I0224 06:25:17.530762 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0224 06:25:17.530922 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0224 06:25:17.531075 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0224 06:25:17.536077 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0224 06:25:17.536686 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0224 06:25:17.536700 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0224 06:25:17.536809 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0224 06:25:17.539270 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0224 06:25:17.554540 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0224 06:25:17.554767 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0224 06:25:17.554806 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0224 06:25:17.554820 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0224 06:25:17.559703 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0224 06:25:17.564892 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0224 06:25:17.566645 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0224 06:25:17.568414 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0224 06:25:17.570171 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0224 06:25:17.571896 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0224 06:25:17.573786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0224 06:25:17.576459 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0224 06:25:17.581063 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0224 06:25:17.584308 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0224 06:25:17.586387 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0224 06:25:17.588758 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0224 06:25:17.588913 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0224 06:25:17.590741 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0224 06:25:17.592524 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0224 06:25:17.594148 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0224 06:25:17.594169 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0224 06:25:17.594193 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0224 06:25:17.596054 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0224 06:25:17.600823 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0224 06:25:17.603757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0224 06:25:17.607204 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:25:17.607272 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:25:17.607772 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:25:17.607912 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:25:17.608074 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:25:17.607787 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:25:17.608464 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:25:17.608580 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:25:17.609288 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:25:17.637307 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0224 06:25:30.963374 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-02-24 06:25:30.963356128 +0000 UTC m=+13.464628615 I0224 06:25:31.665539 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-02-24 06:25:31.665522374 +0000 UTC m=+14.166794851 I0224 06:25:31.665659 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:25:31.665708 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-02-24 06:25:31.665696328 +0000 UTC m=+14.166968815 I0224 06:25:31.682204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0224 06:25:31.682237 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0224 06:25:31.682288 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:25:31.682304 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-02-24 06:25:31.682296095 +0000 UTC m=+14.183568552 E0224 06:25:31.682340 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0224 06:25:31.682315 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-02-24 06:25:31.682307635 +0000 UTC m=+14.183580102 E0224 06:25:31.694014 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0224 06:25:31.694199 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0224 06:25:31.694284 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0224 06:25:31.694360 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0224 06:25:31.726082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jcsxl" condition "Approved" to 2026-02-24 06:25:31.726068571 +0000 UTC m=+14.227341058 I0224 06:25:31.727808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:25:31.741357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jcsxl" condition "Ready" to 2026-02-24 06:25:31.741347415 +0000 UTC m=+14.242619872 I0224 06:25:31.768085 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:25:31.768057173 +0000 UTC m=+14.269329650 I0224 06:25:31.785294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:25:31.785753 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:25:31.785743045 +0000 UTC m=+14.287015522 I0224 06:25:31.801962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:25:36.694771 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:25:36.694760627 +0000 UTC m=+19.196033074 I0224 06:25:58.170343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:25:58.170389 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-02-24 06:25:58.170377971 +0000 UTC m=+40.671650488 I0224 06:25:58.170655 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-02-24 06:25:58.170636307 +0000 UTC m=+40.671908764 I0224 06:25:58.183090 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-02-24 06:25:58.183077403 +0000 UTC m=+40.684349860 I0224 06:25:58.196687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:25:58.196783 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-02-24 06:25:58.196777541 +0000 UTC m=+40.698049988 I0224 06:25:58.386907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:25:58.418480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6t6t4" condition "Approved" to 2026-02-24 06:25:58.418468744 +0000 UTC m=+40.919741201 I0224 06:25:58.453503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6t6t4" condition "Ready" to 2026-02-24 06:25:58.453489011 +0000 UTC m=+40.954761468 I0224 06:25:58.489176 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:25:58.489159992 +0000 UTC m=+40.990432479 I0224 06:25:58.512358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:27:31.092144 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:27:31.092406 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-02-24 06:27:31.092392501 +0000 UTC m=+133.593664978 I0224 06:27:31.092129 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-02-24 06:27:31.092036492 +0000 UTC m=+133.593308979 E0224 06:27:31.107748 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0224 06:27:31.107864 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-02-24 06:27:31.107854029 +0000 UTC m=+133.609126486 I0224 06:27:31.107933 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0224 06:27:31.114110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:27:31.114213 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-02-24 06:27:31.114204759 +0000 UTC m=+133.615477216 E0224 06:27:31.120949 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0224 06:27:31.121129 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0224 06:27:31.121186 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0224 06:27:31.121242 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0224 06:27:31.123367 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-02-24 06:27:31.123346488 +0000 UTC m=+133.624618985 I0224 06:27:31.123413 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:27:31.123437 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-02-24 06:27:31.12343125 +0000 UTC m=+133.624703707 I0224 06:27:31.136564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:27:31.136651 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:27:31.136677 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-02-24 06:27:31.136665183 +0000 UTC m=+133.637937640 I0224 06:27:31.246811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:27:31.274071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-x7pgh" condition "Approved" to 2026-02-24 06:27:31.274054382 +0000 UTC m=+133.775326839 I0224 06:27:31.302304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-x7pgh" condition "Ready" to 2026-02-24 06:27:31.302282641 +0000 UTC m=+133.803555128 I0224 06:27:31.335632 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:27:31.335610198 +0000 UTC m=+133.836882645 I0224 06:27:31.357078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:27:31.357554 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:27:31.357545938 +0000 UTC m=+133.858818385 I0224 06:27:31.365458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:27:31.377963 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:27:31.422309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:27:31.431499 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-s52pc" condition "Approved" to 2026-02-24 06:27:31.431479195 +0000 UTC m=+133.932751682 I0224 06:27:31.448129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-s52pc" condition "Ready" to 2026-02-24 06:27:31.448112663 +0000 UTC m=+133.949385110 I0224 06:27:36.122351 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:27:36.122336448 +0000 UTC m=+138.623608925 I0224 06:27:36.138169 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-s52pc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:27:36.138156265 +0000 UTC m=+138.639428722 I0224 06:27:36.165993 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:27:36.165977154 +0000 UTC m=+138.667249631 I0224 06:27:36.183775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:27:36.184410 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:27:36.184396706 +0000 UTC m=+138.685669193 I0224 06:27:36.189014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:27:36.198573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:27:36.198929 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:27:36.198917921 +0000 UTC m=+138.700190408 I0224 06:27:36.200366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:30:08.530391 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-204.nip.io-tls" condition "Ready" to 2026-02-24 06:30:08.530370204 +0000 UTC m=+291.031642691 I0224 06:30:08.530726 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-204.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:30:08.530765 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-204.nip.io-tls" condition "Issuing" to 2026-02-24 06:30:08.530756473 +0000 UTC m=+291.032028920 I0224 06:30:08.544483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:30:08.544634 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-204.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:30:08.544662 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-204.nip.io-tls" condition "Issuing" to 2026-02-24 06:30:08.544655331 +0000 UTC m=+291.045927808 I0224 06:30:08.686862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:30:08.697266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-204.nip.io-tls-rx7c5" condition "Approved" to 2026-02-24 06:30:08.697252142 +0000 UTC m=+291.198524629 I0224 06:30:08.714219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-204.nip.io-tls-rx7c5" condition "Ready" to 2026-02-24 06:30:08.714196187 +0000 UTC m=+291.215468644 I0224 06:30:08.748012 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-204.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:30:08.747996643 +0000 UTC m=+291.249269120 I0224 06:30:08.768172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:30:08.823077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-204.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-204.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:31:19.199383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:31:19.199430 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-02-24 06:31:19.199416827 +0000 UTC m=+361.700689304 I0224 06:31:19.199466 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-02-24 06:31:19.199435097 +0000 UTC m=+361.700707584 I0224 06:31:19.215025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:31:19.215137 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-02-24 06:31:19.21512248 +0000 UTC m=+361.716394977 E0224 06:31:19.215775 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0224 06:31:19.215830 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-02-24 06:31:19.215819947 +0000 UTC m=+361.717092434 E0224 06:31:19.215965 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0224 06:31:19.229003 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0224 06:31:19.229123 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0224 06:31:19.229169 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0224 06:31:19.229221 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0224 06:31:19.232399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:31:19.252529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hzk78" condition "Approved" to 2026-02-24 06:31:19.252508685 +0000 UTC m=+361.753781202 I0224 06:31:19.269082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hzk78" condition "Ready" to 2026-02-24 06:31:19.269074289 +0000 UTC m=+361.770346746 I0224 06:31:19.295880 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:31:19.29586282 +0000 UTC m=+361.797135277 I0224 06:31:19.314812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:31:19.360050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:31:24.230277 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:31:24.230257827 +0000 UTC m=+366.731530334 I0224 06:32:02.123030 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-02-24 06:32:02.123019112 +0000 UTC m=+404.624291559 I0224 06:32:02.123178 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:32:02.123219 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-02-24 06:32:02.123211457 +0000 UTC m=+404.624483904 I0224 06:32:02.129758 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-02-24 06:32:02.129721199 +0000 UTC m=+404.630993656 I0224 06:32:02.130262 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:32:02.130286 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-02-24 06:32:02.130280973 +0000 UTC m=+404.631553430 I0224 06:32:02.137779 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-02-24 06:32:02.13776797 +0000 UTC m=+404.639040407 I0224 06:32:02.138718 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:32:02.138937 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-02-24 06:32:02.138759574 +0000 UTC m=+404.640032031 I0224 06:32:02.153255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:02.153407 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-02-24 06:32:02.153398311 +0000 UTC m=+404.654670758 I0224 06:32:02.198443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:02.198523 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:32:02.198584 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-02-24 06:32:02.19857426 +0000 UTC m=+404.699846717 I0224 06:32:02.198769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:02.198832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:32:02.198906 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-02-24 06:32:02.198898798 +0000 UTC m=+404.700171255 I0224 06:32:02.353592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:02.388016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2ktbl" condition "Approved" to 2026-02-24 06:32:02.387996703 +0000 UTC m=+404.889269190 I0224 06:32:02.419840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2ktbl" condition "Ready" to 2026-02-24 06:32:02.419820989 +0000 UTC m=+404.921093466 I0224 06:32:02.475090 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:32:02.475077859 +0000 UTC m=+404.976350316 I0224 06:32:02.490474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-srmrv" condition "Approved" to 2026-02-24 06:32:02.490462384 +0000 UTC m=+404.991734841 I0224 06:32:02.495378 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:32:02.495364437 +0000 UTC m=+404.996636874 I0224 06:32:02.499202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:02.502817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:02.507975 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-srmrv" condition "Ready" to 2026-02-24 06:32:02.507956811 +0000 UTC m=+405.009229298 I0224 06:32:02.576549 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:32:02.576535625 +0000 UTC m=+405.077808072 I0224 06:32:02.600800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0224 06:32:02.860279 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-2cxs7\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0224 06:32:02.915876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-km9wm" condition "Approved" to 2026-02-24 06:32:02.915855985 +0000 UTC m=+405.417128462 I0224 06:32:03.076304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-km9wm" condition "Ready" to 2026-02-24 06:32:03.076286214 +0000 UTC m=+405.577558671 I0224 06:32:03.606357 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:32:03.60634065 +0000 UTC m=+406.107613097 I0224 06:32:03.659202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:03.659627 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:32:03.659618562 +0000 UTC m=+406.160891019 I0224 06:32:03.864655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:37.960827 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9lvsv-tls" condition "Ready" to 2026-02-24 06:32:37.960806097 +0000 UTC m=+440.462078584 I0224 06:32:37.961077 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9lvsv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:32:37.961181 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9lvsv-tls" condition "Issuing" to 2026-02-24 06:32:37.961168656 +0000 UTC m=+440.462441173 I0224 06:32:37.975809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9lvsv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9lvsv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:37.975904 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9lvsv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:32:37.975958 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9lvsv-tls" condition "Issuing" to 2026-02-24 06:32:37.975950325 +0000 UTC m=+440.477222812 I0224 06:32:38.095847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9lvsv-sw4m7" condition "Approved" to 2026-02-24 06:32:38.095835371 +0000 UTC m=+440.597107828 I0224 06:32:38.112533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9lvsv-sw4m7" condition "Ready" to 2026-02-24 06:32:38.112518728 +0000 UTC m=+440.613791185 I0224 06:32:38.141951 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9lvsv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:32:38.141933672 +0000 UTC m=+440.643206149 I0224 06:32:38.166477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9lvsv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9lvsv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:43.765870 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-02-24 06:32:43.765854557 +0000 UTC m=+446.267127024 I0224 06:32:43.766596 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:32:43.766635 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-02-24 06:32:43.766626476 +0000 UTC m=+446.267898923 I0224 06:32:43.780709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:43.780789 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:32:43.780814 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-02-24 06:32:43.780805721 +0000 UTC m=+446.282078188 I0224 06:32:44.011366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:44.017608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8v7bq" condition "Approved" to 2026-02-24 06:32:44.017589349 +0000 UTC m=+446.518861806 I0224 06:32:44.034755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8v7bq" condition "Ready" to 2026-02-24 06:32:44.034741397 +0000 UTC m=+446.536013854 I0224 06:32:44.065971 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:32:44.065953297 +0000 UTC m=+446.567225744 I0224 06:32:44.095644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:44.095972 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:32:44.095960597 +0000 UTC m=+446.597233054 I0224 06:32:44.118378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:32:44.118618 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:32:44.118611163 +0000 UTC m=+446.619883620 I0224 06:32:44.123729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:36:02.467547 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-02-24 06:36:02.467536144 +0000 UTC m=+644.968808601 I0224 06:36:02.467632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:36:02.467691 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-02-24 06:36:02.467676478 +0000 UTC m=+644.968948965 I0224 06:36:02.485021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:36:02.485117 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-02-24 06:36:02.485109515 +0000 UTC m=+644.986381992 I0224 06:36:02.653516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:36:02.706379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ccqmx" condition "Approved" to 2026-02-24 06:36:02.706360329 +0000 UTC m=+645.207632796 I0224 06:36:02.731751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-ccqmx" condition "Ready" to 2026-02-24 06:36:02.731736006 +0000 UTC m=+645.233008473 I0224 06:36:02.771003 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:36:02.77097607 +0000 UTC m=+645.272248517 I0224 06:36:02.795054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:38:31.799044 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-02-24 06:38:31.799028099 +0000 UTC m=+794.300300546 I0224 06:38:31.799427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:38:31.799540 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-02-24 06:38:31.799528781 +0000 UTC m=+794.300801258 I0224 06:38:31.818531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:38:31.818645 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-02-24 06:38:31.81863431 +0000 UTC m=+794.319906797 I0224 06:38:31.994395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:38:32.033586 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qdb7t" condition "Approved" to 2026-02-24 06:38:32.033566508 +0000 UTC m=+794.534838995 I0224 06:38:32.054516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qdb7t" condition "Ready" to 2026-02-24 06:38:32.054504533 +0000 UTC m=+794.555777000 I0224 06:38:32.085416 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:38:32.085401597 +0000 UTC m=+794.586674054 I0224 06:38:32.124896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:40:45.444451 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:40:45.444524 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-02-24 06:40:45.444515534 +0000 UTC m=+927.945788021 I0224 06:40:45.444659 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-02-24 06:40:45.444639037 +0000 UTC m=+927.945911514 I0224 06:40:45.462254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:40:45.462321 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0224 06:40:45.462339 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-02-24 06:40:45.462332331 +0000 UTC m=+927.963604788 I0224 06:40:45.673028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fdr2j" condition "Approved" to 2026-02-24 06:40:45.673015396 +0000 UTC m=+928.174287853 I0224 06:40:45.703571 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fdr2j" condition "Ready" to 2026-02-24 06:40:45.70355861 +0000 UTC m=+928.204831067 I0224 06:40:45.732311 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-24 06:40:45.732254189 +0000 UTC m=+928.233526646 I0224 06:40:45.797777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0224 06:40:45.848958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" E0224 06:45:31.927671 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0224 06:45:49.667151 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0224 06:45:49.667210 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0224 06:45:56.673095 1 leaderelection.go:308] Failed to release lock: etcdserver: request timed out I0224 06:45:56.673556 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0224 06:45:56.673605 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0224 06:45:56.673682 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0224 06:45:56.673728 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0224 06:45:56.673565 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0224 06:45:56.673777 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0224 06:45:56.673815 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0224 06:45:56.673653 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0224 06:45:56.673890 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0224 06:45:56.673856 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0224 06:45:56.673874 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0224 06:45:56.673934 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0224 06:45:56.673964 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0224 06:45:56.674004 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0224 06:45:56.673918 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0224 06:45:56.674051 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0224 06:45:56.673733 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0224 06:45:56.673665 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" E0224 06:45:56.674315 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"