I0407 15:19:25.984149 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 15:19:25.984257 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 15:19:25.984329 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 15:19:25.989171 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 15:19:25.989527 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 15:19:25.989601 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 15:19:25.989619 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 15:19:25.991956 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 15:19:26.007500 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 15:19:26.014312 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 15:19:26.019342 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 15:19:26.024259 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 15:19:26.024330 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 15:19:26.024383 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 15:19:26.028204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 15:19:26.030553 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 15:19:26.032744 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 15:19:26.032999 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 15:19:26.035248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 15:19:26.037404 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 15:19:26.037428 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 15:19:26.042778 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 15:19:26.046211 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 15:19:26.048441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 15:19:26.050846 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 15:19:26.053178 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 15:19:26.055081 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 15:19:26.056756 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 15:19:26.056860 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 15:19:26.058697 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 15:19:26.058807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 15:19:26.063386 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 15:19:26.067506 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 15:19:26.069734 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:26.070564 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:26.070976 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:26.070976 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:26.087024 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:26.100036 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:26.119477 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:26.131528 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:26.149107 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:26.157109 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:37.534562 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 15:19:37.534551116 +0000 UTC m=+11.579993607 I0407 15:19:38.252691 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 15:19:38.252672247 +0000 UTC m=+12.298114738 I0407 15:19:38.252854 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:19:38.252906 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 15:19:38.252896502 +0000 UTC m=+12.298338983 E0407 15:19:38.266366 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:19:38.266446 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 15:19:38.266435962 +0000 UTC m=+12.311878443 E0407 15:19:38.266474 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:19:38.270271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:38.270352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:19:38.270375 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 15:19:38.270368067 +0000 UTC m=+12.315810558 E0407 15:19:38.282619 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 15:19:38.283140 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:19:38.283212 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:19:38.283267 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 15:19:38.312147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:38.312522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7rnzd" condition "Approved" to 2026-04-07 15:19:38.312507867 +0000 UTC m=+12.357950358 I0407 15:19:38.325465 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7rnzd" condition "Ready" to 2026-04-07 15:19:38.325396705 +0000 UTC m=+12.370839196 I0407 15:19:38.352781 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:38.35276687 +0000 UTC m=+12.398209391 I0407 15:19:38.379676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:43.283652 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:43.283638245 +0000 UTC m=+17.329080766 I0407 15:20:02.337161 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 15:20:02.337145052 +0000 UTC m=+36.382587543 I0407 15:20:02.337264 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:20:02.337332 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 15:20:02.337321366 +0000 UTC m=+36.382763897 I0407 15:20:02.351920 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 15:20:02.351909144 +0000 UTC m=+36.397351635 I0407 15:20:02.362368 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:02.362455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:20:02.362484 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 15:20:02.362476758 +0000 UTC m=+36.407919249 I0407 15:20:02.499440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:02.509116 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jlpps" condition "Approved" to 2026-04-07 15:20:02.509101376 +0000 UTC m=+36.554543897 I0407 15:20:02.538133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jlpps" condition "Ready" to 2026-04-07 15:20:02.53812135 +0000 UTC m=+36.583563841 I0407 15:20:02.567347 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:20:02.567331848 +0000 UTC m=+36.612774339 I0407 15:20:02.587694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:20:02.587977 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:20:02.587970544 +0000 UTC m=+36.633413025 I0407 15:20:02.605564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:21:52.031794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:21:52.031698 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 15:21:52.031647916 +0000 UTC m=+146.077090427 I0407 15:21:52.031866 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 15:21:52.03185441 +0000 UTC m=+146.077296911 E0407 15:21:52.044837 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 15:21:52.044950 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-07 15:21:52.044939718 +0000 UTC m=+146.090382199 I0407 15:21:52.044975 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 15:21:52.048465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:21:52.048567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:21:52.048595 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 15:21:52.048586646 +0000 UTC m=+146.094029127 E0407 15:21:52.055939 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0407 15:21:52.056024 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 15:21:52.056053 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 15:21:52.056090 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0407 15:21:52.057036 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:21:52.057070 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 15:21:52.057059686 +0000 UTC m=+146.102502187 I0407 15:21:52.057089 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 15:21:52.057078106 +0000 UTC m=+146.102520587 I0407 15:21:52.073247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:21:52.073437 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 15:21:52.073423553 +0000 UTC m=+146.118866044 I0407 15:21:52.233435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:21:52.294827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bsz9z" condition "Approved" to 2026-04-07 15:21:52.294817547 +0000 UTC m=+146.340260028 I0407 15:21:52.317480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bsz9z" condition "Ready" to 2026-04-07 15:21:52.317467349 +0000 UTC m=+146.362909840 I0407 15:21:52.318218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-j9lbb" condition "Approved" to 2026-04-07 15:21:52.318211095 +0000 UTC m=+146.363653586 I0407 15:21:52.345830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-j9lbb" condition "Ready" to 2026-04-07 15:21:52.345813591 +0000 UTC m=+146.391256082 I0407 15:21:52.371662 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:21:52.37163824 +0000 UTC m=+146.417080761 I0407 15:21:52.394128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:21:52.394653 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:21:52.394643488 +0000 UTC m=+146.440085979 I0407 15:21:52.403418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:21:52.411184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:21:52.411523 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:21:52.411513236 +0000 UTC m=+146.456955717 I0407 15:21:52.415222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:21:57.056635 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:21:57.056617902 +0000 UTC m=+151.102060413 I0407 15:21:57.076713 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-bsz9z" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:21:57.076696378 +0000 UTC m=+151.122138889 I0407 15:21:57.111875 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:21:57.111858086 +0000 UTC m=+151.157300577 I0407 15:21:57.130456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:21:57.130991 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:21:57.130975802 +0000 UTC m=+151.176418313 I0407 15:21:57.150669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:21:57.151086 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:21:57.151076199 +0000 UTC m=+151.196518690 I0407 15:24:34.141042 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready" to 2026-04-07 15:24:34.141003666 +0000 UTC m=+308.186446177 I0407 15:24:34.141066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-216.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:24:34.141150 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Issuing" to 2026-04-07 15:24:34.141141249 +0000 UTC m=+308.186583760 I0407 15:24:34.156663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:34.156764 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready" to 2026-04-07 15:24:34.156755267 +0000 UTC m=+308.202197758 I0407 15:24:34.325173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:34.355164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-216.nip.io-tls-fc58s" condition "Approved" to 2026-04-07 15:24:34.355147058 +0000 UTC m=+308.400589579 I0407 15:24:34.373652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-216.nip.io-tls-fc58s" condition "Ready" to 2026-04-07 15:24:34.373641715 +0000 UTC m=+308.419084206 I0407 15:24:34.396320 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:24:34.396301122 +0000 UTC m=+308.441743643 I0407 15:24:34.418218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:34.418688 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:24:34.418677571 +0000 UTC m=+308.464120092 I0407 15:24:34.437226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:34.440938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-216.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-216.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:34.441582 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-216.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:24:34.441568461 +0000 UTC m=+308.487010982 I0407 15:25:44.534736 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 15:25:44.534715432 +0000 UTC m=+378.580157923 I0407 15:25:44.534781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:25:44.534852 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 15:25:44.534833844 +0000 UTC m=+378.580276415 E0407 15:25:44.546027 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:25:44.546066 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 15:25:44.546058569 +0000 UTC m=+378.591501060 E0407 15:25:44.546117 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:25:44.548824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:25:44.548903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:25:44.548933 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 15:25:44.548924729 +0000 UTC m=+378.594367240 E0407 15:25:44.555493 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 15:25:44.556267 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:25:44.556368 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:25:44.556410 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 15:25:44.589027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:25:44.589977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-tp2pg" condition "Approved" to 2026-04-07 15:25:44.589961107 +0000 UTC m=+378.635403618 I0407 15:25:44.602301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-tp2pg" condition "Ready" to 2026-04-07 15:25:44.602286755 +0000 UTC m=+378.647729276 I0407 15:25:44.623181 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:25:44.623168771 +0000 UTC m=+378.668611252 I0407 15:25:44.638342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:25:44.682418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:25:49.556185 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:25:49.556138812 +0000 UTC m=+383.601581323 I0407 15:26:26.831561 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:26:26.831634 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 15:26:26.831624501 +0000 UTC m=+420.877067042 I0407 15:26:26.831651 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 15:26:26.831642731 +0000 UTC m=+420.877085222 I0407 15:26:26.838867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:26:26.838901 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 15:26:26.838894287 +0000 UTC m=+420.884336768 I0407 15:26:26.839124 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 15:26:26.839120921 +0000 UTC m=+420.884563402 I0407 15:26:26.839351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:26:26.839366 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 15:26:26.839364185 +0000 UTC m=+420.884806656 I0407 15:26:26.839477 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 15:26:26.839474207 +0000 UTC m=+420.884916688 I0407 15:26:26.863267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:26.863331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:26:26.863357 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 15:26:26.863350322 +0000 UTC m=+420.908792813 I0407 15:26:26.863839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:26.863884 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 15:26:26.863880202 +0000 UTC m=+420.909322693 I0407 15:26:26.864237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:26.864355 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 15:26:26.86434347 +0000 UTC m=+420.909785961 I0407 15:26:27.003380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:27.010249 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9cwvb" condition "Approved" to 2026-04-07 15:26:27.010228505 +0000 UTC m=+421.055671016 I0407 15:26:27.029093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9cwvb" condition "Ready" to 2026-04-07 15:26:27.029084916 +0000 UTC m=+421.074527407 I0407 15:26:27.046736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:27.057962 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:27.057948543 +0000 UTC m=+421.103391054 I0407 15:26:27.082149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:27.088161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6cfw8" condition "Approved" to 2026-04-07 15:26:27.088144895 +0000 UTC m=+421.133587386 I0407 15:26:27.119294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6cfw8" condition "Ready" to 2026-04-07 15:26:27.119283624 +0000 UTC m=+421.164726115 I0407 15:26:27.127264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:27.315229 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:27.31521334 +0000 UTC m=+421.360655831 I0407 15:26:27.479524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:27.483380 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:27.48336454 +0000 UTC m=+421.528807031 I0407 15:26:27.527498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:27.932730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9kq7m" condition "Approved" to 2026-04-07 15:26:27.932711931 +0000 UTC m=+421.978154442 I0407 15:26:27.977820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:28.049968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:28.188630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9kq7m" condition "Ready" to 2026-04-07 15:26:28.188613583 +0000 UTC m=+422.234056074 I0407 15:26:28.623968 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-9kq7m" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-kbtcg" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0407 15:26:28.726198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:28.883082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f2bfd" condition "Approved" to 2026-04-07 15:26:28.883062767 +0000 UTC m=+422.928505278 I0407 15:26:29.137044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-f2bfd" condition "Ready" to 2026-04-07 15:26:29.137025802 +0000 UTC m=+423.182468323 I0407 15:26:29.428798 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:29.428775912 +0000 UTC m=+423.474218443 I0407 15:26:29.528885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:29.827133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:37.709087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:26:37.709085 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls" condition "Ready" to 2026-04-07 15:26:37.709068438 +0000 UTC m=+431.754510929 I0407 15:26:37.709123 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls" condition "Issuing" to 2026-04-07 15:26:37.709115229 +0000 UTC m=+431.754557710 I0407 15:26:37.725949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:37.726035 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls" condition "Ready" to 2026-04-07 15:26:37.726026944 +0000 UTC m=+431.771469435 I0407 15:26:37.894243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:37.928990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9qjp4-w7m2r" condition "Approved" to 2026-04-07 15:26:37.928973971 +0000 UTC m=+431.974416472 I0407 15:26:37.957564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-9qjp4-w7m2r" condition "Ready" to 2026-04-07 15:26:37.957555112 +0000 UTC m=+432.002997593 I0407 15:26:37.987536 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:37.98751733 +0000 UTC m=+432.032959811 I0407 15:26:38.012333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:38.012664 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:38.012655298 +0000 UTC m=+432.058097789 I0407 15:26:38.038911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:38.039270 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:38.039262293 +0000 UTC m=+432.084704784 I0407 15:26:38.044621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-9qjp4-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:06.774201 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 15:27:06.774185488 +0000 UTC m=+460.819627979 I0407 15:27:06.774319 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:27:06.774352 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 15:27:06.774344421 +0000 UTC m=+460.819786912 I0407 15:27:06.788980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:06.789074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:27:06.789097 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 15:27:06.789090776 +0000 UTC m=+460.834533267 I0407 15:27:06.924332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d4rgl" condition "Approved" to 2026-04-07 15:27:06.924314551 +0000 UTC m=+460.969757042 I0407 15:27:06.940426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d4rgl" condition "Ready" to 2026-04-07 15:27:06.940413031 +0000 UTC m=+460.985855522 I0407 15:27:06.969316 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:27:06.969295819 +0000 UTC m=+461.014738340 I0407 15:27:06.986403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:27:06.986729 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:27:06.986719054 +0000 UTC m=+461.032161545 I0407 15:27:07.006659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:30:25.256812 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 15:30:25.25678119 +0000 UTC m=+659.302223711 I0407 15:30:25.256863 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:30:25.256937 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 15:30:25.256927633 +0000 UTC m=+659.302370144 I0407 15:30:25.275698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:30:25.275811 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:30:25.275850 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 15:30:25.275839116 +0000 UTC m=+659.321281637 I0407 15:30:25.400869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:30:25.407219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5wdkd" condition "Approved" to 2026-04-07 15:30:25.407208945 +0000 UTC m=+659.452651426 I0407 15:30:25.426148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5wdkd" condition "Ready" to 2026-04-07 15:30:25.426139438 +0000 UTC m=+659.471581929 I0407 15:30:25.449734 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:30:25.449722301 +0000 UTC m=+659.495164792 I0407 15:30:25.466221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:56.530656 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:32:56.530767 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 15:32:56.530730453 +0000 UTC m=+810.576172974 I0407 15:32:56.530828 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 15:32:56.530807125 +0000 UTC m=+810.576249636 I0407 15:32:56.550698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:56.550771 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:32:56.550789 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 15:32:56.55078351 +0000 UTC m=+810.596226001 I0407 15:32:56.917530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-wbch6" condition "Approved" to 2026-04-07 15:32:56.917518991 +0000 UTC m=+810.962961482 I0407 15:32:56.940729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-wbch6" condition "Ready" to 2026-04-07 15:32:56.940720545 +0000 UTC m=+810.986163016 I0407 15:32:56.975005 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:32:56.974989835 +0000 UTC m=+811.020432326 I0407 15:32:57.001800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:33:57.061082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:33:57.061117 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 15:33:57.061108965 +0000 UTC m=+871.106551456 I0407 15:33:57.061193 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 15:33:57.061176976 +0000 UTC m=+871.106619467 I0407 15:33:57.087484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:33:57.087598 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 15:33:57.087587339 +0000 UTC m=+871.133029860 I0407 15:33:57.350115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:33:57.382541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-qgs4c" condition "Approved" to 2026-04-07 15:33:57.382522411 +0000 UTC m=+871.427964942 I0407 15:33:57.398929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-qgs4c" condition "Ready" to 2026-04-07 15:33:57.39891821 +0000 UTC m=+871.444360691 I0407 15:33:57.424703 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:33:57.424688299 +0000 UTC m=+871.470130790 I0407 15:33:57.454021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:33:57.454305 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:33:57.4543005 +0000 UTC m=+871.499742981 I0407 15:33:57.460834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:33:57.472661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:33:57.472904 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:33:57.472896895 +0000 UTC m=+871.518339376 I0407 15:37:03.783901 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 15:37:03.783856844 +0000 UTC m=+1057.829299345 I0407 15:37:03.784003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:37:03.784063 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 15:37:03.784051308 +0000 UTC m=+1057.829493829 I0407 15:37:03.803819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:37:03.803900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:37:03.803927 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 15:37:03.803920429 +0000 UTC m=+1057.849362920 I0407 15:37:04.048809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-jbbfq" condition "Approved" to 2026-04-07 15:37:04.04879131 +0000 UTC m=+1058.094233861 I0407 15:37:04.066043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-jbbfq" condition "Ready" to 2026-04-07 15:37:04.066032625 +0000 UTC m=+1058.111475106 I0407 15:37:04.093601 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:37:04.093582779 +0000 UTC m=+1058.139025280 I0407 15:37:04.112306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:37:04.112547 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:37:04.112542851 +0000 UTC m=+1058.157985332 I0407 15:37:04.138940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:37:04.139442 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:37:04.139432701 +0000 UTC m=+1058.184875192 I0407 15:37:04.146043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"