I0411 02:13:55.512142 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0411 02:13:55.512273 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0411 02:13:55.512376 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0411 02:13:55.519320 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0411 02:13:55.519923 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0411 02:13:55.520059 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0411 02:13:55.520223 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0411 02:13:55.523982 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0411 02:13:55.542663 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0411 02:13:55.547835 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0411 02:13:55.550582 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0411 02:13:55.554996 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0411 02:13:55.560601 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0411 02:13:55.560653 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0411 02:13:55.560671 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0411 02:13:55.560698 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0411 02:13:55.564142 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0411 02:13:55.566043 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0411 02:13:55.568008 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0411 02:13:55.569619 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0411 02:13:55.569644 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0411 02:13:55.569735 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0411 02:13:55.571892 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0411 02:13:55.571976 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0411 02:13:55.573852 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0411 02:13:55.578021 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0411 02:13:55.580831 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0411 02:13:55.583494 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0411 02:13:55.586313 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0411 02:13:55.588757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0411 02:13:55.590772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0411 02:13:55.592644 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0411 02:13:55.594766 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0411 02:13:55.597189 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:13:55.597662 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:13:55.598053 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:13:55.598615 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:13:55.599216 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:13:55.599663 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:13:55.599871 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:13:55.600354 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:13:55.600503 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:13:55.692269 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0411 02:14:08.015500 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-11 02:14:08.015479467 +0000 UTC m=+12.548009346 I0411 02:14:08.717964 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-11 02:14:08.717940463 +0000 UTC m=+13.250470332 I0411 02:14:08.718060 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:14:08.718547 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-11 02:14:08.718524999 +0000 UTC m=+13.251054868 I0411 02:14:08.731588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:08.731708 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-11 02:14:08.731695857 +0000 UTC m=+13.264225716 E0411 02:14:08.733524 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 02:14:08.733583 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-11 02:14:08.733576219 +0000 UTC m=+13.266106058 E0411 02:14:08.733605 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 02:14:08.744125 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0411 02:14:08.744353 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 02:14:08.744459 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 02:14:08.744518 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0411 02:14:08.748051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:08.769817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9r2fk" condition "Approved" to 2026-04-11 02:14:08.769802659 +0000 UTC m=+13.302332528 I0411 02:14:08.783991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9r2fk" condition "Ready" to 2026-04-11 02:14:08.783976254 +0000 UTC m=+13.316506093 I0411 02:14:08.803714 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:14:08.803696794 +0000 UTC m=+13.336226653 I0411 02:14:08.821270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:08.821776 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:14:08.821761898 +0000 UTC m=+13.354291767 I0411 02:14:08.833419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:08.834501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:08.834735 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:14:08.834726229 +0000 UTC m=+13.367256068 I0411 02:14:08.837301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:13.745297 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:14:13.745281144 +0000 UTC m=+18.277811013 I0411 02:14:33.866942 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-11 02:14:33.866917926 +0000 UTC m=+38.399447795 I0411 02:14:33.867074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:14:33.867246 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-11 02:14:33.867233384 +0000 UTC m=+38.399763243 I0411 02:14:33.876365 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-11 02:14:33.876352589 +0000 UTC m=+38.408882418 I0411 02:14:33.888443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:33.888575 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-11 02:14:33.888564519 +0000 UTC m=+38.421094358 I0411 02:14:34.025689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:34.060086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-l8c42" condition "Approved" to 2026-04-11 02:14:34.060070771 +0000 UTC m=+38.592600640 I0411 02:14:34.088330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-l8c42" condition "Ready" to 2026-04-11 02:14:34.088316919 +0000 UTC m=+38.620846748 I0411 02:14:34.119376 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:14:34.119360654 +0000 UTC m=+38.651890493 I0411 02:14:34.143939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:34.144626 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:14:34.144617438 +0000 UTC m=+38.677147277 I0411 02:14:34.150322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:34.167373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:34.168474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:14:34.169018 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:14:34.169006229 +0000 UTC m=+38.701536088 I0411 02:16:22.596214 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-11 02:16:22.596180012 +0000 UTC m=+147.128709871 I0411 02:16:22.596338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:16:22.596384 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-11 02:16:22.596371807 +0000 UTC m=+147.128901666 E0411 02:16:22.610031 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0411 02:16:22.610137 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-11 02:16:22.610098086 +0000 UTC m=+147.142627925 I0411 02:16:22.610169 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0411 02:16:22.615612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:16:22.615774 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-11 02:16:22.615765512 +0000 UTC m=+147.148295351 E0411 02:16:22.624549 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0411 02:16:22.624653 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0411 02:16:22.624683 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0411 02:16:22.624716 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0411 02:16:22.627640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:16:22.627677 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-11 02:16:22.62766676 +0000 UTC m=+147.160196589 I0411 02:16:22.627853 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-11 02:16:22.627837705 +0000 UTC m=+147.160367544 I0411 02:16:22.646838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:16:22.646939 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-11 02:16:22.646928171 +0000 UTC m=+147.179458000 I0411 02:16:22.782975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:16:22.814551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gxvxg" condition "Approved" to 2026-04-11 02:16:22.81452729 +0000 UTC m=+147.347057159 I0411 02:16:22.845042 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gxvxg" condition "Ready" to 2026-04-11 02:16:22.845013151 +0000 UTC m=+147.377542990 I0411 02:16:22.876173 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:16:22.876155749 +0000 UTC m=+147.408685588 I0411 02:16:22.894755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:16:22.895403 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:16:22.895389299 +0000 UTC m=+147.427919158 I0411 02:16:22.915376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:16:23.181486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:16:23.206539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-n6fmx" condition "Approved" to 2026-04-11 02:16:23.206528785 +0000 UTC m=+147.739058614 I0411 02:16:23.230145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-n6fmx" condition "Ready" to 2026-04-11 02:16:23.230115805 +0000 UTC m=+147.762645664 I0411 02:16:27.625151 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:16:27.625134812 +0000 UTC m=+152.157664681 I0411 02:16:27.643131 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-n6fmx" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:16:27.643104788 +0000 UTC m=+152.175634627 I0411 02:16:27.684291 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:16:27.684262972 +0000 UTC m=+152.216792831 I0411 02:16:27.704400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:16:27.704746 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:16:27.704725186 +0000 UTC m=+152.237255045 I0411 02:16:27.715661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:16:27.725381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:19:00.157856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-44.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:19:00.157894 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Issuing" to 2026-04-11 02:19:00.157886227 +0000 UTC m=+304.690416086 I0411 02:19:00.158129 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Ready" to 2026-04-11 02:19:00.158112254 +0000 UTC m=+304.690642123 I0411 02:19:00.175500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:19:00.175598 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-44.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:19:00.175644 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Issuing" to 2026-04-11 02:19:00.175635686 +0000 UTC m=+304.708165545 I0411 02:19:00.557096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-44.nip.io-tls-bc4d4" condition "Approved" to 2026-04-11 02:19:00.557077462 +0000 UTC m=+305.089607321 I0411 02:19:00.574739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-44.nip.io-tls-bc4d4" condition "Ready" to 2026-04-11 02:19:00.574730138 +0000 UTC m=+305.107259967 I0411 02:19:00.605168 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-44.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:19:00.605149764 +0000 UTC m=+305.137679633 I0411 02:19:00.626475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-44.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-44.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:10.048352 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-11 02:20:10.048316022 +0000 UTC m=+374.580845881 I0411 02:20:10.048917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:20:10.048947 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-11 02:20:10.048940999 +0000 UTC m=+374.581470898 E0411 02:20:10.059911 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 02:20:10.059959 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-11 02:20:10.059950812 +0000 UTC m=+374.592480651 E0411 02:20:10.060008 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0411 02:20:10.060435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:10.060514 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:20:10.060541 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-11 02:20:10.060534958 +0000 UTC m=+374.593064807 E0411 02:20:10.068495 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0411 02:20:10.068574 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 02:20:10.068611 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0411 02:20:10.068654 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0411 02:20:10.100900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gkzss" condition "Approved" to 2026-04-11 02:20:10.100888346 +0000 UTC m=+374.633418185 I0411 02:20:10.113850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gkzss" condition "Ready" to 2026-04-11 02:20:10.113839901 +0000 UTC m=+374.646369740 I0411 02:20:10.132382 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:20:10.13237221 +0000 UTC m=+374.664902049 I0411 02:20:10.150780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:15.069009 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:20:15.068997601 +0000 UTC m=+379.601527440 I0411 02:20:53.372221 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:20:53.372248 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-11 02:20:53.372241853 +0000 UTC m=+417.904771682 I0411 02:20:53.372440 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 02:20:53.372436829 +0000 UTC m=+417.904966648 I0411 02:20:53.376534 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:20:53.376576 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-11 02:20:53.376568482 +0000 UTC m=+417.909098311 I0411 02:20:53.376549 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-11 02:20:53.376541361 +0000 UTC m=+417.909071200 I0411 02:20:53.387149 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:20:53.387187 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 02:20:53.387180803 +0000 UTC m=+417.919710632 I0411 02:20:53.387876 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-11 02:20:53.387863312 +0000 UTC m=+417.920393141 I0411 02:20:53.403909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:53.404004 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-11 02:20:53.403995895 +0000 UTC m=+417.936525734 I0411 02:20:53.407572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:53.407626 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-11 02:20:53.407621555 +0000 UTC m=+417.940151394 I0411 02:20:53.417438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:53.417549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:20:53.417580 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 02:20:53.417572648 +0000 UTC m=+417.950102487 I0411 02:20:53.565415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2lv8v" condition "Approved" to 2026-04-11 02:20:53.565390176 +0000 UTC m=+418.097920015 I0411 02:20:53.587516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:53.598734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-2lv8v" condition "Ready" to 2026-04-11 02:20:53.598722511 +0000 UTC m=+418.131252350 I0411 02:20:53.618824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6g58b" condition "Approved" to 2026-04-11 02:20:53.618807103 +0000 UTC m=+418.151336962 I0411 02:20:53.637266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6g58b" condition "Ready" to 2026-04-11 02:20:53.637246449 +0000 UTC m=+418.169776308 I0411 02:20:53.643055 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:20:53.643086 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-11 02:20:53.643078749 +0000 UTC m=+418.175608578 I0411 02:20:53.659286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:53.664450 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:20:53.664437336 +0000 UTC m=+418.196967175 I0411 02:20:53.673817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:53.720122 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:20:53.720105574 +0000 UTC m=+418.252635443 I0411 02:20:53.769402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:53.769660 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:20:53.769653824 +0000 UTC m=+418.302183653 I0411 02:20:53.966206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:53.966555 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:20:53.96654867 +0000 UTC m=+418.499078529 I0411 02:20:54.172232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mhb5n" condition "Approved" to 2026-04-11 02:20:54.172217917 +0000 UTC m=+418.704747756 I0411 02:20:54.527035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mhb5n" condition "Ready" to 2026-04-11 02:20:54.527018778 +0000 UTC m=+419.059548617 I0411 02:20:54.818646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:54.926762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7szft" condition "Approved" to 2026-04-11 02:20:54.926733083 +0000 UTC m=+419.459262942 I0411 02:20:55.482793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7szft" condition "Ready" to 2026-04-11 02:20:55.48278085 +0000 UTC m=+420.015310689 I0411 02:20:55.728536 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-7szft" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-x2tsn" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0411 02:20:55.820461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:56.274047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tg5gx" condition "Approved" to 2026-04-11 02:20:56.274030525 +0000 UTC m=+420.806560364 I0411 02:20:56.319655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:56.366953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:56.781782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-tg5gx" condition "Ready" to 2026-04-11 02:20:56.781760296 +0000 UTC m=+421.314290155 I0411 02:20:57.020451 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:20:57.020432799 +0000 UTC m=+421.552962658 I0411 02:20:57.119282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:57.119943 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:20:57.119934771 +0000 UTC m=+421.652464610 I0411 02:20:57.368712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:20:57.418300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:21:03.555857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pvw49-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:21:03.555901 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pvw49-tls" condition "Issuing" to 2026-04-11 02:21:03.555890809 +0000 UTC m=+428.088420668 I0411 02:21:03.555986 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pvw49-tls" condition "Ready" to 2026-04-11 02:21:03.555969221 +0000 UTC m=+428.088499060 I0411 02:21:03.572657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pvw49-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pvw49-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:21:03.572907 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pvw49-tls" condition "Ready" to 2026-04-11 02:21:03.572899465 +0000 UTC m=+428.105429304 I0411 02:21:03.684501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pvw49-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pvw49-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:21:03.720768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pvw49-ftd8s" condition "Approved" to 2026-04-11 02:21:03.720753935 +0000 UTC m=+428.253283774 I0411 02:21:03.746768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pvw49-ftd8s" condition "Ready" to 2026-04-11 02:21:03.746756399 +0000 UTC m=+428.279286238 I0411 02:21:03.777272 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pvw49-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:21:03.777262067 +0000 UTC m=+428.309791906 I0411 02:21:03.806223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pvw49-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pvw49-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:21:03.899437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pvw49-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pvw49-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:21:31.510394 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:21:31.510433 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-11 02:21:31.510424886 +0000 UTC m=+456.042954735 I0411 02:21:31.510475 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-11 02:21:31.510454387 +0000 UTC m=+456.042984256 I0411 02:21:31.524292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:21:31.524357 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:21:31.524371 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-11 02:21:31.524367189 +0000 UTC m=+456.056897018 I0411 02:21:31.973281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gs546" condition "Approved" to 2026-04-11 02:21:31.973265945 +0000 UTC m=+456.505795784 I0411 02:21:31.993846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-gs546" condition "Ready" to 2026-04-11 02:21:31.99383386 +0000 UTC m=+456.526363699 I0411 02:21:32.030818 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:21:32.030801185 +0000 UTC m=+456.563331044 I0411 02:21:32.050352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:24:55.837902 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-11 02:24:55.837823841 +0000 UTC m=+660.370353700 I0411 02:24:55.837968 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:24:55.838056 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-11 02:24:55.838047918 +0000 UTC m=+660.370577767 I0411 02:24:55.856959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:24:55.857363 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-11 02:24:55.857350595 +0000 UTC m=+660.389880465 I0411 02:24:56.005222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:24:56.037561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b8zh6" condition "Approved" to 2026-04-11 02:24:56.037546679 +0000 UTC m=+660.570076518 I0411 02:24:56.056079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b8zh6" condition "Ready" to 2026-04-11 02:24:56.056066655 +0000 UTC m=+660.588596494 I0411 02:24:56.080946 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:24:56.080935318 +0000 UTC m=+660.613465157 I0411 02:24:56.109625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:24:56.110077 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:24:56.11006991 +0000 UTC m=+660.642599749 I0411 02:24:56.110541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:24:56.131962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:24:56.132406 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:24:56.132396562 +0000 UTC m=+660.664926401 I0411 02:27:26.984289 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-11 02:27:26.984257034 +0000 UTC m=+811.516786893 I0411 02:27:26.984705 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:27:26.984738 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-11 02:27:26.984729977 +0000 UTC m=+811.517259816 I0411 02:27:27.001348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:27:27.001530 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-11 02:27:27.001520855 +0000 UTC m=+811.534050744 I0411 02:27:27.097860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:27:27.129500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-t56rq" condition "Approved" to 2026-04-11 02:27:27.129475492 +0000 UTC m=+811.662005351 I0411 02:27:27.148665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-t56rq" condition "Ready" to 2026-04-11 02:27:27.148649896 +0000 UTC m=+811.681179735 I0411 02:27:27.175089 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:27:27.175071303 +0000 UTC m=+811.707601142 I0411 02:27:27.198733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:28:35.041051 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-11 02:28:35.041029891 +0000 UTC m=+879.573559760 I0411 02:28:35.041123 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:28:35.041219 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-11 02:28:35.041210246 +0000 UTC m=+879.573740085 I0411 02:28:35.057835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:28:35.057946 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-11 02:28:35.057933976 +0000 UTC m=+879.590463845 I0411 02:28:35.202340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:28:35.232307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5tjlj" condition "Approved" to 2026-04-11 02:28:35.232293961 +0000 UTC m=+879.764823780 I0411 02:28:35.255643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5tjlj" condition "Ready" to 2026-04-11 02:28:35.255631084 +0000 UTC m=+879.788160913 I0411 02:28:35.287800 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:28:35.287786468 +0000 UTC m=+879.820316317 I0411 02:28:35.314749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:28:35.315153 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:28:35.31514384 +0000 UTC m=+879.847673679 I0411 02:28:35.340804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:28:35.341413 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:28:35.341404162 +0000 UTC m=+879.873934001 I0411 02:31:40.675659 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-11 02:31:40.67503132 +0000 UTC m=+1065.207561179 I0411 02:31:40.675677 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:31:40.675852 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-11 02:31:40.675833733 +0000 UTC m=+1065.208363592 I0411 02:31:40.693439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:31:40.693523 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0411 02:31:40.693543 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-11 02:31:40.69353558 +0000 UTC m=+1065.226065419 I0411 02:31:40.926438 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-77mfp" condition "Approved" to 2026-04-11 02:31:40.926416064 +0000 UTC m=+1065.458945963 I0411 02:31:40.948093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-77mfp" condition "Ready" to 2026-04-11 02:31:40.94807935 +0000 UTC m=+1065.480609189 I0411 02:31:40.978092 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:31:40.978069045 +0000 UTC m=+1065.510598904 I0411 02:31:41.003775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:31:41.004151 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:31:41.004145742 +0000 UTC m=+1065.536675571 I0411 02:31:41.029003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0411 02:31:41.029431 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-11 02:31:41.029420717 +0000 UTC m=+1065.561950556