 E0423 16:59:59.895995 1 selfsigned.go:127] "Referenced secret openstack/valkey-ca-pgg4g not found" err="secret \"valkey-ca-pgg4g\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="valkey-ca-lrs4c" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" E0423 16:59:59.919369 1 selfsigned.go:127] "Referenced secret openstack/valkey-ca-pgg4g not found" err="secret \"valkey-ca-pgg4g\" not found" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="valkey-ca-lrs4c" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" E0423 17:00:00.179975 1 selfsigned.go:187] "Error generating certificate template" err="CSR not signed by referenced private key" logger="cert-manager.certificaterequests-issuer-selfsigned.sign" resource_name="valkey-ca-lrs4c" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" I0423 17:00:00.182253 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" resource_name="valkey-ca" resource_namespace="openstack" resource_kind="Certificate" resource_version="v1" resource_name="valkey-ca-lrs4c" resource_namespace="openstack" resource_kind="CertificateRequest" resource_version="v1" resource_name="valkey-ca-pgg4g" resource_namespace="openstack" resource_kind="Secret" resource_version="v1" E0423 17:00:00.213280 1 controller.go:167] "re-queuing item due to error processing" err="Operation cannot be fulfilled on certificaterequests.cert-manager.io \"valkey-ca-lrs4c\": StorageError: invalid object, Code: 4, Key: /registry/cert-manager.io/certificaterequests/openstack/valkey-ca-lrs4c, ResourceVersion: 0, AdditionalErrorMsg: Precondition failed: UID in precondition: 427f3260-8267-48f2-9742-5a3d7d31e484, UID in object meta: " logger="cert-manager.certificaterequests-issuer-selfsigned" key="openstack/valkey-ca-lrs4c" I0423 17:00:00.223302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-ztrp5" condition "Approved" to 2026-04-23 17:00:00.223291113 +0000 UTC m=+29.587110061 I0423 17:00:00.252959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-ztrp5" condition "Ready" to 2026-04-23 17:00:00.252936386 +0000 UTC m=+29.616755364 I0423 17:00:00.285767 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:00:00.285751055 +0000 UTC m=+29.649570033 I0423 17:00:00.307798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:00:00.308141 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:00:00.308135652 +0000 UTC m=+29.671954600 I0423 17:00:00.428796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:00:00.482385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:00:04.401080 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:00:04.401060951 +0000 UTC m=+33.764879929 I0423 17:00:04.436738 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-qgpbb" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:00:04.436724437 +0000 UTC m=+33.800543405 I0423 17:00:04.503795 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:00:04.503756866 +0000 UTC m=+33.867575834 I0423 17:00:04.550295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:00:04.626890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:04:35.842298 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-141.nip.io-tls" condition "Ready" to 2026-04-23 17:04:35.842284639 +0000 UTC m=+305.206103587 I0423 17:04:35.842983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-141.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:04:35.843006 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-141.nip.io-tls" condition "Issuing" to 2026-04-23 17:04:35.843001695 +0000 UTC m=+305.206820643 I0423 17:04:35.858062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:04:35.858120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-141.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:04:35.858138 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-141.nip.io-tls" condition "Issuing" to 2026-04-23 17:04:35.858131115 +0000 UTC m=+305.221950063 I0423 17:04:36.129195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-141.nip.io-tls-zs84t" condition "Approved" to 2026-04-23 17:04:36.129182814 +0000 UTC m=+305.493001762 I0423 17:04:36.149034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-141.nip.io-tls-zs84t" condition "Ready" to 2026-04-23 17:04:36.149024499 +0000 UTC m=+305.512843447 I0423 17:04:36.174179 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:04:36.174164054 +0000 UTC m=+305.537983032 I0423 17:04:36.192211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:04:36.192424 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:04:36.192419364 +0000 UTC m=+305.556238302 I0423 17:04:36.211670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:05:45.073675 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 17:05:45.073660339 +0000 UTC m=+374.437479317 I0423 17:05:45.074101 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:05:45.074175 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-23 17:05:45.0741645 +0000 UTC m=+374.437983468 E0423 17:05:45.086619 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 17:05:45.086661 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-23 17:05:45.086654036 +0000 UTC m=+374.450472984 E0423 17:05:45.087074 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0423 17:05:45.099307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:05:45.099376 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 17:05:45.099371615 +0000 UTC m=+374.463190553 E0423 17:05:45.103821 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0423 17:05:45.103941 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 17:05:45.103986 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0423 17:05:45.104029 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0423 17:05:45.116777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:05:45.116815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8s8l2" condition "Approved" to 2026-04-23 17:05:45.116804763 +0000 UTC m=+374.480623711 I0423 17:05:45.116907 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 17:05:45.116899716 +0000 UTC m=+374.480718654 I0423 17:05:45.131499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8s8l2" condition "Ready" to 2026-04-23 17:05:45.131480087 +0000 UTC m=+374.495299025 I0423 17:05:45.132690 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-23 17:05:45.132683795 +0000 UTC m=+374.496502733 I0423 17:05:45.139514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:05:45.154763 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:05:45.154742668 +0000 UTC m=+374.518561636 I0423 17:05:45.178714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:05:45.178714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:05:45.179009 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:05:45.17900226 +0000 UTC m=+374.542821198 I0423 17:05:45.191324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:05:45.191612 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:05:45.191604878 +0000 UTC m=+374.555423836 I0423 17:05:50.104528 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:05:50.104518241 +0000 UTC m=+379.468337189 I0423 17:06:29.258356 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-23 17:06:29.258347094 +0000 UTC m=+418.622166042 I0423 17:06:29.258718 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:06:29.258740 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-23 17:06:29.258736353 +0000 UTC m=+418.622555301 I0423 17:06:29.260570 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-23 17:06:29.260566455 +0000 UTC m=+418.624385393 I0423 17:06:29.260795 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:06:29.260823 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-23 17:06:29.260820751 +0000 UTC m=+418.624639689 I0423 17:06:29.271730 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-23 17:06:29.271722731 +0000 UTC m=+418.635541679 I0423 17:06:29.272463 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:06:29.272483 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-23 17:06:29.272479468 +0000 UTC m=+418.636298416 I0423 17:06:29.293948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:29.293986 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:06:29.293999 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-23 17:06:29.293994642 +0000 UTC m=+418.657813580 I0423 17:06:29.306734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:29.306764 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-23 17:06:29.306761404 +0000 UTC m=+418.670580342 I0423 17:06:29.337524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:29.337559 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-23 17:06:29.337554461 +0000 UTC m=+418.701373399 I0423 17:06:29.484592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:29.516891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5v9k5" condition "Approved" to 2026-04-23 17:06:29.516882303 +0000 UTC m=+418.880701241 I0423 17:06:29.537160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5v9k5" condition "Ready" to 2026-04-23 17:06:29.537133847 +0000 UTC m=+418.900952795 I0423 17:06:29.543951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:29.555115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-74fpb" condition "Approved" to 2026-04-23 17:06:29.5550999 +0000 UTC m=+418.918918838 I0423 17:06:29.570921 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:06:29.570904982 +0000 UTC m=+418.934723910 I0423 17:06:29.576451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-74fpb" condition "Ready" to 2026-04-23 17:06:29.576440179 +0000 UTC m=+418.940259127 I0423 17:06:29.610635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:29.639131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:06:29.639166 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-23 17:06:29.639157957 +0000 UTC m=+419.002976885 I0423 17:06:29.642085 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:06:29.642079774 +0000 UTC m=+419.005898712 I0423 17:06:29.740390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:29.740815 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:06:29.740804698 +0000 UTC m=+419.104623646 I0423 17:06:29.947575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4fr79" condition "Approved" to 2026-04-23 17:06:29.947456367 +0000 UTC m=+419.311275315 I0423 17:06:30.001940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:30.142771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:30.204577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4fr79" condition "Ready" to 2026-04-23 17:06:30.204569243 +0000 UTC m=+419.568388181 I0423 17:06:30.590492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:31.002291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-554zb" condition "Approved" to 2026-04-23 17:06:31.002278239 +0000 UTC m=+420.366097177 I0423 17:06:31.092158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:31.166185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-554zb" condition "Ready" to 2026-04-23 17:06:31.166171019 +0000 UTC m=+420.529989997 I0423 17:06:31.741211 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:06:31.741197698 +0000 UTC m=+421.105016626 I0423 17:06:31.944155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:31.944691 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:06:31.944679986 +0000 UTC m=+421.308498954 I0423 17:06:32.191972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:37.135059 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls" condition "Ready" to 2026-04-23 17:06:37.135023308 +0000 UTC m=+426.498842266 I0423 17:06:37.138661 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:06:37.138688 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls" condition "Issuing" to 2026-04-23 17:06:37.138684061 +0000 UTC m=+426.502502999 I0423 17:06:37.153372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:37.153457 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls" condition "Ready" to 2026-04-23 17:06:37.15344844 +0000 UTC m=+426.517267388 I0423 17:06:37.365418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:37.397986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mlcwb-l4gfz" condition "Approved" to 2026-04-23 17:06:37.397974383 +0000 UTC m=+426.761793321 I0423 17:06:37.420483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mlcwb-l4gfz" condition "Ready" to 2026-04-23 17:06:37.420476259 +0000 UTC m=+426.784295197 I0423 17:06:37.442550 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:06:37.442537025 +0000 UTC m=+426.806355973 I0423 17:06:37.464616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:37.516703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mlcwb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:52.387087 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-23 17:06:52.38704575 +0000 UTC m=+441.750864718 I0423 17:06:52.387231 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:06:52.387303 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-23 17:06:52.387292326 +0000 UTC m=+441.751111304 I0423 17:06:52.401535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:52.401629 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-23 17:06:52.401623235 +0000 UTC m=+441.765442183 I0423 17:06:52.512615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:52.557532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gb2wt" condition "Approved" to 2026-04-23 17:06:52.557514089 +0000 UTC m=+441.921333057 I0423 17:06:52.571744 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gb2wt" condition "Ready" to 2026-04-23 17:06:52.571735706 +0000 UTC m=+441.935554644 I0423 17:06:52.629535 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:06:52.629519134 +0000 UTC m=+441.993338112 I0423 17:06:52.653268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:52.653911 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:06:52.653903405 +0000 UTC m=+442.017722343 I0423 17:06:52.662735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:06:52.674572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:08:05.780602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:08:05.780643 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-23 17:08:05.780631249 +0000 UTC m=+515.144450187 I0423 17:08:05.780913 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-23 17:08:05.780908435 +0000 UTC m=+515.144727363 I0423 17:08:05.796368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:08:05.796494 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:08:05.796522 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-23 17:08:05.796514716 +0000 UTC m=+515.160333654 I0423 17:08:06.106395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-82gtf" condition "Approved" to 2026-04-23 17:08:06.106381455 +0000 UTC m=+515.470200403 I0423 17:08:06.132573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-82gtf" condition "Ready" to 2026-04-23 17:08:06.13256266 +0000 UTC m=+515.496381608 I0423 17:08:06.174182 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:08:06.174165012 +0000 UTC m=+515.537983990 I0423 17:08:06.199192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:08:06.251731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:08:50.134615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0423 17:08:50.134639 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-23 17:08:50.134634427 +0000 UTC m=+559.498453365 I0423 17:08:50.134960 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 17:08:50.134956904 +0000 UTC m=+559.498775832 I0423 17:08:50.154351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:08:50.154398 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-23 17:08:50.154392765 +0000 UTC m=+559.518211703 I0423 17:08:50.312389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:08:50.344178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xzvmh" condition "Approved" to 2026-04-23 17:08:50.344158068 +0000 UTC m=+559.707977006 I0423 17:08:50.360717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-xzvmh" condition "Ready" to 2026-04-23 17:08:50.360708011 +0000 UTC m=+559.724526949 I0423 17:08:50.387953 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:08:50.387942972 +0000 UTC m=+559.751761910 I0423 17:08:50.409628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0423 17:08:50.410474 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-23 17:08:50.410460492 +0000 UTC m=+559.774279450 I0423 17:08:50.431821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"