I0419 11:07:46.374398 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0419 11:07:46.375241 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0419 11:07:46.375537 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0419 11:07:46.381132 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0419 11:07:46.381869 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0419 11:07:46.381925 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0419 11:07:46.382024 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0419 11:07:46.386097 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0419 11:07:46.403258 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0419 11:07:46.403657 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0419 11:07:46.403750 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0419 11:07:46.408924 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0419 11:07:46.417506 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0419 11:07:46.417595 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0419 11:07:46.421291 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0419 11:07:46.423550 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0419 11:07:46.425336 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0419 11:07:46.427049 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0419 11:07:46.427144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0419 11:07:46.428924 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0419 11:07:46.431320 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0419 11:07:46.436159 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0419 11:07:46.440456 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0419 11:07:46.440557 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0419 11:07:46.443790 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0419 11:07:46.445968 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0419 11:07:46.448099 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0419 11:07:46.449948 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0419 11:07:46.451713 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0419 11:07:46.453232 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0419 11:07:46.453262 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0419 11:07:46.458661 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0419 11:07:46.463454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0419 11:07:46.466241 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:07:46.467041 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:07:46.467687 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:07:46.490247 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:07:46.510808 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:07:46.530615 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:07:46.547892 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:07:46.553836 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:07:46.567530 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:07:46.582706 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0419 11:08:00.831552 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-19 11:08:00.831540626 +0000 UTC m=+14.487003931 I0419 11:08:01.561427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:08:01.561420 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-19 11:08:01.561404704 +0000 UTC m=+15.216868029 I0419 11:08:01.561502 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-19 11:08:01.561465976 +0000 UTC m=+15.216929311 E0419 11:08:01.578261 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 11:08:01.578339 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-19 11:08:01.578330035 +0000 UTC m=+15.233793340 E0419 11:08:01.578361 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 11:08:01.582024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:08:01.582107 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:08:01.582171 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-19 11:08:01.582164531 +0000 UTC m=+15.237627846 E0419 11:08:01.608833 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0419 11:08:01.608956 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 11:08:01.609052 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 11:08:01.609139 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0419 11:08:01.648669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-h9pxz" condition "Approved" to 2026-04-19 11:08:01.648652307 +0000 UTC m=+15.304115612 I0419 11:08:01.677419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-h9pxz" condition "Ready" to 2026-04-19 11:08:01.677377263 +0000 UTC m=+15.332840568 I0419 11:08:01.773358 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:08:01.773338941 +0000 UTC m=+15.428802276 I0419 11:08:01.833787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:08:01.834189 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:08:01.83418208 +0000 UTC m=+15.489645375 I0419 11:08:01.853271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:08:06.609963 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:08:06.609945462 +0000 UTC m=+20.265408787 I0419 11:08:29.361232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:08:29.361273 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-19 11:08:29.361266208 +0000 UTC m=+43.016729503 I0419 11:08:29.361382 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-19 11:08:29.36135604 +0000 UTC m=+43.016819355 I0419 11:08:29.372937 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-19 11:08:29.372921291 +0000 UTC m=+43.028384606 I0419 11:08:29.387136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:08:29.387241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:08:29.387305 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-19 11:08:29.387264523 +0000 UTC m=+43.042727838 I0419 11:08:29.612313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:08:29.619769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-whpxt" condition "Approved" to 2026-04-19 11:08:29.619757083 +0000 UTC m=+43.275220388 I0419 11:08:29.656030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-whpxt" condition "Ready" to 2026-04-19 11:08:29.656016589 +0000 UTC m=+43.311479894 I0419 11:08:29.684960 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:08:29.684938579 +0000 UTC m=+43.340401914 I0419 11:08:29.710640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:08:29.711194 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:08:29.711187079 +0000 UTC m=+43.366650374 I0419 11:08:29.730386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:08:29.730858 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:08:29.730847952 +0000 UTC m=+43.386311257 I0419 11:14:02.540833 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-152.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:14:02.540908 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-152.nip.io-tls" condition "Issuing" to 2026-04-19 11:14:02.540899872 +0000 UTC m=+376.196363177 I0419 11:14:02.540829 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-152.nip.io-tls" condition "Ready" to 2026-04-19 11:14:02.540781729 +0000 UTC m=+376.196245064 I0419 11:14:02.565270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-152.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-152.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:14:02.565535 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-152.nip.io-tls" condition "Ready" to 2026-04-19 11:14:02.565521221 +0000 UTC m=+376.220984556 I0419 11:14:03.002142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-152.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-152.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:14:03.056457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-152.nip.io-tls-kvhrk" condition "Approved" to 2026-04-19 11:14:03.056444173 +0000 UTC m=+376.711907508 I0419 11:14:03.087686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-152.nip.io-tls-kvhrk" condition "Ready" to 2026-04-19 11:14:03.087672692 +0000 UTC m=+376.743135997 I0419 11:14:03.180742 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-152.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:14:03.180732246 +0000 UTC m=+376.836195551 I0419 11:14:03.202387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-152.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-152.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:14:03.202958 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-152.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:14:03.202950801 +0000 UTC m=+376.858414106 I0419 11:14:03.226110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-152.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-152.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:14:03.228392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-152.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-152.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:11.583907 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:15:11.583982 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-19 11:15:11.583971807 +0000 UTC m=+445.239435132 I0419 11:15:11.584062 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-19 11:15:11.583926936 +0000 UTC m=+445.239390261 E0419 11:15:11.598007 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 11:15:11.598080 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-19 11:15:11.598068017 +0000 UTC m=+445.253531322 E0419 11:15:11.598146 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0419 11:15:11.599442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:11.599533 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:15:11.599647 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-19 11:15:11.599633933 +0000 UTC m=+445.255097268 E0419 11:15:11.612240 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0419 11:15:11.612458 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 11:15:11.612518 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0419 11:15:11.612579 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0419 11:15:11.645068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:11.645492 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s2zrt" condition "Approved" to 2026-04-19 11:15:11.645479855 +0000 UTC m=+445.300943160 I0419 11:15:11.660195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s2zrt" condition "Ready" to 2026-04-19 11:15:11.660184058 +0000 UTC m=+445.315647363 I0419 11:15:11.684456 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:15:11.68443753 +0000 UTC m=+445.339900875 I0419 11:15:11.707457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:11.707787 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:15:11.7077773 +0000 UTC m=+445.363240635 I0419 11:15:11.712758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:11.723854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:11.724471 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:15:11.724456569 +0000 UTC m=+445.379919884 I0419 11:15:11.724911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:16.613356 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:15:16.613345633 +0000 UTC m=+450.268808928 I0419 11:15:54.775774 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-19 11:15:54.775756794 +0000 UTC m=+488.431220099 I0419 11:15:54.775820 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:15:54.775847 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-19 11:15:54.775841356 +0000 UTC m=+488.431304661 I0419 11:15:54.776096 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-19 11:15:54.776090772 +0000 UTC m=+488.431554087 I0419 11:15:54.776284 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:15:54.776309 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-19 11:15:54.776303556 +0000 UTC m=+488.431766871 I0419 11:15:54.780559 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-19 11:15:54.780542683 +0000 UTC m=+488.436005998 I0419 11:15:54.780595 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:15:54.780622 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-19 11:15:54.780614805 +0000 UTC m=+488.436078100 I0419 11:15:54.807997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:54.808090 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:15:54.808119 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-19 11:15:54.80811228 +0000 UTC m=+488.463575595 I0419 11:15:54.808700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:54.808763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:15:54.808809 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-19 11:15:54.808801605 +0000 UTC m=+488.464264950 I0419 11:15:54.814226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:54.814304 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-19 11:15:54.81429623 +0000 UTC m=+488.469759535 I0419 11:15:54.984789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:54.996333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zvnk4" condition "Approved" to 2026-04-19 11:15:54.996320576 +0000 UTC m=+488.651783881 I0419 11:15:54.997268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:55.005350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cszvs" condition "Approved" to 2026-04-19 11:15:55.0053303 +0000 UTC m=+488.660793625 I0419 11:15:55.019413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zvnk4" condition "Ready" to 2026-04-19 11:15:55.01939959 +0000 UTC m=+488.674862895 I0419 11:15:55.032720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cszvs" condition "Ready" to 2026-04-19 11:15:55.032703162 +0000 UTC m=+488.688166487 I0419 11:15:55.087470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:55.089922 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:15:55.089972 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-19 11:15:55.089964503 +0000 UTC m=+488.745427818 I0419 11:15:55.090301 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:15:55.090348 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-19 11:15:55.090338391 +0000 UTC m=+488.745801726 I0419 11:15:55.092039 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:15:55.09203137 +0000 UTC m=+488.747494665 I0419 11:15:55.092353 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:15:55.092350697 +0000 UTC m=+488.747813982 I0419 11:15:55.325512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:55.326045 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:15:55.326031677 +0000 UTC m=+488.981495002 I0419 11:15:55.369344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:55.369724 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:15:55.369716909 +0000 UTC m=+489.025180204 I0419 11:15:55.479078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:55.570008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:56.034628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gp2b6" condition "Approved" to 2026-04-19 11:15:56.034614395 +0000 UTC m=+489.690077690 I0419 11:15:56.074392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qbsgl" condition "Approved" to 2026-04-19 11:15:56.074373539 +0000 UTC m=+489.729836864 I0419 11:15:56.323998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6f72n" condition "Approved" to 2026-04-19 11:15:56.32398023 +0000 UTC m=+489.979443535 I0419 11:15:56.350452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gp2b6" condition "Ready" to 2026-04-19 11:15:56.3504433 +0000 UTC m=+490.005906595 I0419 11:15:56.626872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qbsgl" condition "Ready" to 2026-04-19 11:15:56.626864481 +0000 UTC m=+490.282327776 I0419 11:15:56.796792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-6f72n" condition "Ready" to 2026-04-19 11:15:56.796781282 +0000 UTC m=+490.452244587 E0419 11:15:57.263000 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-4xxzc\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0419 11:15:57.889789 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-6f72n" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-7lqr7" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0419 11:15:58.071779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:58.219896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:58.498376 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n5lt5" condition "Approved" to 2026-04-19 11:15:58.498361381 +0000 UTC m=+492.153824686 I0419 11:15:58.575009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:58.733441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n5lt5" condition "Ready" to 2026-04-19 11:15:58.733426372 +0000 UTC m=+492.388889667 I0419 11:15:59.392274 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:15:59.39225847 +0000 UTC m=+493.047721805 I0419 11:15:59.517411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:15:59.517723 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:15:59.517715911 +0000 UTC m=+493.173179216 I0419 11:15:59.761656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:16:04.341244 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x7khw-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:16:04.341257 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x7khw-tls" condition "Ready" to 2026-04-19 11:16:04.34124235 +0000 UTC m=+497.996705645 I0419 11:16:04.341285 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x7khw-tls" condition "Issuing" to 2026-04-19 11:16:04.341274741 +0000 UTC m=+497.996738046 I0419 11:16:04.380619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x7khw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x7khw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:16:04.380717 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-x7khw-tls" condition "Ready" to 2026-04-19 11:16:04.380711737 +0000 UTC m=+498.036175032 I0419 11:16:04.713720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x7khw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x7khw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:16:04.748314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x7khw-vcrqq" condition "Approved" to 2026-04-19 11:16:04.748303258 +0000 UTC m=+498.403766573 I0419 11:16:04.768738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-x7khw-vcrqq" condition "Ready" to 2026-04-19 11:16:04.768697591 +0000 UTC m=+498.424160896 I0419 11:16:04.807161 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-x7khw-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:16:04.807147915 +0000 UTC m=+498.462611220 I0419 11:16:04.830455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-x7khw-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-x7khw-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:16:46.056337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:16:46.056381 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-19 11:16:46.056371302 +0000 UTC m=+539.711834627 I0419 11:16:46.056395 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-19 11:16:46.056376332 +0000 UTC m=+539.711839637 I0419 11:16:46.075302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:16:46.075371 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-19 11:16:46.075364813 +0000 UTC m=+539.730828118 I0419 11:16:46.254282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:16:46.278232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lc42m" condition "Approved" to 2026-04-19 11:16:46.278223265 +0000 UTC m=+539.933686560 I0419 11:16:46.295850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lc42m" condition "Ready" to 2026-04-19 11:16:46.295836755 +0000 UTC m=+539.951300070 I0419 11:16:46.325746 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:16:46.325729865 +0000 UTC m=+539.981193200 I0419 11:16:46.344787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:16:46.345188 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:16:46.345180887 +0000 UTC m=+540.000644192 I0419 11:16:46.362961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:16:46.367212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:16:46.367576 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:16:46.367566276 +0000 UTC m=+540.023029581 I0419 11:19:59.713412 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:19:59.713504 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-19 11:19:59.71349311 +0000 UTC m=+733.368956435 I0419 11:19:59.713589 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-19 11:19:59.713560222 +0000 UTC m=+733.369023557 I0419 11:19:59.731549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:19:59.731679 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-19 11:19:59.731666893 +0000 UTC m=+733.387130218 I0419 11:19:59.801219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:19:59.837096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-g7bn4" condition "Approved" to 2026-04-19 11:19:59.837072058 +0000 UTC m=+733.492535393 I0419 11:19:59.858339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-g7bn4" condition "Ready" to 2026-04-19 11:19:59.858323682 +0000 UTC m=+733.513786987 I0419 11:19:59.888210 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:19:59.88819172 +0000 UTC m=+733.543655055 I0419 11:19:59.910029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:19:59.911193 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:19:59.911182753 +0000 UTC m=+733.566646058 I0419 11:19:59.930844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:19:59.931181 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:19:59.931142446 +0000 UTC m=+733.586605741 I0419 11:19:59.931429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:22:29.196314 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-19 11:22:29.19626769 +0000 UTC m=+882.851731025 I0419 11:22:29.196901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:22:29.196929 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-19 11:22:29.196922644 +0000 UTC m=+882.852385969 I0419 11:22:29.237181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:22:29.237515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:22:29.237537 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-19 11:22:29.237530716 +0000 UTC m=+882.892994011 I0419 11:22:29.583079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:22:29.596611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-ptcmz" condition "Approved" to 2026-04-19 11:22:29.596596077 +0000 UTC m=+883.252059412 I0419 11:22:29.655685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-ptcmz" condition "Ready" to 2026-04-19 11:22:29.655674589 +0000 UTC m=+883.311137894 I0419 11:22:29.721840 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:22:29.721829251 +0000 UTC m=+883.377292546 I0419 11:22:29.766374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:23:36.524568 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:23:36.524818 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-19 11:23:36.52480554 +0000 UTC m=+950.180268845 I0419 11:23:36.525135 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-19 11:23:36.524615516 +0000 UTC m=+950.180078841 I0419 11:23:36.539858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:23:36.539931 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:23:36.539961 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-19 11:23:36.539953094 +0000 UTC m=+950.195416409 I0419 11:23:36.797740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:23:36.809082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-h8rck" condition "Approved" to 2026-04-19 11:23:36.809072653 +0000 UTC m=+950.464535948 I0419 11:23:36.891970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-h8rck" condition "Ready" to 2026-04-19 11:23:36.891953925 +0000 UTC m=+950.547417220 I0419 11:23:36.931028 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:23:36.931013732 +0000 UTC m=+950.586477047 I0419 11:23:36.950091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:23:36.950626 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:23:36.950616367 +0000 UTC m=+950.606079692 I0419 11:23:36.968104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:26:50.487909 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-19 11:26:50.487855364 +0000 UTC m=+1144.143318689 I0419 11:26:50.487937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0419 11:26:50.488016 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-19 11:26:50.488007697 +0000 UTC m=+1144.143471022 I0419 11:26:50.510036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:26:50.510123 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-19 11:26:50.510115568 +0000 UTC m=+1144.165578863 I0419 11:26:50.812529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:26:50.856426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2wcxd" condition "Approved" to 2026-04-19 11:26:50.856415012 +0000 UTC m=+1144.511878317 I0419 11:26:50.886054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2wcxd" condition "Ready" to 2026-04-19 11:26:50.886040542 +0000 UTC m=+1144.541503847 I0419 11:26:50.932645 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-19 11:26:50.932635558 +0000 UTC m=+1144.588098863 I0419 11:26:50.959323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0419 11:26:51.029512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"