I0409 17:36:36.236395 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0409 17:36:36.236570 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0409 17:36:36.236694 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0409 17:36:36.240671 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0409 17:36:36.241120 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0409 17:36:36.241334 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0409 17:36:36.241337 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0409 17:36:36.243766 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0409 17:36:36.262255 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0409 17:36:36.265587 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0409 17:36:36.271650 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0409 17:36:36.275103 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0409 17:36:36.277849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0409 17:36:36.280075 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0409 17:36:36.281880 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0409 17:36:36.281925 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0409 17:36:36.281933 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0409 17:36:36.281966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0409 17:36:36.284228 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0409 17:36:36.289308 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0409 17:36:36.295135 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0409 17:36:36.297758 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0409 17:36:36.300227 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0409 17:36:36.302826 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0409 17:36:36.305407 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0409 17:36:36.308019 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0409 17:36:36.308054 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0409 17:36:36.310556 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0409 17:36:36.310713 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0409 17:36:36.314918 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0409 17:36:36.320066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0409 17:36:36.323927 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0409 17:36:36.324472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0409 17:36:36.327725 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:36.327741 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:36.329186 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:36.353661 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:36.370110 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:36.387754 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:36.406825 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:36.421230 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:36.423885 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:36.441156 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0409 17:36:48.811281 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-09 17:36:48.81126705 +0000 UTC m=+12.610849212 I0409 17:36:49.548593 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-09 17:36:49.548573417 +0000 UTC m=+13.348155649 I0409 17:36:49.548949 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:36:49.549050 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 17:36:49.549036996 +0000 UTC m=+13.348619208 E0409 17:36:49.563682 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 17:36:49.563780 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-09 17:36:49.563771367 +0000 UTC m=+13.363353549 E0409 17:36:49.563805 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 17:36:49.567507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:49.567584 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:36:49.567601 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-09 17:36:49.567595142 +0000 UTC m=+13.367177324 E0409 17:36:49.577267 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0409 17:36:49.577498 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 17:36:49.577566 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 17:36:49.577639 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0409 17:36:49.614700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:49.614810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pzdkl" condition "Approved" to 2026-04-09 17:36:49.614800227 +0000 UTC m=+13.414382409 I0409 17:36:49.628132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pzdkl" condition "Ready" to 2026-04-09 17:36:49.628117753 +0000 UTC m=+13.427699935 I0409 17:36:49.653046 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:36:49.653030048 +0000 UTC m=+13.452612230 I0409 17:36:49.670072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:49.670511 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:36:49.670500146 +0000 UTC m=+13.470082348 I0409 17:36:49.685088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:49.686726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:36:54.578199 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:36:54.578176341 +0000 UTC m=+18.377758553 I0409 17:37:15.725256 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:37:15.725309 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 17:37:15.725295625 +0000 UTC m=+39.524877837 I0409 17:37:15.725475 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-09 17:37:15.725451758 +0000 UTC m=+39.525033940 I0409 17:37:15.738326 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-09 17:37:15.738312137 +0000 UTC m=+39.537894319 I0409 17:37:15.746955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:37:15.747083 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:37:15.747129 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-09 17:37:15.747114986 +0000 UTC m=+39.546697168 I0409 17:37:15.931997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-msscv" condition "Approved" to 2026-04-09 17:37:15.93197985 +0000 UTC m=+39.731562062 I0409 17:37:15.968701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-msscv" condition "Ready" to 2026-04-09 17:37:15.968685968 +0000 UTC m=+39.768268150 I0409 17:37:16.009570 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:37:16.009554095 +0000 UTC m=+39.809136277 I0409 17:37:16.030726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:37:16.031258 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:37:16.031245574 +0000 UTC m=+39.830827756 I0409 17:37:16.043534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:37:16.055502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:37:16.060831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:37:16.061305 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:37:16.061293253 +0000 UTC m=+39.860875465 I0409 17:38:59.795384 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-09 17:38:59.795350035 +0000 UTC m=+143.594932317 I0409 17:38:59.795271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:38:59.795714 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-09 17:38:59.795687611 +0000 UTC m=+143.595269813 I0409 17:38:59.813872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:38:59.813987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:38:59.814023 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-09 17:38:59.814013816 +0000 UTC m=+143.613595998 E0409 17:38:59.820252 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 17:38:59.820351 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-09 17:38:59.820336816 +0000 UTC m=+143.619919028 I0409 17:38:59.820462 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0409 17:38:59.837179 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0409 17:38:59.837287 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0409 17:38:59.837323 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0409 17:38:59.837366 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0409 17:38:59.839984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:38:59.840013 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-09 17:38:59.840003936 +0000 UTC m=+143.639586118 I0409 17:38:59.840080 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-09 17:38:59.840054927 +0000 UTC m=+143.639637119 I0409 17:38:59.869065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:38:59.869214 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-09 17:38:59.869199116 +0000 UTC m=+143.668781328 I0409 17:39:00.032170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:39:00.068343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-vdcnt" condition "Approved" to 2026-04-09 17:39:00.068311926 +0000 UTC m=+143.867894118 I0409 17:39:00.086835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-vdcnt" condition "Ready" to 2026-04-09 17:39:00.086753013 +0000 UTC m=+143.886335195 I0409 17:39:00.110949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:39:00.118725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-vgrrg" condition "Approved" to 2026-04-09 17:39:00.118705575 +0000 UTC m=+143.918287757 I0409 17:39:00.155041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-vgrrg" condition "Ready" to 2026-04-09 17:39:00.155023389 +0000 UTC m=+143.954605591 I0409 17:39:00.181824 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:39:00.181810433 +0000 UTC m=+143.981392595 I0409 17:39:00.200214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:39:00.262980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:39:04.837779 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:39:04.837766145 +0000 UTC m=+148.637348357 I0409 17:39:04.854530 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-vdcnt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:39:04.854512567 +0000 UTC m=+148.654094749 I0409 17:39:04.888826 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:39:04.888816438 +0000 UTC m=+148.688398610 I0409 17:39:04.914911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:39:04.977974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:41:52.192792 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready" to 2026-04-09 17:41:52.192739735 +0000 UTC m=+315.992321947 I0409 17:41:52.193471 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:41:52.193501 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-04-09 17:41:52.19349501 +0000 UTC m=+315.993077212 I0409 17:41:52.208824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:41:52.208927 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-210.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:41:52.208968 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Issuing" to 2026-04-09 17:41:52.208959656 +0000 UTC m=+316.008541828 I0409 17:41:52.404210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:41:52.412305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-l99tk" condition "Approved" to 2026-04-09 17:41:52.412294417 +0000 UTC m=+316.211876609 I0409 17:41:52.434530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-210.nip.io-tls-l99tk" condition "Ready" to 2026-04-09 17:41:52.434519644 +0000 UTC m=+316.234101836 I0409 17:41:52.462423 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:41:52.462411119 +0000 UTC m=+316.261993301 I0409 17:41:52.487333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:41:52.487849 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-210.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:41:52.487836056 +0000 UTC m=+316.287418338 I0409 17:41:52.510384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-210.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-210.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:04.567967 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-09 17:43:04.567914054 +0000 UTC m=+388.367496226 I0409 17:43:04.568426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:43:04.568457 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 17:43:04.568449364 +0000 UTC m=+388.368031556 E0409 17:43:04.581340 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 17:43:04.581388 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-09 17:43:04.581380152 +0000 UTC m=+388.380962324 E0409 17:43:04.581436 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0409 17:43:04.584183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:04.584272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:43:04.584300 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-09 17:43:04.584292059 +0000 UTC m=+388.383874251 E0409 17:43:04.592757 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0409 17:43:04.593030 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 17:43:04.593102 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0409 17:43:04.593273 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0409 17:43:04.625147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:04.629358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-89c2z" condition "Approved" to 2026-04-09 17:43:04.629340573 +0000 UTC m=+388.428922775 I0409 17:43:04.644642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-89c2z" condition "Ready" to 2026-04-09 17:43:04.644623216 +0000 UTC m=+388.444205428 I0409 17:43:04.672432 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:43:04.672417249 +0000 UTC m=+388.471999461 I0409 17:43:04.693140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:04.693515 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:43:04.693506104 +0000 UTC m=+388.493088296 I0409 17:43:04.703931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:04.707685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:04.707932 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:43:04.707920941 +0000 UTC m=+388.507503123 I0409 17:43:09.593661 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:43:09.593645201 +0000 UTC m=+393.393227413 I0409 17:43:50.303824 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-09 17:43:50.303811084 +0000 UTC m=+434.103393266 I0409 17:43:50.303930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:43:50.303964 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 17:43:50.303958097 +0000 UTC m=+434.103540269 I0409 17:43:50.304342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:43:50.304394 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-09 17:43:50.304383695 +0000 UTC m=+434.103965877 I0409 17:43:50.304962 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 17:43:50.304955806 +0000 UTC m=+434.104537988 I0409 17:43:50.305197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:43:50.305217 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-09 17:43:50.305213441 +0000 UTC m=+434.104795633 I0409 17:43:50.305378 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 17:43:50.305373984 +0000 UTC m=+434.104956176 I0409 17:43:50.333513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:50.333910 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:43:50.334055 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-09 17:43:50.333992769 +0000 UTC m=+434.133574971 I0409 17:43:50.336020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:50.336328 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-09 17:43:50.336316003 +0000 UTC m=+434.135898215 I0409 17:43:50.343369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:50.343537 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-09 17:43:50.343530091 +0000 UTC m=+434.143112283 I0409 17:43:50.462031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:50.468339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-979hk" condition "Approved" to 2026-04-09 17:43:50.468322767 +0000 UTC m=+434.267904949 I0409 17:43:50.490815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-979hk" condition "Ready" to 2026-04-09 17:43:50.490802275 +0000 UTC m=+434.290384457 I0409 17:43:50.523621 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:43:50.52360769 +0000 UTC m=+434.323189872 I0409 17:43:50.576630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:50.590827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:50.680791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:50.961421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7qvcl" condition "Approved" to 2026-04-09 17:43:50.961408837 +0000 UTC m=+434.760991019 I0409 17:43:50.989003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7qvcl" condition "Ready" to 2026-04-09 17:43:50.988987272 +0000 UTC m=+434.788569474 I0409 17:43:51.008766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:51.093810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7j46n" condition "Approved" to 2026-04-09 17:43:51.093791757 +0000 UTC m=+434.893373939 I0409 17:43:51.196195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7j46n" condition "Ready" to 2026-04-09 17:43:51.196184568 +0000 UTC m=+434.995766740 I0409 17:43:51.483690 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-7qvcl" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-w2r68" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0409 17:43:51.840855 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:43:51.840825413 +0000 UTC m=+435.640407615 I0409 17:43:51.897544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bnqr9" condition "Approved" to 2026-04-09 17:43:51.897520092 +0000 UTC m=+435.697102304 I0409 17:43:52.039239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:52.039959 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:43:52.039948304 +0000 UTC m=+435.839530496 I0409 17:43:52.348156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bnqr9" condition "Ready" to 2026-04-09 17:43:52.348146943 +0000 UTC m=+436.147729115 I0409 17:43:52.737705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:52.788147 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:43:52.788121342 +0000 UTC m=+436.587703554 I0409 17:43:52.957773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:52.958250 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:43:52.958242131 +0000 UTC m=+436.757824303 I0409 17:43:53.190993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:53.239739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:58.254693 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lg7zf-tls" condition "Ready" to 2026-04-09 17:43:58.254675687 +0000 UTC m=+442.054257879 I0409 17:43:58.254903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lg7zf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:43:58.254963 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lg7zf-tls" condition "Issuing" to 2026-04-09 17:43:58.254952792 +0000 UTC m=+442.054534964 I0409 17:43:58.272516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lg7zf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lg7zf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:58.272610 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lg7zf-tls" condition "Ready" to 2026-04-09 17:43:58.272602888 +0000 UTC m=+442.072185060 I0409 17:43:58.454872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lg7zf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lg7zf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:43:58.488711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lg7zf-dzhgl" condition "Approved" to 2026-04-09 17:43:58.488696493 +0000 UTC m=+442.288278665 I0409 17:43:58.516613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lg7zf-dzhgl" condition "Ready" to 2026-04-09 17:43:58.516595114 +0000 UTC m=+442.316177296 I0409 17:43:58.553469 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lg7zf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:43:58.553448536 +0000 UTC m=+442.353030708 I0409 17:43:58.573520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lg7zf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lg7zf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:44:25.050998 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:44:25.051060 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-09 17:44:25.051045269 +0000 UTC m=+468.850627471 I0409 17:44:25.051197 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 17:44:25.051167371 +0000 UTC m=+468.850749633 I0409 17:44:25.068543 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:44:25.068778 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-09 17:44:25.068757207 +0000 UTC m=+468.868339419 I0409 17:44:25.301853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:44:25.336032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-g4s9c" condition "Approved" to 2026-04-09 17:44:25.336006696 +0000 UTC m=+469.135588878 I0409 17:44:25.388425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-g4s9c" condition "Ready" to 2026-04-09 17:44:25.388409153 +0000 UTC m=+469.187991325 I0409 17:44:25.423633 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:44:25.423616424 +0000 UTC m=+469.223198606 I0409 17:44:25.448717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:44:25.449195 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:44:25.449184351 +0000 UTC m=+469.248766533 I0409 17:44:25.469172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:44:25.476541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:42.643147 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-09 17:47:42.643128927 +0000 UTC m=+666.442711109 I0409 17:47:42.643192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:47:42.643420 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 17:47:42.643399992 +0000 UTC m=+666.442982244 I0409 17:47:42.659809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:42.659879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:47:42.659895 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-09 17:47:42.659889314 +0000 UTC m=+666.459471496 I0409 17:47:42.904189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:42.913247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tkvdg" condition "Approved" to 2026-04-09 17:47:42.91323272 +0000 UTC m=+666.712814902 I0409 17:47:42.931582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tkvdg" condition "Ready" to 2026-04-09 17:47:42.931569848 +0000 UTC m=+666.731152030 I0409 17:47:42.966774 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:42.966759915 +0000 UTC m=+666.766342097 I0409 17:47:42.988682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:42.990527 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:42.990515436 +0000 UTC m=+666.790097658 I0409 17:47:43.014019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:47:43.015275 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:47:43.015266936 +0000 UTC m=+666.814849108 I0409 17:47:43.016358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:50:04.804746 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:50:04.804795 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-09 17:50:04.804773175 +0000 UTC m=+808.604355377 I0409 17:50:04.804842 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-09 17:50:04.804832746 +0000 UTC m=+808.604414938 I0409 17:50:04.823096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:50:04.823159 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-09 17:50:04.823152745 +0000 UTC m=+808.622734927 I0409 17:50:05.033746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:50:05.070985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-wrdhb" condition "Approved" to 2026-04-09 17:50:05.070968637 +0000 UTC m=+808.870550819 I0409 17:50:05.091381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-wrdhb" condition "Ready" to 2026-04-09 17:50:05.091372026 +0000 UTC m=+808.890954198 I0409 17:50:05.119842 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:50:05.119826967 +0000 UTC m=+808.919409169 I0409 17:50:05.145832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:50:05.146319 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:50:05.146309471 +0000 UTC m=+808.945891653 I0409 17:50:05.166199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:50:05.166990 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:50:05.166977354 +0000 UTC m=+808.966559566 I0409 17:51:06.553002 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-09 17:51:06.552988284 +0000 UTC m=+870.352570466 I0409 17:51:06.553174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:51:06.553225 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-09 17:51:06.553214278 +0000 UTC m=+870.352796480 I0409 17:51:06.580349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:51:06.580524 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-09 17:51:06.580511262 +0000 UTC m=+870.380093464 I0409 17:51:06.797036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:51:06.839133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-qxpw4" condition "Approved" to 2026-04-09 17:51:06.839122702 +0000 UTC m=+870.638704874 I0409 17:51:06.859479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-qxpw4" condition "Ready" to 2026-04-09 17:51:06.859468825 +0000 UTC m=+870.659051007 I0409 17:51:06.889019 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:51:06.88900481 +0000 UTC m=+870.688586992 I0409 17:51:06.922915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:54:06.251236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:54:06.251313 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-09 17:54:06.251302827 +0000 UTC m=+1050.050885039 I0409 17:54:06.251402 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-09 17:54:06.251370768 +0000 UTC m=+1050.050953000 I0409 17:54:06.271866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:54:06.271995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0409 17:54:06.272029 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-09 17:54:06.272021603 +0000 UTC m=+1050.071603815 I0409 17:54:06.418838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-q2j6n" condition "Approved" to 2026-04-09 17:54:06.418823105 +0000 UTC m=+1050.218405287 I0409 17:54:06.439051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-q2j6n" condition "Ready" to 2026-04-09 17:54:06.439037922 +0000 UTC m=+1050.238620094 I0409 17:54:06.466753 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:54:06.466708538 +0000 UTC m=+1050.266290710 I0409 17:54:06.487631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:54:06.487937 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-09 17:54:06.487930703 +0000 UTC m=+1050.287512875 I0409 17:54:06.489138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0409 17:54:06.506794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"