I0401 23:28:43.748488 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0401 23:28:43.748665 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0401 23:28:43.748771 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0401 23:28:43.752744 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0401 23:28:43.752994 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0401 23:28:43.753167 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0401 23:28:43.753170 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0401 23:28:43.754928 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0401 23:28:43.770481 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0401 23:28:43.775688 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0401 23:28:43.780109 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0401 23:28:43.782920 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0401 23:28:43.782947 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0401 23:28:43.783000 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0401 23:28:43.783072 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0401 23:28:43.785494 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0401 23:28:43.785553 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0401 23:28:43.787912 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0401 23:28:43.787997 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0401 23:28:43.790315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0401 23:28:43.792448 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0401 23:28:43.796123 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0401 23:28:43.799185 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0401 23:28:43.801578 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0401 23:28:43.801648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0401 23:28:43.804247 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0401 23:28:43.807217 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0401 23:28:43.810892 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0401 23:28:43.814672 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0401 23:28:43.816435 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0401 23:28:43.820427 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0401 23:28:43.824484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0401 23:28:43.828664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0401 23:28:43.830964 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:43.831158 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:43.831193 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:43.832010 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:43.832469 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:43.833038 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:43.850265 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:43.865226 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:43.878883 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:43.913880 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:28:54.374899 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-01 23:28:54.374883699 +0000 UTC m=+10.656853063 I0401 23:28:55.072181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:28:55.072272 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-01 23:28:55.072259708 +0000 UTC m=+11.354229082 I0401 23:28:55.072228 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-01 23:28:55.072208567 +0000 UTC m=+11.354177921 I0401 23:28:55.090394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:28:55.090458 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-01 23:28:55.090450824 +0000 UTC m=+11.372420178 E0401 23:28:55.091014 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:28:55.091250 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-01 23:28:55.091240345 +0000 UTC m=+11.373209689 E0401 23:28:55.091328 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:28:55.105917 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0401 23:28:55.106071 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:28:55.106139 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:28:55.106200 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0401 23:28:55.108711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:28:55.131087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sds4q" condition "Approved" to 2026-04-01 23:28:55.131071372 +0000 UTC m=+11.413040746 I0401 23:28:55.145939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sds4q" condition "Ready" to 2026-04-01 23:28:55.145919279 +0000 UTC m=+11.427888633 I0401 23:28:55.169539 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:28:55.169499729 +0000 UTC m=+11.451469083 I0401 23:28:55.186378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:28:55.186809 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:28:55.186799643 +0000 UTC m=+11.468769017 I0401 23:28:55.191413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:28:55.203424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:28:55.203651 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:28:55.203644543 +0000 UTC m=+11.485613897 I0401 23:28:55.203977 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:29:00.106957 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:29:00.106939104 +0000 UTC m=+16.388908478 I0401 23:29:20.894154 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:29:20.894219 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-01 23:29:20.894205763 +0000 UTC m=+37.176175147 I0401 23:29:20.894738 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-01 23:29:20.894707357 +0000 UTC m=+37.176676741 I0401 23:29:20.906218 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-01 23:29:20.906204919 +0000 UTC m=+37.188174293 I0401 23:29:20.920376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:29:20.920523 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:29:20.920577 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-01 23:29:20.920567377 +0000 UTC m=+37.202536731 I0401 23:29:21.250768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:29:21.262572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lxh5c" condition "Approved" to 2026-04-01 23:29:21.26255519 +0000 UTC m=+37.544524544 I0401 23:29:21.298473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-lxh5c" condition "Ready" to 2026-04-01 23:29:21.298459731 +0000 UTC m=+37.580429085 I0401 23:29:21.327041 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:29:21.327028844 +0000 UTC m=+37.608998198 I0401 23:29:21.349893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:29:21.350250 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:29:21.350241892 +0000 UTC m=+37.632211246 I0401 23:29:21.365865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:29:21.366180 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:29:21.366167213 +0000 UTC m=+37.648136547 I0401 23:29:21.372357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:54.731212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:30:54.731252 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-01 23:30:54.731243975 +0000 UTC m=+131.013213339 I0401 23:30:54.731709 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-01 23:30:54.731703727 +0000 UTC m=+131.013673081 E0401 23:30:54.745764 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 23:30:54.745826 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-01 23:30:54.745816512 +0000 UTC m=+131.027785866 I0401 23:30:54.745889 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 23:30:54.746764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:54.746871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:30:54.746898 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-01 23:30:54.746889691 +0000 UTC m=+131.028859065 E0401 23:30:54.756099 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0401 23:30:54.756326 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 23:30:54.756391 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0401 23:30:54.756472 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0401 23:30:54.762222 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:30:54.762247 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-01 23:30:54.76224089 +0000 UTC m=+131.044210244 I0401 23:30:54.762296 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-01 23:30:54.762282761 +0000 UTC m=+131.044252115 I0401 23:30:54.778534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:54.778615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:30:54.778643 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-01 23:30:54.778635748 +0000 UTC m=+131.060605102 I0401 23:30:54.895170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:54.904703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-flpfm" condition "Approved" to 2026-04-01 23:30:54.904686687 +0000 UTC m=+131.186656061 I0401 23:30:54.909694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:54.917181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-lfkkr" condition "Approved" to 2026-04-01 23:30:54.917159756 +0000 UTC m=+131.199129140 I0401 23:30:54.923594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-flpfm" condition "Ready" to 2026-04-01 23:30:54.923575142 +0000 UTC m=+131.205544516 I0401 23:30:54.981831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-lfkkr" condition "Ready" to 2026-04-01 23:30:54.98182094 +0000 UTC m=+131.263790284 I0401 23:30:55.006352 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:55.00634025 +0000 UTC m=+131.288309594 I0401 23:30:55.031744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:55.032037 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:55.03201407 +0000 UTC m=+131.313983424 I0401 23:30:55.047262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:55.047763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:55.048366 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:55.048353026 +0000 UTC m=+131.330322420 I0401 23:30:59.757058 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:59.75704317 +0000 UTC m=+136.039012554 I0401 23:30:59.774219 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-flpfm" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:59.774198588 +0000 UTC m=+136.056167972 I0401 23:30:59.806055 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:59.806030476 +0000 UTC m=+136.087999850 I0401 23:30:59.825927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:59.826350 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:59.826341391 +0000 UTC m=+136.108310775 I0401 23:30:59.847630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:59.847713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:59.847950 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:59.84794073 +0000 UTC m=+136.129910084 I0401 23:33:26.475053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:33:26.475165 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Issuing" to 2026-04-01 23:33:26.475154269 +0000 UTC m=+282.757123643 I0401 23:33:26.475060 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-04-01 23:33:26.475022515 +0000 UTC m=+282.756991919 I0401 23:33:26.499321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:33:26.499397 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-04-01 23:33:26.499387998 +0000 UTC m=+282.781357352 I0401 23:33:27.104043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:33:27.135093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-nmc2w" condition "Approved" to 2026-04-01 23:33:27.13505511 +0000 UTC m=+283.417024514 I0401 23:33:27.152623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-nmc2w" condition "Ready" to 2026-04-01 23:33:27.152607518 +0000 UTC m=+283.434576872 I0401 23:33:27.184580 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:33:27.184566887 +0000 UTC m=+283.466536241 I0401 23:33:27.203738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:34:35.136765 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:34:35.136762 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-01 23:34:35.136718051 +0000 UTC m=+351.418687435 I0401 23:34:35.136806 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-01 23:34:35.136799643 +0000 UTC m=+351.418768997 E0401 23:34:35.150156 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:34:35.150222 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-01 23:34:35.150215578 +0000 UTC m=+351.432184932 E0401 23:34:35.150255 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:34:35.152184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:34:35.152333 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:34:35.152364 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-01 23:34:35.152355246 +0000 UTC m=+351.434324600 E0401 23:34:35.160248 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0401 23:34:35.160367 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:34:35.160401 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:34:35.160459 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0401 23:34:35.188809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rvvhd" condition "Approved" to 2026-04-01 23:34:35.188779987 +0000 UTC m=+351.470749371 I0401 23:34:35.200717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rvvhd" condition "Ready" to 2026-04-01 23:34:35.200704091 +0000 UTC m=+351.482673465 I0401 23:34:35.220120 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:34:35.220104238 +0000 UTC m=+351.502073592 I0401 23:34:35.234565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:34:40.161697 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:34:40.161681324 +0000 UTC m=+356.443650698 I0401 23:35:17.455166 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-01 23:35:17.45514885 +0000 UTC m=+393.737118204 I0401 23:35:17.460348 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-01 23:35:17.455573002 +0000 UTC m=+393.737542356 I0401 23:35:17.460543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:17.460586 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-01 23:35:17.460578757 +0000 UTC m=+393.742548111 I0401 23:35:17.461325 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-01 23:35:17.461318048 +0000 UTC m=+393.743287402 I0401 23:35:17.461516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:17.464098 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-01 23:35:17.464083993 +0000 UTC m=+393.746053337 I0401 23:35:17.461507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:17.464418 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-01 23:35:17.464414812 +0000 UTC m=+393.746384156 I0401 23:35:17.488183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:17.488248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:17.488272 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-01 23:35:17.48826526 +0000 UTC m=+393.770234614 I0401 23:35:17.490804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:17.491106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:17.491226 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-01 23:35:17.49121046 +0000 UTC m=+393.773179844 I0401 23:35:17.494079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:17.494165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:17.494193 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-01 23:35:17.494185941 +0000 UTC m=+393.776155295 I0401 23:35:17.599699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:17.610783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lqnqh" condition "Approved" to 2026-04-01 23:35:17.61077492 +0000 UTC m=+393.892744274 I0401 23:35:17.627227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lqnqh" condition "Ready" to 2026-04-01 23:35:17.627216337 +0000 UTC m=+393.909185681 I0401 23:35:17.659051 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:17.659039602 +0000 UTC m=+393.941008956 I0401 23:35:17.677166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:17.677931 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:17.677921855 +0000 UTC m=+393.959891209 I0401 23:35:17.694615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:17.694944 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:17.694934648 +0000 UTC m=+393.976903992 I0401 23:35:17.784108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9nxgl" condition "Approved" to 2026-04-01 23:35:17.784095881 +0000 UTC m=+394.066065215 I0401 23:35:17.796854 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5gbqw" condition "Approved" to 2026-04-01 23:35:17.796840047 +0000 UTC m=+394.078809391 I0401 23:35:17.799986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9nxgl" condition "Ready" to 2026-04-01 23:35:17.799975353 +0000 UTC m=+394.081944697 I0401 23:35:17.853746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-5gbqw" condition "Ready" to 2026-04-01 23:35:17.853732734 +0000 UTC m=+394.135702088 I0401 23:35:18.397697 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:18.397680529 +0000 UTC m=+394.679649883 I0401 23:35:18.452188 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:18.45217321 +0000 UTC m=+394.734142584 I0401 23:35:18.598166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:18.598598 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:18.59859082 +0000 UTC m=+394.880560174 I0401 23:35:18.699803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:18.700335 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:18.700326195 +0000 UTC m=+394.982295549 I0401 23:35:19.096537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:19.150405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:19.197657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:25.314178 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" condition "Ready" to 2026-04-01 23:35:25.314148584 +0000 UTC m=+401.596117938 I0401 23:35:25.314254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:25.314308 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" condition "Issuing" to 2026-04-01 23:35:25.314295248 +0000 UTC m=+401.596264622 I0401 23:35:25.329368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z85vm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:25.329454 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:25.329474 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" condition "Issuing" to 2026-04-01 23:35:25.32946714 +0000 UTC m=+401.611436494 I0401 23:35:25.546652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z85vm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:25.556139 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-z85vm-mrfkz" condition "Approved" to 2026-04-01 23:35:25.556121821 +0000 UTC m=+401.838091165 I0401 23:35:25.572503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-z85vm-mrfkz" condition "Ready" to 2026-04-01 23:35:25.572488316 +0000 UTC m=+401.854457700 I0401 23:35:25.602935 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:25.602920333 +0000 UTC m=+401.884889687 I0401 23:35:25.626062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z85vm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:25.626395 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:25.626387001 +0000 UTC m=+401.908356345 I0401 23:35:25.644984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z85vm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:25.645524 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:25.645513931 +0000 UTC m=+401.927483285 I0401 23:35:25.645927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-z85vm-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-z85vm-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:46.815563 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:35:46.815593 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-01 23:35:46.815587542 +0000 UTC m=+423.097556876 I0401 23:35:46.816013 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-01 23:35:46.816008333 +0000 UTC m=+423.097977677 I0401 23:35:46.832487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:46.832750 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-01 23:35:46.832738949 +0000 UTC m=+423.114708303 I0401 23:35:47.392525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:47.420376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bh47f" condition "Approved" to 2026-04-01 23:35:47.420365495 +0000 UTC m=+423.702334849 I0401 23:35:47.437381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bh47f" condition "Ready" to 2026-04-01 23:35:47.437366118 +0000 UTC m=+423.719335502 I0401 23:35:47.470129 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:47.4701128 +0000 UTC m=+423.752082184 I0401 23:35:47.485825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:47.486172 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:47.486164147 +0000 UTC m=+423.768133501 I0401 23:35:47.514408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:35:47.514819 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:35:47.514810017 +0000 UTC m=+423.796779361 I0401 23:39:04.714603 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-01 23:39:04.714563765 +0000 UTC m=+620.996533149 I0401 23:39:04.714702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:39:04.714863 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-01 23:39:04.714839152 +0000 UTC m=+620.996808536 I0401 23:39:04.734134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:39:04.734229 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:39:04.734257 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-01 23:39:04.734246939 +0000 UTC m=+621.016216313 I0401 23:39:04.928419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9ldv4" condition "Approved" to 2026-04-01 23:39:04.928399561 +0000 UTC m=+621.210368915 I0401 23:39:04.946641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-9ldv4" condition "Ready" to 2026-04-01 23:39:04.946629986 +0000 UTC m=+621.228599320 I0401 23:39:04.978223 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:39:04.978199794 +0000 UTC m=+621.260169178 I0401 23:39:05.001523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:39:05.053410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:41:25.177259 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-01 23:41:25.177203345 +0000 UTC m=+761.459172729 I0401 23:41:25.177648 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:41:25.177709 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-01 23:41:25.177694408 +0000 UTC m=+761.459663782 I0401 23:41:25.195733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:41:25.195936 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:41:25.196093 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-01 23:41:25.195966263 +0000 UTC m=+761.477935608 I0401 23:41:25.655343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-fchtv" condition "Approved" to 2026-04-01 23:41:25.655329694 +0000 UTC m=+761.937299048 I0401 23:41:25.675336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-fchtv" condition "Ready" to 2026-04-01 23:41:25.675311477 +0000 UTC m=+761.957280851 I0401 23:41:25.709061 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:41:25.709044402 +0000 UTC m=+761.991013756 I0401 23:41:25.746821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:41:25.747457 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:41:25.747439922 +0000 UTC m=+762.029409296 I0401 23:41:25.771566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:42:26.986932 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-01 23:42:26.986899682 +0000 UTC m=+823.268869056 I0401 23:42:26.987597 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:42:26.987655 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-01 23:42:26.987649272 +0000 UTC m=+823.269618646 I0401 23:42:27.012513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:42:27.012556 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-01 23:42:27.012552796 +0000 UTC m=+823.294522140 I0401 23:42:27.217539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:42:27.247920 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-hgqmf" condition "Approved" to 2026-04-01 23:42:27.247909115 +0000 UTC m=+823.529878459 I0401 23:42:27.267150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-hgqmf" condition "Ready" to 2026-04-01 23:42:27.267139595 +0000 UTC m=+823.549108949 I0401 23:42:27.300469 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:42:27.300456587 +0000 UTC m=+823.582425971 I0401 23:42:27.322284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:42:27.322566 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:42:27.322558385 +0000 UTC m=+823.604527739 I0401 23:42:27.342724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:45:26.650021 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-01 23:45:26.64988649 +0000 UTC m=+1002.931855834 I0401 23:45:26.650308 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:45:26.650398 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-01 23:45:26.650386044 +0000 UTC m=+1002.932355418 I0401 23:45:26.669286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:45:26.669383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:45:26.669421 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-01 23:45:26.669411503 +0000 UTC m=+1002.951380877 I0401 23:45:26.845622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:45:26.860365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vzjlt" condition "Approved" to 2026-04-01 23:45:26.860349961 +0000 UTC m=+1003.142319325 I0401 23:45:26.877800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vzjlt" condition "Ready" to 2026-04-01 23:45:26.877787688 +0000 UTC m=+1003.159757042 I0401 23:45:26.912781 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:45:26.912763214 +0000 UTC m=+1003.194732558 I0401 23:45:26.938664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:45:26.939177 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:45:26.939168132 +0000 UTC m=+1003.221137486 I0401 23:45:26.953622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:45:26.954047 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:45:26.954038151 +0000 UTC m=+1003.236007535