I0505 07:01:40.288917 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0505 07:01:40.289093 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0505 07:01:40.289202 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0505 07:01:40.293413 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0505 07:01:40.294155 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0505 07:01:40.294254 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0505 07:01:40.294293 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0505 07:01:40.297080 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0505 07:01:40.313369 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0505 07:01:40.318075 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0505 07:01:40.325474 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0505 07:01:40.329594 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0505 07:01:40.329712 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0505 07:01:40.332530 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0505 07:01:40.332613 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0505 07:01:40.335685 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0505 07:01:40.339237 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0505 07:01:40.341791 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0505 07:01:40.343657 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0505 07:01:40.351144 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0505 07:01:40.351207 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0505 07:01:40.351244 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0505 07:01:40.356988 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0505 07:01:40.357112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0505 07:01:40.359004 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0505 07:01:40.359509 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0505 07:01:40.361484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0505 07:01:40.363871 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0505 07:01:40.366252 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0505 07:01:40.367988 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0505 07:01:40.370691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0505 07:01:40.377451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0505 07:01:40.380921 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0505 07:01:40.383721 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 07:01:40.384171 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 07:01:40.384512 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 07:01:40.406129 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 07:01:40.416940 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 07:01:40.434237 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 07:01:40.452450 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 07:01:40.470833 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 07:01:40.477536 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 07:01:40.496345 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0505 07:01:51.501136 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-05 07:01:51.501118897 +0000 UTC m=+11.249400348 I0505 07:01:52.306474 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-05 07:01:52.306453363 +0000 UTC m=+12.054734824 I0505 07:01:52.306518 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:01:52.306662 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 07:01:52.306655578 +0000 UTC m=+12.054937009 E0505 07:01:52.323879 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 07:01:52.323975 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-05 07:01:52.323963696 +0000 UTC m=+12.072245127 E0505 07:01:52.324069 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 07:01:52.324732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:01:52.324882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:01:52.324921 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-05 07:01:52.324914068 +0000 UTC m=+12.073195529 E0505 07:01:52.340641 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0505 07:01:52.341637 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 07:01:52.341784 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 07:01:52.343845 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0505 07:01:52.379178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:01:52.388916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-92mxw" condition "Approved" to 2026-05-05 07:01:52.38889855 +0000 UTC m=+12.137180001 I0505 07:01:52.404587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-92mxw" condition "Ready" to 2026-05-05 07:01:52.404571837 +0000 UTC m=+12.152853268 I0505 07:01:52.432670 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:01:52.432656834 +0000 UTC m=+12.180938265 I0505 07:01:52.448485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:01:52.448800 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:01:52.448794513 +0000 UTC m=+12.197075934 I0505 07:01:52.464724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:01:57.342031 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:01:57.342013036 +0000 UTC m=+17.090294497 I0505 07:02:18.341123 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-05 07:02:18.341102964 +0000 UTC m=+38.089384395 I0505 07:02:18.341285 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:02:18.341374 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 07:02:18.34135879 +0000 UTC m=+38.089640281 I0505 07:02:18.354321 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-05 07:02:18.354302143 +0000 UTC m=+38.102583564 I0505 07:02:18.367864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:02:18.367975 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:02:18.368008 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-05 07:02:18.367999513 +0000 UTC m=+38.116280944 I0505 07:02:18.627341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:02:18.631376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8fgcc" condition "Approved" to 2026-05-05 07:02:18.631361709 +0000 UTC m=+38.379643140 I0505 07:02:18.662707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-8fgcc" condition "Ready" to 2026-05-05 07:02:18.662696154 +0000 UTC m=+38.410977585 I0505 07:02:18.695959 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:02:18.695944966 +0000 UTC m=+38.444226397 I0505 07:02:18.722301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:04:04.000951 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:04:04.000953 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-05 07:04:04.000931434 +0000 UTC m=+143.749212915 I0505 07:04:04.000986 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-05 07:04:04.000977205 +0000 UTC m=+143.749258656 E0505 07:04:04.015256 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 07:04:04.015331 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-05 07:04:04.01532216 +0000 UTC m=+143.763603621 I0505 07:04:04.015384 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 07:04:04.019711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:04:04.019837 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-05 07:04:04.019827229 +0000 UTC m=+143.768108710 E0505 07:04:04.026853 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0505 07:04:04.027084 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0505 07:04:04.027174 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0505 07:04:04.027249 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0505 07:04:04.030634 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-05 07:04:04.03061468 +0000 UTC m=+143.778896111 I0505 07:04:04.031137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:04:04.031218 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-05 07:04:04.031212924 +0000 UTC m=+143.779494355 I0505 07:04:04.046194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:04:04.046279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:04:04.046302 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-05 07:04:04.046292527 +0000 UTC m=+143.794573978 I0505 07:04:04.239604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:04:04.271867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-fqrwh" condition "Approved" to 2026-05-05 07:04:04.271841658 +0000 UTC m=+144.020123119 I0505 07:04:04.301162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-fqrwh" condition "Ready" to 2026-05-05 07:04:04.301144954 +0000 UTC m=+144.049426375 I0505 07:04:04.319092 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zfpv5" condition "Approved" to 2026-05-05 07:04:04.319077647 +0000 UTC m=+144.067359078 I0505 07:04:04.335657 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:04:04.335642407 +0000 UTC m=+144.083923838 I0505 07:04:04.338713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zfpv5" condition "Ready" to 2026-05-05 07:04:04.338701501 +0000 UTC m=+144.086982942 I0505 07:04:04.354901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:04:04.355206 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:04:04.355197749 +0000 UTC m=+144.103479180 I0505 07:04:04.372958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:04:04.377413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:04:04.377695 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:04:04.377685201 +0000 UTC m=+144.125966632 I0505 07:04:04.383988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:04:09.027797 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:04:09.027784057 +0000 UTC m=+148.776065518 I0505 07:04:09.044769 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-zfpv5" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:04:09.044758078 +0000 UTC m=+148.793039509 I0505 07:04:09.072449 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:04:09.072436884 +0000 UTC m=+148.820718315 I0505 07:04:09.091574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:04:09.096032 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:04:09.096022644 +0000 UTC m=+148.844304075 I0505 07:04:09.099984 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:04:09.109818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:04:09.110110 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:04:09.110102584 +0000 UTC m=+148.858384015 I0505 07:06:35.728057 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready" to 2026-05-05 07:06:35.728009709 +0000 UTC m=+295.476291140 I0505 07:06:35.728156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-138.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:06:35.728437 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Issuing" to 2026-05-05 07:06:35.728205704 +0000 UTC m=+295.476487165 I0505 07:06:35.744244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:06:35.744340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-138.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:06:35.744369 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Issuing" to 2026-05-05 07:06:35.744359311 +0000 UTC m=+295.492640772 I0505 07:06:35.959536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-138.nip.io-tls-dxb7m" condition "Approved" to 2026-05-05 07:06:35.959517727 +0000 UTC m=+295.707799188 I0505 07:06:35.976404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-138.nip.io-tls-dxb7m" condition "Ready" to 2026-05-05 07:06:35.976390632 +0000 UTC m=+295.724672063 I0505 07:06:36.002847 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:06:36.002831806 +0000 UTC m=+295.751113247 I0505 07:06:36.021957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:07:45.471188 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:07:45.471387 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 07:07:45.471366425 +0000 UTC m=+365.219647946 I0505 07:07:45.471189 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-05 07:07:45.471173981 +0000 UTC m=+365.219455402 E0505 07:07:45.483952 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 07:07:45.484007 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-05 07:07:45.483995668 +0000 UTC m=+365.232277099 E0505 07:07:45.484057 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0505 07:07:45.486724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:07:45.486829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:07:45.486864 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-05 07:07:45.486852426 +0000 UTC m=+365.235133887 E0505 07:07:45.494931 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0505 07:07:45.495390 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 07:07:45.495425 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0505 07:07:45.495478 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0505 07:07:45.526654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:07:45.526908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rnflm" condition "Approved" to 2026-05-05 07:07:45.526887918 +0000 UTC m=+365.275169369 I0505 07:07:45.540265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-rnflm" condition "Ready" to 2026-05-05 07:07:45.540251268 +0000 UTC m=+365.288532689 I0505 07:07:45.566586 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:07:45.56656678 +0000 UTC m=+365.314848241 I0505 07:07:45.584783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:07:45.585200 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:07:45.585188497 +0000 UTC m=+365.333469938 I0505 07:07:45.590550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:07:45.599725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:07:45.600249 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:07:45.600236278 +0000 UTC m=+365.348517699 I0505 07:07:50.495556 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:07:50.49553177 +0000 UTC m=+370.243813221 I0505 07:08:27.315764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:08:27.315792 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-05 07:08:27.315789671 +0000 UTC m=+407.064071092 I0505 07:08:27.315685 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 07:08:27.315670738 +0000 UTC m=+407.063952159 I0505 07:08:27.322661 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:08:27.322691 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-05 07:08:27.322684436 +0000 UTC m=+407.070965857 I0505 07:08:27.322857 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 07:08:27.322841359 +0000 UTC m=+407.071122790 I0505 07:08:27.322898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:08:27.322912 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-05 07:08:27.322908881 +0000 UTC m=+407.071190302 I0505 07:08:27.322907 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 07:08:27.322889061 +0000 UTC m=+407.071170482 I0505 07:08:27.340398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:27.340476 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-05 07:08:27.340468812 +0000 UTC m=+407.088750243 I0505 07:08:27.344856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:27.344892 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-05 07:08:27.344888738 +0000 UTC m=+407.093170149 I0505 07:08:27.345070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:27.345101 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-05 07:08:27.345098303 +0000 UTC m=+407.093379724 I0505 07:08:27.518701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:27.553023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g8qfh" condition "Approved" to 2026-05-05 07:08:27.553002118 +0000 UTC m=+407.301283569 I0505 07:08:27.574904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g8qfh" condition "Ready" to 2026-05-05 07:08:27.574891602 +0000 UTC m=+407.323173033 I0505 07:08:27.630483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:27.637273 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:08:27.637263398 +0000 UTC m=+407.385544819 I0505 07:08:27.648060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:27.648494 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:08:27.648485047 +0000 UTC m=+407.396766478 I0505 07:08:27.660276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:27.670827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:27.671068 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:08:27.671059638 +0000 UTC m=+407.419341049 I0505 07:08:27.785054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zgx4t" condition "Approved" to 2026-05-05 07:08:27.78504065 +0000 UTC m=+407.533322071 E0505 07:08:27.794061 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-kc5g8\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0505 07:08:27.803706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zgx4t" condition "Ready" to 2026-05-05 07:08:27.803690547 +0000 UTC m=+407.551971978 I0505 07:08:28.064209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:28.227955 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-zgx4t" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-kc5g8" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0505 07:08:28.253219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4t7dn" condition "Approved" to 2026-05-05 07:08:28.253194843 +0000 UTC m=+408.001476304 I0505 07:08:28.554189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4t7dn" condition "Ready" to 2026-05-05 07:08:28.554173729 +0000 UTC m=+408.302455170 E0505 07:08:28.743315 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-kc5g8\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0505 07:08:28.803573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-b2w2r" condition "Approved" to 2026-05-05 07:08:28.803549688 +0000 UTC m=+408.551831149 I0505 07:08:29.155088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-b2w2r" condition "Ready" to 2026-05-05 07:08:29.155075055 +0000 UTC m=+408.903356486 I0505 07:08:29.300748 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:08:29.300728716 +0000 UTC m=+409.049010177 I0505 07:08:29.544034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:29.544451 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:08:29.544437259 +0000 UTC m=+409.292718720 I0505 07:08:29.646724 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:08:29.646703651 +0000 UTC m=+409.394985102 I0505 07:08:29.946883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:29.947523 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:08:29.947506412 +0000 UTC m=+409.695787883 I0505 07:08:29.995091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:30.044023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:30.314162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:35.060594 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls" condition "Ready" to 2026-05-05 07:08:35.060575381 +0000 UTC m=+414.808856842 I0505 07:08:35.061113 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:08:35.061140 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls" condition "Issuing" to 2026-05-05 07:08:35.061134055 +0000 UTC m=+414.809415506 I0505 07:08:35.072559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:35.072672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:08:35.072740 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls" condition "Issuing" to 2026-05-05 07:08:35.072731803 +0000 UTC m=+414.821013264 I0505 07:08:35.448911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7xc9c-lwt2v" condition "Approved" to 2026-05-05 07:08:35.448892451 +0000 UTC m=+415.197173922 I0505 07:08:35.468965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7xc9c-lwt2v" condition "Ready" to 2026-05-05 07:08:35.468924091 +0000 UTC m=+415.217205552 I0505 07:08:35.496377 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:08:35.496364109 +0000 UTC m=+415.244645540 I0505 07:08:35.522556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:35.522931 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:08:35.522924396 +0000 UTC m=+415.271205827 I0505 07:08:35.537269 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:35.537486 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7xc9c-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:08:35.537480205 +0000 UTC m=+415.285761626 I0505 07:08:57.422731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:08:57.422796 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-05 07:08:57.422785114 +0000 UTC m=+437.171066555 I0505 07:08:57.424673 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 07:08:57.42466357 +0000 UTC m=+437.172945001 I0505 07:08:57.442076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:57.442158 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-05 07:08:57.442150289 +0000 UTC m=+437.190431710 I0505 07:08:57.648347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:57.679113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-s2qhk" condition "Approved" to 2026-05-05 07:08:57.67909384 +0000 UTC m=+437.427375301 I0505 07:08:57.699861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-s2qhk" condition "Ready" to 2026-05-05 07:08:57.699659982 +0000 UTC m=+437.447941413 I0505 07:08:57.737344 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:08:57.737328935 +0000 UTC m=+437.485610376 I0505 07:08:57.757026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:57.757360 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:08:57.757350995 +0000 UTC m=+437.505632446 I0505 07:08:57.768842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:08:57.783467 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:12:17.769927 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:12:17.769964 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 07:12:17.769957435 +0000 UTC m=+637.518238866 I0505 07:12:17.770225 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-05 07:12:17.770204592 +0000 UTC m=+637.518486043 I0505 07:12:17.790116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:12:17.790232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:12:17.790268 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-05 07:12:17.790258002 +0000 UTC m=+637.538539453 I0505 07:12:18.074177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6j5md" condition "Approved" to 2026-05-05 07:12:18.07416371 +0000 UTC m=+637.822445131 I0505 07:12:18.092884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-6j5md" condition "Ready" to 2026-05-05 07:12:18.092869478 +0000 UTC m=+637.841150909 I0505 07:12:18.116148 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:12:18.116135735 +0000 UTC m=+637.864417156 I0505 07:12:18.138210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:12:18.195222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:14:46.084595 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:14:46.084654 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-05 07:14:46.084647393 +0000 UTC m=+785.832928824 I0505 07:14:46.085097 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-05 07:14:46.085093004 +0000 UTC m=+785.833374435 I0505 07:14:46.101478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:14:46.101540 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-05 07:14:46.101535228 +0000 UTC m=+785.849816659 I0505 07:14:46.267673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:14:46.299728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-xpsrq" condition "Approved" to 2026-05-05 07:14:46.299716313 +0000 UTC m=+786.047997744 I0505 07:14:46.326275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-xpsrq" condition "Ready" to 2026-05-05 07:14:46.326260168 +0000 UTC m=+786.074541629 I0505 07:14:46.351535 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:14:46.351524734 +0000 UTC m=+786.099806165 I0505 07:14:46.374559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:14:46.374871 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:14:46.374865043 +0000 UTC m=+786.123146474 I0505 07:14:46.390727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:14:46.395802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:14:46.396292 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:14:46.396279855 +0000 UTC m=+786.144561296 I0505 07:15:52.468223 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:15:52.468311 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-05 07:15:52.468307404 +0000 UTC m=+852.216588825 I0505 07:15:52.468223 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-05 07:15:52.468186391 +0000 UTC m=+852.216467822 I0505 07:15:52.489432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:15:52.489597 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-05 07:15:52.489588073 +0000 UTC m=+852.237869504 I0505 07:15:52.611876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:15:52.651053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8t495" condition "Approved" to 2026-05-05 07:15:52.65103496 +0000 UTC m=+852.399316421 I0505 07:15:52.682929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-8t495" condition "Ready" to 2026-05-05 07:15:52.682917683 +0000 UTC m=+852.431199114 I0505 07:15:52.714869 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:15:52.714845909 +0000 UTC m=+852.463127360 I0505 07:15:52.745569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:18:56.408701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:18:56.408754 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-05 07:18:56.408748232 +0000 UTC m=+1036.157029653 I0505 07:18:56.408760 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-05 07:18:56.408744512 +0000 UTC m=+1036.157025943 I0505 07:18:56.429341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:18:56.429546 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:18:56.429580 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-05 07:18:56.429570491 +0000 UTC m=+1036.177851942 I0505 07:18:56.559879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mmd69" condition "Approved" to 2026-05-05 07:18:56.559864719 +0000 UTC m=+1036.308146150 I0505 07:18:56.578797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-mmd69" condition "Ready" to 2026-05-05 07:18:56.578780422 +0000 UTC m=+1036.327061843 I0505 07:18:56.610191 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:18:56.610177144 +0000 UTC m=+1036.358458585 I0505 07:18:56.630420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:18:56.676988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:25:07.730476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:25:07.730560 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-05 07:25:07.730550612 +0000 UTC m=+1407.478832063 I0505 07:25:07.730925 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-05 07:25:07.730902811 +0000 UTC m=+1407.479184262 I0505 07:25:07.754404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:25:07.754484 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-05 07:25:07.754476895 +0000 UTC m=+1407.502758326 I0505 07:25:07.859952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:25:07.887709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-75sdm" condition "Approved" to 2026-05-05 07:25:07.887701622 +0000 UTC m=+1407.635983053 I0505 07:25:07.908770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-75sdm" condition "Ready" to 2026-05-05 07:25:07.908762597 +0000 UTC m=+1407.657044028 I0505 07:25:07.932419 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:25:07.932373662 +0000 UTC m=+1407.680655103 I0505 07:25:07.959471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:25:07.959774 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:25:07.959767167 +0000 UTC m=+1407.708048588 I0505 07:25:07.980346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:25:07.980804 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:25:07.980795101 +0000 UTC m=+1407.729076532 I0505 07:25:07.983769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:26:40.736902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0505 07:26:40.736958 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-05 07:26:40.736944396 +0000 UTC m=+1500.485225877 I0505 07:26:40.736994 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-05 07:26:40.736985717 +0000 UTC m=+1500.485267178 I0505 07:26:40.760084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:26:40.760152 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-05 07:26:40.760145431 +0000 UTC m=+1500.508426862 I0505 07:26:40.927744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:26:40.950027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wdcrb" condition "Approved" to 2026-05-05 07:26:40.950008615 +0000 UTC m=+1500.698290046 I0505 07:26:40.970645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wdcrb" condition "Ready" to 2026-05-05 07:26:40.970628718 +0000 UTC m=+1500.718910179 I0505 07:26:41.001173 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:26:41.001161728 +0000 UTC m=+1500.749443149 I0505 07:26:41.023771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:26:41.024632 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-05 07:26:41.024621039 +0000 UTC m=+1500.772902500 I0505 07:26:41.032323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0505 07:26:41.047307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"