I0327 01:58:30.284365 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0327 01:58:30.284633 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0327 01:58:30.284783 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0327 01:58:30.293552 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0327 01:58:30.294209 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0327 01:58:30.294320 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0327 01:58:30.294420 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0327 01:58:30.297448 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0327 01:58:30.312928 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0327 01:58:30.313271 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0327 01:58:30.318123 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0327 01:58:30.324727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0327 01:58:30.330073 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0327 01:58:30.332942 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0327 01:58:30.335424 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0327 01:58:30.335452 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0327 01:58:30.335508 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0327 01:58:30.338254 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0327 01:58:30.340645 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0327 01:58:30.342885 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0327 01:58:30.348682 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0327 01:58:30.352795 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0327 01:58:30.352834 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0327 01:58:30.352852 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0327 01:58:30.352924 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0327 01:58:30.356173 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0327 01:58:30.358192 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0327 01:58:30.360764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0327 01:58:30.362855 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0327 01:58:30.364723 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0327 01:58:30.366557 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0327 01:58:30.368384 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0327 01:58:30.376100 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0327 01:58:30.379035 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:30.379069 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:30.379959 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:30.394971 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:30.413934 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:30.433106 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:30.447889 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:30.465050 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:30.465948 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:30.488845 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:43.890221 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-27 01:58:43.890177344 +0000 UTC m=+13.642033858 I0327 01:58:44.641085 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 01:58:44.641105 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-27 01:58:44.641087127 +0000 UTC m=+14.392943631 I0327 01:58:44.641180 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-27 01:58:44.641167558 +0000 UTC m=+14.393024092 E0327 01:58:44.656028 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0327 01:58:44.656119 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-27 01:58:44.656108172 +0000 UTC m=+14.407964656 E0327 01:58:44.656145 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0327 01:58:44.660125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:58:44.660207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 01:58:44.660236 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-27 01:58:44.660228563 +0000 UTC m=+14.412085077 E0327 01:58:44.670878 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0327 01:58:44.671239 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 01:58:44.671276 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 01:58:44.671315 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0327 01:58:44.698724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2fsp9" condition "Approved" to 2026-03-27 01:58:44.698705654 +0000 UTC m=+14.450562158 I0327 01:58:44.711757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2fsp9" condition "Ready" to 2026-03-27 01:58:44.711736975 +0000 UTC m=+14.463593479 I0327 01:58:44.736464 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:58:44.736439078 +0000 UTC m=+14.488295582 I0327 01:58:44.757600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:58:44.757970 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:58:44.757961638 +0000 UTC m=+14.509818122 I0327 01:58:44.760990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:58:44.774281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:58:49.672105 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:58:49.672089359 +0000 UTC m=+19.423945863 I0327 01:59:12.766248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 01:59:12.766327 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-27 01:59:12.766317885 +0000 UTC m=+42.518174359 I0327 01:59:12.766748 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-27 01:59:12.766717765 +0000 UTC m=+42.518574269 I0327 01:59:12.778358 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-27 01:59:12.778339405 +0000 UTC m=+42.530195889 I0327 01:59:12.784940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:59:12.785006 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-27 01:59:12.785000033 +0000 UTC m=+42.536856517 I0327 01:59:12.934556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:59:12.978502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rlxrl" condition "Approved" to 2026-03-27 01:59:12.978477728 +0000 UTC m=+42.730334282 I0327 01:59:13.011167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-rlxrl" condition "Ready" to 2026-03-27 01:59:13.011146058 +0000 UTC m=+42.763002562 I0327 01:59:13.045084 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:59:13.045018135 +0000 UTC m=+42.796874659 I0327 01:59:13.072495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:59:13.073254 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:59:13.073241506 +0000 UTC m=+42.825098010 I0327 01:59:13.093119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:59:13.093532 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:59:13.093520929 +0000 UTC m=+42.845377443 I0327 02:01:00.093451 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-27 02:01:00.093419824 +0000 UTC m=+149.845276288 I0327 02:01:00.093491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:01:00.093554 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-27 02:01:00.093539426 +0000 UTC m=+149.845395940 E0327 02:01:00.111272 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0327 02:01:00.111340 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-27 02:01:00.111330136 +0000 UTC m=+149.863186650 I0327 02:01:00.111408 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0327 02:01:00.113600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:00.113719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:01:00.113751 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-27 02:01:00.113741189 +0000 UTC m=+149.865597673 E0327 02:01:00.123569 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0327 02:01:00.123884 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0327 02:01:00.123963 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0327 02:01:00.124452 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0327 02:01:00.124768 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:01:00.124801 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-27 02:01:00.124790161 +0000 UTC m=+149.876646635 I0327 02:01:00.124853 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-27 02:01:00.124845812 +0000 UTC m=+149.876702296 I0327 02:01:00.146295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:00.146420 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:01:00.146473 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-27 02:01:00.146461116 +0000 UTC m=+149.898317620 I0327 02:01:00.397646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:00.399495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:00.402508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-9sl9l" condition "Approved" to 2026-03-27 02:01:00.402490165 +0000 UTC m=+150.154346679 I0327 02:01:00.409705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-79lmv" condition "Approved" to 2026-03-27 02:01:00.409684493 +0000 UTC m=+150.161540997 I0327 02:01:00.436164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-79lmv" condition "Ready" to 2026-03-27 02:01:00.436152113 +0000 UTC m=+150.188008617 I0327 02:01:00.442034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-9sl9l" condition "Ready" to 2026-03-27 02:01:00.442027651 +0000 UTC m=+150.193884135 I0327 02:01:00.466765 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:00.466748063 +0000 UTC m=+150.218604577 I0327 02:01:00.487955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:00.488271 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:00.488265595 +0000 UTC m=+150.240122079 I0327 02:01:00.496681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:00.507436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:00.514496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:00.514910 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:00.514899398 +0000 UTC m=+150.266755882 I0327 02:01:05.124261 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:05.124245324 +0000 UTC m=+154.876101838 I0327 02:01:05.143054 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-79lmv" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:05.143032315 +0000 UTC m=+154.894888829 I0327 02:01:05.174200 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:05.174180527 +0000 UTC m=+154.926037041 I0327 02:01:05.195365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:05.195939 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:05.195928324 +0000 UTC m=+154.947784838 I0327 02:01:05.203329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:05.211805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:05.212139 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:05.212126919 +0000 UTC m=+154.963983403 I0327 02:03:48.449557 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-30.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:03:48.449602 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-30.nip.io-tls" condition "Issuing" to 2026-03-27 02:03:48.449596937 +0000 UTC m=+318.201453451 I0327 02:03:48.449598 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-30.nip.io-tls" condition "Ready" to 2026-03-27 02:03:48.449584477 +0000 UTC m=+318.201440991 I0327 02:03:48.468446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:03:48.468541 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-30.nip.io-tls" condition "Ready" to 2026-03-27 02:03:48.468531829 +0000 UTC m=+318.220388313 I0327 02:03:48.560107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:03:48.591404 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-30.nip.io-tls-bsfv4" condition "Approved" to 2026-03-27 02:03:48.591342257 +0000 UTC m=+318.343198771 I0327 02:03:48.610936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-30.nip.io-tls-bsfv4" condition "Ready" to 2026-03-27 02:03:48.610865002 +0000 UTC m=+318.362721476 I0327 02:03:48.641130 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-30.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:03:48.641113742 +0000 UTC m=+318.392970226 I0327 02:03:48.669706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:03:48.670190 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-30.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:03:48.670176855 +0000 UTC m=+318.422033349 I0327 02:03:48.687108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:03:48.692566 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:03:48.692964 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-30.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:03:48.692942931 +0000 UTC m=+318.444799415 I0327 02:03:48.695623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-30.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-30.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:00.689987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:00.690037 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-27 02:05:00.690024727 +0000 UTC m=+390.441881241 I0327 02:05:00.690181 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-27 02:05:00.69015823 +0000 UTC m=+390.442014734 I0327 02:05:00.746953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:00.747065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:00.747106 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-27 02:05:00.747099478 +0000 UTC m=+390.498955962 E0327 02:05:00.747791 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0327 02:05:00.747860 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-27 02:05:00.747852525 +0000 UTC m=+390.499708999 E0327 02:05:00.747889 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 02:05:00.763616 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0327 02:05:00.763749 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 02:05:00.763784 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 02:05:00.763822 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0327 02:05:00.788368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-btgln" condition "Approved" to 2026-03-27 02:05:00.788355513 +0000 UTC m=+390.540211997 I0327 02:05:00.801546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-btgln" condition "Ready" to 2026-03-27 02:05:00.801539632 +0000 UTC m=+390.553396116 I0327 02:05:00.824463 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:00.824455515 +0000 UTC m=+390.576311999 I0327 02:05:00.845586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:00.845981 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:00.845970827 +0000 UTC m=+390.597827301 I0327 02:05:00.854480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:00.860362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:05.765068 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:05.765051808 +0000 UTC m=+395.516908312 I0327 02:05:47.459835 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:47.460043 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-27 02:05:47.459969007 +0000 UTC m=+437.211825491 I0327 02:05:47.460712 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-27 02:05:47.460705504 +0000 UTC m=+437.212561988 I0327 02:05:47.482754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:47.482790 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-27 02:05:47.482781899 +0000 UTC m=+437.234638363 I0327 02:05:47.482828 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-27 02:05:47.48279749 +0000 UTC m=+437.234653974 I0327 02:05:47.483667 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-27 02:05:47.483654568 +0000 UTC m=+437.235511042 I0327 02:05:47.483891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:47.483911 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-27 02:05:47.483908694 +0000 UTC m=+437.235765158 I0327 02:05:47.506138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:47.506386 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-27 02:05:47.506371178 +0000 UTC m=+437.258227692 I0327 02:05:47.512830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:47.512902 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-27 02:05:47.512893431 +0000 UTC m=+437.264749905 I0327 02:05:47.514073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:47.514106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:47.514117 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-27 02:05:47.514114708 +0000 UTC m=+437.265971182 I0327 02:05:47.705570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:47.744161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jtdln" condition "Approved" to 2026-03-27 02:05:47.744146706 +0000 UTC m=+437.496003190 I0327 02:05:47.752969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:47.802876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-jtdln" condition "Ready" to 2026-03-27 02:05:47.802861988 +0000 UTC m=+437.554718462 I0327 02:05:47.843047 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mlpck" condition "Approved" to 2026-03-27 02:05:47.843035441 +0000 UTC m=+437.594891925 I0327 02:05:47.877435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mlpck" condition "Ready" to 2026-03-27 02:05:47.877420357 +0000 UTC m=+437.629276831 I0327 02:05:47.878620 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:47.878586563 +0000 UTC m=+437.630443047 I0327 02:05:47.888156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:47.889636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:47.889963 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:47.889957073 +0000 UTC m=+437.641813537 I0327 02:05:47.895938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pn598" condition "Approved" to 2026-03-27 02:05:47.895919044 +0000 UTC m=+437.647775528 I0327 02:05:47.958953 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:47.9589295 +0000 UTC m=+437.710786004 I0327 02:05:48.320559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pn598" condition "Ready" to 2026-03-27 02:05:48.320549902 +0000 UTC m=+438.072406376 I0327 02:05:48.355593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:48.455873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:48.456653 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:48.456642224 +0000 UTC m=+438.208498738 I0327 02:05:48.811281 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:48.811263053 +0000 UTC m=+438.563119537 I0327 02:05:48.865444 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:48.865402493 +0000 UTC m=+438.617258987 I0327 02:05:48.903253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:48.953901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:49.052905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:49.053397 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:49.053384667 +0000 UTC m=+438.805241181 I0327 02:05:49.304534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:56.375932 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tl267-tls" condition "Ready" to 2026-03-27 02:05:56.37588681 +0000 UTC m=+446.127743294 I0327 02:05:56.376026 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tl267-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:56.376097 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tl267-tls" condition "Issuing" to 2026-03-27 02:05:56.376077144 +0000 UTC m=+446.127933648 I0327 02:05:56.398496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tl267-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tl267-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:56.398575 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tl267-tls" condition "Ready" to 2026-03-27 02:05:56.398566869 +0000 UTC m=+446.150423353 I0327 02:05:56.606367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tl267-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tl267-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:56.643433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tl267-fbqmw" condition "Approved" to 2026-03-27 02:05:56.643416184 +0000 UTC m=+446.395272668 I0327 02:05:56.668751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tl267-fbqmw" condition "Ready" to 2026-03-27 02:05:56.66873714 +0000 UTC m=+446.420593624 I0327 02:05:56.697061 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tl267-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:56.697036332 +0000 UTC m=+446.448892836 I0327 02:05:56.718870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tl267-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tl267-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:56.719435 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tl267-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:56.719421055 +0000 UTC m=+446.471277539 I0327 02:05:56.722484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tl267-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tl267-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:56.736113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tl267-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tl267-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:56.738488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tl267-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tl267-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:56.738885 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tl267-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:56.738874473 +0000 UTC m=+446.490730957 I0327 02:06:24.208124 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-27 02:06:24.208107223 +0000 UTC m=+473.959963697 I0327 02:06:24.208481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:06:24.208544 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-27 02:06:24.208531212 +0000 UTC m=+473.960387726 I0327 02:06:24.226401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:06:24.226535 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-27 02:06:24.226523815 +0000 UTC m=+473.978380329 I0327 02:06:24.602447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:06:24.636587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cdsfx" condition "Approved" to 2026-03-27 02:06:24.636565556 +0000 UTC m=+474.388422060 I0327 02:06:24.657146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-cdsfx" condition "Ready" to 2026-03-27 02:06:24.657128825 +0000 UTC m=+474.408985309 I0327 02:06:24.688953 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:06:24.688915928 +0000 UTC m=+474.440772412 I0327 02:06:24.708899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:06:24.755175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:09:50.176511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:09:50.176627 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-27 02:09:50.176606795 +0000 UTC m=+679.928463279 I0327 02:09:50.176516 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-27 02:09:50.176320518 +0000 UTC m=+679.928177032 I0327 02:09:50.198409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:09:50.198534 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-27 02:09:50.198518397 +0000 UTC m=+679.950374911 I0327 02:09:50.347769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:09:50.400244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qdf8j" condition "Approved" to 2026-03-27 02:09:50.400228131 +0000 UTC m=+680.152084615 I0327 02:09:50.420021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qdf8j" condition "Ready" to 2026-03-27 02:09:50.420009778 +0000 UTC m=+680.171866252 I0327 02:09:50.449670 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:09:50.449650168 +0000 UTC m=+680.201506652 I0327 02:09:50.476065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:24.612909 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-27 02:12:24.612852985 +0000 UTC m=+834.364709469 I0327 02:12:24.612922 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:12:24.613094 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-27 02:12:24.61307879 +0000 UTC m=+834.364935294 I0327 02:12:24.631819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:24.631915 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:12:24.631937 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-27 02:12:24.631928143 +0000 UTC m=+834.383784627 I0327 02:12:24.836550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:24.848675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8kwxw" condition "Approved" to 2026-03-27 02:12:24.848656186 +0000 UTC m=+834.600512670 I0327 02:12:24.871674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8kwxw" condition "Ready" to 2026-03-27 02:12:24.87165747 +0000 UTC m=+834.623513954 I0327 02:12:24.902594 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:12:24.902582876 +0000 UTC m=+834.654439360 I0327 02:12:24.929231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:24.931103 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:12:24.93109669 +0000 UTC m=+834.682953154 I0327 02:12:24.940650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:24.946536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:24.946829 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:12:24.946821855 +0000 UTC m=+834.698678339 I0327 02:13:49.309690 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-27 02:13:49.309628489 +0000 UTC m=+919.061484973 I0327 02:13:49.309901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:13:49.310038 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-27 02:13:49.309992317 +0000 UTC m=+919.061848861 I0327 02:13:49.334039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:13:49.334219 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-27 02:13:49.334208438 +0000 UTC m=+919.086064912 I0327 02:13:49.449917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:13:49.478931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-h88pn" condition "Approved" to 2026-03-27 02:13:49.478918034 +0000 UTC m=+919.230774518 I0327 02:13:49.500944 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-h88pn" condition "Ready" to 2026-03-27 02:13:49.500932868 +0000 UTC m=+919.252789342 I0327 02:13:49.540284 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:13:49.540265721 +0000 UTC m=+919.292122235 I0327 02:13:49.571017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:17:01.539125 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-27 02:17:01.539108599 +0000 UTC m=+1111.290965083 I0327 02:17:01.539207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:17:01.539315 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-27 02:17:01.539298843 +0000 UTC m=+1111.291155347 I0327 02:17:01.559738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:17:01.559855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:17:01.559883 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-27 02:17:01.559875716 +0000 UTC m=+1111.311732190 I0327 02:17:02.033732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pgxfd" condition "Approved" to 2026-03-27 02:17:02.033715301 +0000 UTC m=+1111.785571785 I0327 02:17:02.055256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pgxfd" condition "Ready" to 2026-03-27 02:17:02.055244784 +0000 UTC m=+1111.807101268 I0327 02:17:02.092975 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:17:02.092959284 +0000 UTC m=+1111.844815788 I0327 02:17:02.115926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:17:02.116484 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:17:02.116471462 +0000 UTC m=+1111.868327976 I0327 02:17:02.127246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:17:02.139021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"