I0329 01:56:23.801308 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0329 01:56:23.801468 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0329 01:56:23.801552 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0329 01:56:23.805630 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0329 01:56:23.806099 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0329 01:56:23.806264 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0329 01:56:23.806449 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0329 01:56:23.808680 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0329 01:56:23.825054 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0329 01:56:23.825703 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0329 01:56:23.825838 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0329 01:56:23.830935 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0329 01:56:23.836677 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0329 01:56:23.839610 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0329 01:56:23.842459 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0329 01:56:23.845299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0329 01:56:23.847488 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0329 01:56:23.853423 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0329 01:56:23.857458 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0329 01:56:23.860041 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0329 01:56:23.860099 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0329 01:56:23.860134 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0329 01:56:23.862124 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0329 01:56:23.862157 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0329 01:56:23.864424 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0329 01:56:23.866492 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0329 01:56:23.868604 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0329 01:56:23.870757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0329 01:56:23.872996 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0329 01:56:23.877270 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0329 01:56:23.877393 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0329 01:56:23.879507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0329 01:56:23.881884 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0329 01:56:23.884479 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:23.884711 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:23.884808 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:23.884813 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:23.902988 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:23.922104 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:23.939248 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:23.959273 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:23.974803 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:23.978371 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:35.320033 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-29 01:56:35.319980925 +0000 UTC m=+11.551336237 I0329 01:56:36.079383 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-29 01:56:36.079360532 +0000 UTC m=+12.310715844 I0329 01:56:36.079519 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:56:36.079641 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-29 01:56:36.079627887 +0000 UTC m=+12.310983189 I0329 01:56:36.094830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:56:36.094963 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:56:36.095008 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-29 01:56:36.094996794 +0000 UTC m=+12.326352106 E0329 01:56:36.096375 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0329 01:56:36.096513 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-29 01:56:36.096495533 +0000 UTC m=+12.327850835 E0329 01:56:36.096566 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 01:56:36.105599 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0329 01:56:36.105698 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 01:56:36.105765 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 01:56:36.105800 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0329 01:56:36.136186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:56:36.137067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pg6q6" condition "Approved" to 2026-03-29 01:56:36.137049728 +0000 UTC m=+12.368405010 I0329 01:56:36.150427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-pg6q6" condition "Ready" to 2026-03-29 01:56:36.150418175 +0000 UTC m=+12.381773457 I0329 01:56:36.178964 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:56:36.178950328 +0000 UTC m=+12.410305610 I0329 01:56:36.196221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:56:36.196427 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:56:36.196422206 +0000 UTC m=+12.427777488 I0329 01:56:36.205365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:56:36.241382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:56:41.106974 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:56:41.106955464 +0000 UTC m=+17.338310776 I0329 01:57:03.547091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:57:03.547134 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-29 01:57:03.547124343 +0000 UTC m=+39.778479625 I0329 01:57:03.547184 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-29 01:57:03.547163444 +0000 UTC m=+39.778518736 I0329 01:57:03.560462 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-29 01:57:03.560446097 +0000 UTC m=+39.791801369 I0329 01:57:03.575649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:57:03.575731 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-29 01:57:03.57572025 +0000 UTC m=+39.807075532 I0329 01:57:03.738236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:57:03.769459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-q5kqc" condition "Approved" to 2026-03-29 01:57:03.769446853 +0000 UTC m=+40.000802125 I0329 01:57:03.799978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-q5kqc" condition "Ready" to 2026-03-29 01:57:03.799963218 +0000 UTC m=+40.031318500 I0329 01:57:03.838268 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:57:03.838241537 +0000 UTC m=+40.069596839 I0329 01:57:03.858170 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:57:03.909177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:55.652804 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-29 01:58:55.652735641 +0000 UTC m=+151.884090963 I0329 01:58:55.653215 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:58:55.653314 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-29 01:58:55.653292703 +0000 UTC m=+151.884648085 E0329 01:58:55.670951 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0329 01:58:55.671010 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-29 01:58:55.67100105 +0000 UTC m=+151.902356332 I0329 01:58:55.671075 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0329 01:58:55.673035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:55.673233 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:58:55.673318 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-29 01:58:55.673309065 +0000 UTC m=+151.904664347 E0329 01:58:55.680548 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0329 01:58:55.680733 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0329 01:58:55.680775 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0329 01:58:55.680827 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0329 01:58:55.685289 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-29 01:58:55.68527386 +0000 UTC m=+151.916629172 I0329 01:58:55.685336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:58:55.685384 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-29 01:58:55.685372492 +0000 UTC m=+151.916727774 I0329 01:58:55.746946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:55.747035 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:58:55.747060 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-29 01:58:55.747053502 +0000 UTC m=+151.978408784 I0329 01:58:55.782816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:55.789066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pwmcp" condition "Approved" to 2026-03-29 01:58:55.789040466 +0000 UTC m=+152.020395768 I0329 01:58:55.825421 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pwmcp" condition "Ready" to 2026-03-29 01:58:55.82540455 +0000 UTC m=+152.056759832 I0329 01:58:55.856008 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:58:55.85598947 +0000 UTC m=+152.087344782 I0329 01:58:55.877330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:55.877534 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:58:55.877525593 +0000 UTC m=+152.108880865 I0329 01:58:55.894788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:56.087132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zz8lm" condition "Approved" to 2026-03-29 01:58:56.087118597 +0000 UTC m=+152.318473879 I0329 01:58:56.108143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zz8lm" condition "Ready" to 2026-03-29 01:58:56.108116029 +0000 UTC m=+152.339471331 I0329 01:59:00.682075 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:59:00.682059619 +0000 UTC m=+156.913414921 I0329 01:59:00.702502 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-zz8lm" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:59:00.702486967 +0000 UTC m=+156.933842249 I0329 01:59:00.738748 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:59:00.738733395 +0000 UTC m=+156.970088677 I0329 01:59:00.759235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:59:00.759676 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:59:00.759663143 +0000 UTC m=+156.991018425 I0329 01:59:00.782069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:59:00.782505 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:59:00.782490739 +0000 UTC m=+157.013846041 I0329 01:59:00.788650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:01:38.001894 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-238.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:01:38.002004 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Issuing" to 2026-03-29 02:01:38.001974846 +0000 UTC m=+314.233330188 I0329 02:01:38.002683 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready" to 2026-03-29 02:01:38.0026744 +0000 UTC m=+314.234029712 I0329 02:01:38.026589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:01:38.026644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-238.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:01:38.026658 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Issuing" to 2026-03-29 02:01:38.02665229 +0000 UTC m=+314.258007572 I0329 02:01:38.192078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-238.nip.io-tls-s8g8p" condition "Approved" to 2026-03-29 02:01:38.192051682 +0000 UTC m=+314.423406984 I0329 02:01:38.210650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-238.nip.io-tls-s8g8p" condition "Ready" to 2026-03-29 02:01:38.210633637 +0000 UTC m=+314.441988939 I0329 02:01:38.238429 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:01:38.238417942 +0000 UTC m=+314.469773224 I0329 02:01:38.259193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:01:38.259641 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-238.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:01:38.259632277 +0000 UTC m=+314.490987549 I0329 02:01:38.266686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:01:38.275208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-238.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-238.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:02:51.015485 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-29 02:02:51.015395958 +0000 UTC m=+387.246751270 I0329 02:02:51.015530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:02:51.015764 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-29 02:02:51.015746735 +0000 UTC m=+387.247102017 E0329 02:02:51.028926 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0329 02:02:51.028986 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-29 02:02:51.028974954 +0000 UTC m=+387.260330246 E0329 02:02:51.029172 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0329 02:02:51.031522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:02:51.031639 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:02:51.031668 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-29 02:02:51.031659797 +0000 UTC m=+387.263015079 E0329 02:02:51.039150 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0329 02:02:51.039506 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 02:02:51.039568 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 02:02:51.039750 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0329 02:02:51.075086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dhjkp" condition "Approved" to 2026-03-29 02:02:51.075063812 +0000 UTC m=+387.306419084 I0329 02:02:51.076121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:02:51.087455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dhjkp" condition "Ready" to 2026-03-29 02:02:51.087444566 +0000 UTC m=+387.318799848 I0329 02:02:51.110795 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:02:51.110781986 +0000 UTC m=+387.342137288 I0329 02:02:51.130607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:02:51.177827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:02:56.040128 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:02:56.040108881 +0000 UTC m=+392.271464193 I0329 02:03:36.795378 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-29 02:03:36.795365612 +0000 UTC m=+433.026720884 I0329 02:03:36.795642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:36.795658 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-29 02:03:36.795655398 +0000 UTC m=+433.027010670 I0329 02:03:36.795787 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-29 02:03:36.7957848 +0000 UTC m=+433.027140072 I0329 02:03:36.795949 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:36.795963 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-29 02:03:36.795961274 +0000 UTC m=+433.027316536 I0329 02:03:36.809266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:36.809306 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-29 02:03:36.809298897 +0000 UTC m=+433.040654169 I0329 02:03:36.809526 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-29 02:03:36.809499611 +0000 UTC m=+433.040854923 I0329 02:03:36.856979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:36.857050 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-29 02:03:36.85704235 +0000 UTC m=+433.088397622 I0329 02:03:36.858246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:36.858440 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-29 02:03:36.858430237 +0000 UTC m=+433.089785519 I0329 02:03:36.866015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:36.866102 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:36.866173 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-29 02:03:36.86616491 +0000 UTC m=+433.097520202 I0329 02:03:37.125796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w2wnd" condition "Approved" to 2026-03-29 02:03:37.12578419 +0000 UTC m=+433.357139472 I0329 02:03:37.148004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-w2wnd" condition "Ready" to 2026-03-29 02:03:37.147990849 +0000 UTC m=+433.379346131 I0329 02:03:37.188538 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:37.188526209 +0000 UTC m=+433.419881491 I0329 02:03:37.209333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:37.213896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:37.214332 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:37.214320759 +0000 UTC m=+433.445676041 I0329 02:03:37.264766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:37.265462 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n72g6" condition "Approved" to 2026-03-29 02:03:37.265121773 +0000 UTC m=+433.496477035 I0329 02:03:37.286301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n72g6" condition "Ready" to 2026-03-29 02:03:37.286285841 +0000 UTC m=+433.517641123 I0329 02:03:37.336909 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:37.336998 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-29 02:03:37.336986453 +0000 UTC m=+433.568341765 I0329 02:03:37.354968 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:37.354959148 +0000 UTC m=+433.586314440 I0329 02:03:37.365275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:37.391846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:37.392465 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:37.392453759 +0000 UTC m=+433.623809041 I0329 02:03:37.635052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:37.740544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-47pqx" condition "Approved" to 2026-03-29 02:03:37.740524526 +0000 UTC m=+433.971879818 I0329 02:03:37.988959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-47pqx" condition "Ready" to 2026-03-29 02:03:37.988933455 +0000 UTC m=+434.220288767 I0329 02:03:38.242882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dglv2" condition "Approved" to 2026-03-29 02:03:38.242861831 +0000 UTC m=+434.474217113 I0329 02:03:38.647062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dglv2" condition "Ready" to 2026-03-29 02:03:38.647045828 +0000 UTC m=+434.878401130 I0329 02:03:39.034594 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:39.034571694 +0000 UTC m=+435.265926996 I0329 02:03:39.250434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:39.250962 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:39.250946599 +0000 UTC m=+435.482301911 I0329 02:03:39.534068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:39.635061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:45.082592 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bmk9-tls" condition "Ready" to 2026-03-29 02:03:45.082568151 +0000 UTC m=+441.313923453 I0329 02:03:45.082848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bmk9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:45.082928 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bmk9-tls" condition "Issuing" to 2026-03-29 02:03:45.082915368 +0000 UTC m=+441.314270650 I0329 02:03:45.099760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bmk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4bmk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:45.099893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bmk9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:45.099951 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bmk9-tls" condition "Issuing" to 2026-03-29 02:03:45.099942544 +0000 UTC m=+441.331297826 I0329 02:03:45.324488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4bmk9-9hmd5" condition "Approved" to 2026-03-29 02:03:45.324472551 +0000 UTC m=+441.555827833 I0329 02:03:45.345023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4bmk9-9hmd5" condition "Ready" to 2026-03-29 02:03:45.345009807 +0000 UTC m=+441.576365089 I0329 02:03:45.376664 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4bmk9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:45.376643312 +0000 UTC m=+441.607998584 I0329 02:03:45.395126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4bmk9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4bmk9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:04:11.743696 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-29 02:04:11.743673286 +0000 UTC m=+467.975028598 I0329 02:04:11.743988 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:04:11.744098 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-29 02:04:11.744043413 +0000 UTC m=+467.975398725 I0329 02:04:11.762261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:04:11.762370 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:04:11.762424 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-29 02:04:11.762414146 +0000 UTC m=+467.993769458 I0329 02:04:12.159664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:04:12.172344 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pxsb9" condition "Approved" to 2026-03-29 02:04:12.172325575 +0000 UTC m=+468.403680877 I0329 02:04:12.198661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pxsb9" condition "Ready" to 2026-03-29 02:04:12.198644396 +0000 UTC m=+468.429999678 I0329 02:04:12.235402 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:04:12.235385562 +0000 UTC m=+468.466740844 I0329 02:04:12.253068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:04:12.253565 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:04:12.25355621 +0000 UTC m=+468.484911492 I0329 02:04:12.274282 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:42.318134 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:07:42.318437 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-29 02:07:42.317856043 +0000 UTC m=+678.549211345 I0329 02:07:42.318576 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-29 02:07:42.31825474 +0000 UTC m=+678.549610042 I0329 02:07:42.335293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:42.335434 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:07:42.335473 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-29 02:07:42.335465292 +0000 UTC m=+678.566820574 I0329 02:07:42.599537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:42.607881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vlm75" condition "Approved" to 2026-03-29 02:07:42.607870534 +0000 UTC m=+678.839225816 I0329 02:07:42.629044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vlm75" condition "Ready" to 2026-03-29 02:07:42.629032995 +0000 UTC m=+678.860388277 I0329 02:07:42.658765 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:07:42.658746976 +0000 UTC m=+678.890102258 I0329 02:07:42.677413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:10:15.664339 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:10:15.664398 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-29 02:10:15.664389777 +0000 UTC m=+831.895745059 I0329 02:10:15.664401 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-29 02:10:15.664390697 +0000 UTC m=+831.895745969 I0329 02:10:15.683578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:10:15.683735 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-29 02:10:15.683726262 +0000 UTC m=+831.915081544 I0329 02:10:15.989014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:10:16.034669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-js78z" condition "Approved" to 2026-03-29 02:10:16.034653298 +0000 UTC m=+832.266008580 I0329 02:10:16.057411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-js78z" condition "Ready" to 2026-03-29 02:10:16.05738961 +0000 UTC m=+832.288744902 I0329 02:10:16.090366 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:10:16.090346796 +0000 UTC m=+832.321702108 I0329 02:10:16.115179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:10:16.174182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:11:24.199453 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-29 02:11:24.19942946 +0000 UTC m=+900.430784742 I0329 02:11:24.199577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:11:24.199620 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-29 02:11:24.199612614 +0000 UTC m=+900.430967896 I0329 02:11:24.217659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:11:24.217832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:11:24.217885 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-29 02:11:24.217866878 +0000 UTC m=+900.449222190 I0329 02:11:24.376112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-z6m8m" condition "Approved" to 2026-03-29 02:11:24.376100237 +0000 UTC m=+900.607455519 I0329 02:11:24.396245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-z6m8m" condition "Ready" to 2026-03-29 02:11:24.396203998 +0000 UTC m=+900.627559270 I0329 02:11:24.432155 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:11:24.432133332 +0000 UTC m=+900.663488634 I0329 02:11:24.460231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:11:24.460555 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:11:24.460547218 +0000 UTC m=+900.691902500 I0329 02:11:24.464866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:11:24.486564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:11:24.486978 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:11:24.486966714 +0000 UTC m=+900.718321996 I0329 02:11:24.488936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:14:34.321548 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-29 02:14:34.321530647 +0000 UTC m=+1090.552886399 I0329 02:14:34.321614 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:14:34.321684 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-29 02:14:34.32167554 +0000 UTC m=+1090.553030842 I0329 02:14:34.344690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:14:34.344798 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-29 02:14:34.34478936 +0000 UTC m=+1090.576144642 I0329 02:14:34.623059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:14:34.658083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-fjsvr" condition "Approved" to 2026-03-29 02:14:34.658056071 +0000 UTC m=+1090.889411353 I0329 02:14:34.678209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-fjsvr" condition "Ready" to 2026-03-29 02:14:34.678192413 +0000 UTC m=+1090.909547715 I0329 02:14:34.712835 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:14:34.712817563 +0000 UTC m=+1090.944172855 I0329 02:14:34.746292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:14:34.746619 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:14:34.746612846 +0000 UTC m=+1090.977968108 I0329 02:14:34.760182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:14:34.760407 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:14:34.760401101 +0000 UTC m=+1090.991756373