I0408 01:23:39.150559 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 01:23:39.150693 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 01:23:39.150788 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 01:23:39.156236 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 01:23:39.157279 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 01:23:39.157737 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 01:23:39.157841 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 01:23:39.160777 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 01:23:39.176510 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 01:23:39.176751 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 01:23:39.181540 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 01:23:39.185882 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 01:23:39.189807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 01:23:39.194634 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 01:23:39.198734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 01:23:39.202103 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 01:23:39.203956 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 01:23:39.204019 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 01:23:39.205725 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 01:23:39.205849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 01:23:39.207586 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 01:23:39.209287 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 01:23:39.211204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 01:23:39.214722 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 01:23:39.216409 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 01:23:39.218006 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 01:23:39.218022 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 01:23:39.218029 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 01:23:39.218140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 01:23:39.219812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 01:23:39.221456 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 01:23:39.223133 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 01:23:39.225819 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 01:23:39.227716 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:23:39.228451 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:23:39.231504 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:23:39.232078 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:23:39.244268 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:23:39.264328 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:23:39.280591 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:23:39.296842 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:23:39.311752 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:23:39.317604 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 01:23:56.974974 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 01:23:56.97496232 +0000 UTC m=+17.854570813 I0408 01:23:57.668825 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 01:23:57.668808394 +0000 UTC m=+18.548416917 I0408 01:23:57.668931 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:23:57.668980 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 01:23:57.668973739 +0000 UTC m=+18.548582232 E0408 01:23:57.684233 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 01:23:57.684293 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 01:23:57.684286796 +0000 UTC m=+18.563895289 E0408 01:23:57.684315 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 01:23:57.688088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:57.688187 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 01:23:57.688181285 +0000 UTC m=+18.567789778 E0408 01:23:57.796355 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 01:23:57.796512 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:23:57.796569 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:23:57.796619 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 01:23:57.800665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:57.826458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4749b" condition "Approved" to 2026-04-08 01:23:57.826441282 +0000 UTC m=+18.706049765 I0408 01:23:57.843259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4749b" condition "Ready" to 2026-04-08 01:23:57.843247634 +0000 UTC m=+18.722856127 I0408 01:23:57.866282 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:23:57.866269146 +0000 UTC m=+18.745877639 I0408 01:23:57.888750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:57.889230 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:23:57.889220257 +0000 UTC m=+18.768828760 I0408 01:23:57.901016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:57.903695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:23:57.904066 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:23:57.904057159 +0000 UTC m=+18.783665652 I0408 01:24:02.796928 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:24:02.796908887 +0000 UTC m=+23.676517400 I0408 01:24:30.056674 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 01:24:30.056657122 +0000 UTC m=+50.936265615 I0408 01:24:30.056686 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:24:30.056774 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 01:24:30.056766436 +0000 UTC m=+50.936374929 I0408 01:24:30.072551 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 01:24:30.072537249 +0000 UTC m=+50.952145762 I0408 01:24:30.086836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:30.086989 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 01:24:30.08697533 +0000 UTC m=+50.966583843 I0408 01:24:30.474065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:30.516313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2d664" condition "Approved" to 2026-04-08 01:24:30.516303385 +0000 UTC m=+51.395911868 I0408 01:24:30.553781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-2d664" condition "Ready" to 2026-04-08 01:24:30.553769207 +0000 UTC m=+51.433377680 I0408 01:24:30.596570 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:24:30.596553455 +0000 UTC m=+51.476161968 I0408 01:24:30.619251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:30.619514 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:24:30.619507512 +0000 UTC m=+51.499116005 I0408 01:24:30.644041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:24:30.647021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:26:31.071082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:26:31.071149 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-08 01:26:31.071140505 +0000 UTC m=+171.950748998 I0408 01:26:31.071149 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 01:26:31.071140295 +0000 UTC m=+171.950748798 E0408 01:26:31.085953 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 01:26:31.086015 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-08 01:26:31.086002865 +0000 UTC m=+171.965611388 I0408 01:26:31.086078 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 01:26:31.086677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:26:31.086767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:26:31.086798 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 01:26:31.08678962 +0000 UTC m=+171.966398143 E0408 01:26:31.095728 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0408 01:26:31.095797 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 01:26:31.095815 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0408 01:26:31.095839 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0408 01:26:31.099690 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-08 01:26:31.099674178 +0000 UTC m=+171.979282671 I0408 01:26:31.100024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:26:31.100042 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 01:26:31.100037779 +0000 UTC m=+171.979646272 I0408 01:26:31.120970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:26:31.121059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:26:31.121085 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 01:26:31.121077885 +0000 UTC m=+172.000686398 I0408 01:26:31.231825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-vh5f8" condition "Approved" to 2026-04-08 01:26:31.231814659 +0000 UTC m=+172.111423152 I0408 01:26:31.250193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-vh5f8" condition "Ready" to 2026-04-08 01:26:31.2501776 +0000 UTC m=+172.129786113 I0408 01:26:31.329277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:26:31.351004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-jn4f2" condition "Approved" to 2026-04-08 01:26:31.350994539 +0000 UTC m=+172.230603022 I0408 01:26:31.384914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-jn4f2" condition "Ready" to 2026-04-08 01:26:31.384902162 +0000 UTC m=+172.264510655 I0408 01:26:31.414545 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:26:31.41452694 +0000 UTC m=+172.294135463 I0408 01:26:31.439415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:26:31.439767 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:26:31.439760108 +0000 UTC m=+172.319368611 I0408 01:26:31.450217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:26:31.456675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:26:36.096470 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:26:36.096452211 +0000 UTC m=+176.976060724 I0408 01:26:36.115859 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-vh5f8" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:26:36.115836625 +0000 UTC m=+176.995445138 I0408 01:26:36.150272 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:26:36.150253914 +0000 UTC m=+177.029862437 I0408 01:26:36.168565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:29:18.982440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-49.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:29:18.982500 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Issuing" to 2026-04-08 01:29:18.982491514 +0000 UTC m=+339.862100007 I0408 01:29:18.982512 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready" to 2026-04-08 01:29:18.982505644 +0000 UTC m=+339.862114157 I0408 01:29:18.999168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:29:18.999274 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready" to 2026-04-08 01:29:18.999264104 +0000 UTC m=+339.878872627 I0408 01:29:19.159006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:29:19.194118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-49.nip.io-tls-jl77h" condition "Approved" to 2026-04-08 01:29:19.194096666 +0000 UTC m=+340.073705179 I0408 01:29:19.214826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-49.nip.io-tls-jl77h" condition "Ready" to 2026-04-08 01:29:19.214812331 +0000 UTC m=+340.094420814 I0408 01:29:19.246940 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-49.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:29:19.246925285 +0000 UTC m=+340.126533778 I0408 01:29:19.280901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-49.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-49.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:32.852320 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:30:32.852428 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 01:30:32.852414147 +0000 UTC m=+413.732022660 I0408 01:30:32.852464 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 01:30:32.852438618 +0000 UTC m=+413.732047141 I0408 01:30:32.869812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:32.869889 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 01:30:32.869880359 +0000 UTC m=+413.749488852 E0408 01:30:32.873151 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 01:30:32.873206 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 01:30:32.873197184 +0000 UTC m=+413.752805677 E0408 01:30:32.873266 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:30:32.894466 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 01:30:32.894889 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:30:32.894966 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 01:30:32.895060 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 01:30:32.897327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:32.918478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7s9d6" condition "Approved" to 2026-04-08 01:30:32.918466462 +0000 UTC m=+413.798074955 I0408 01:30:32.933700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-7s9d6" condition "Ready" to 2026-04-08 01:30:32.933684042 +0000 UTC m=+413.813292565 I0408 01:30:32.957138 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:30:32.957124462 +0000 UTC m=+413.836732955 I0408 01:30:32.973734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:30:37.895405 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:30:37.8953883 +0000 UTC m=+418.774996793 I0408 01:31:18.444728 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 01:31:18.444708124 +0000 UTC m=+459.324316627 I0408 01:31:18.445286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:31:18.445354 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 01:31:18.445347995 +0000 UTC m=+459.324956508 I0408 01:31:18.454950 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 01:31:18.454927168 +0000 UTC m=+459.334535671 I0408 01:31:18.455332 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:31:18.455378 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 01:31:18.455369563 +0000 UTC m=+459.334978056 I0408 01:31:18.459786 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 01:31:18.459764682 +0000 UTC m=+459.339373165 I0408 01:31:18.459955 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:31:18.460000 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 01:31:18.459990239 +0000 UTC m=+459.339598722 I0408 01:31:18.497353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:31:18.497449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:31:18.497478 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 01:31:18.497471788 +0000 UTC m=+459.377080281 I0408 01:31:18.499733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:31:18.499790 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 01:31:18.499784201 +0000 UTC m=+459.379392694 I0408 01:31:18.502428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:31:18.504246 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 01:31:18.504235032 +0000 UTC m=+459.383843515 I0408 01:31:18.598504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:31:18.655517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rz2vp" condition "Approved" to 2026-04-08 01:31:18.655506799 +0000 UTC m=+459.535115282 I0408 01:31:18.717167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rz2vp" condition "Ready" to 2026-04-08 01:31:18.717150434 +0000 UTC m=+459.596758957 I0408 01:31:18.765731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:31:18.772380 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:31:18.772429 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 01:31:18.772416777 +0000 UTC m=+459.652025270 I0408 01:31:18.788212 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:31:18.788199057 +0000 UTC m=+459.667807540 I0408 01:31:18.803930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:31:18.808560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:31:18.808965 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:31:18.808951854 +0000 UTC m=+459.688560347 I0408 01:31:18.832966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9ttkv" condition "Approved" to 2026-04-08 01:31:18.832944055 +0000 UTC m=+459.712552548 I0408 01:31:18.855609 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9ttkv" condition "Ready" to 2026-04-08 01:31:18.855593683 +0000 UTC m=+459.735202156 I0408 01:31:19.189665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:31:19.246081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t6b6m" condition "Approved" to 2026-04-08 01:31:19.246053105 +0000 UTC m=+460.125661608 I0408 01:31:19.555510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-t6b6m" condition "Ready" to 2026-04-08 01:31:19.555489218 +0000 UTC m=+460.435097711 I0408 01:31:19.897151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4cwck" condition "Approved" to 2026-04-08 01:31:19.897130922 +0000 UTC m=+460.776739435 I0408 01:31:20.504080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4cwck" condition "Ready" to 2026-04-08 01:31:20.504061218 +0000 UTC m=+461.383669741 I0408 01:31:20.569344 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:31:20.569321228 +0000 UTC m=+461.448929741 I0408 01:31:20.800011 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-4cwck" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-ttk7x" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0408 01:31:20.834249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:31:21.131099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4f8j4" condition "Approved" to 2026-04-08 01:31:21.131074862 +0000 UTC m=+462.010683375 I0408 01:31:21.551451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4f8j4" condition "Ready" to 2026-04-08 01:31:21.551424152 +0000 UTC m=+462.431032675 I0408 01:31:22.003001 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:31:22.002972481 +0000 UTC m=+462.882580994 I0408 01:31:22.235128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:31:30.377251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f5p6r-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:31:30.377284 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f5p6r-tls" condition "Issuing" to 2026-04-08 01:31:30.377277999 +0000 UTC m=+471.256886502 I0408 01:31:30.377249 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f5p6r-tls" condition "Ready" to 2026-04-08 01:31:30.377230487 +0000 UTC m=+471.256839000 I0408 01:31:30.394398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f5p6r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f5p6r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:31:30.394479 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f5p6r-tls" condition "Ready" to 2026-04-08 01:31:30.394470204 +0000 UTC m=+471.274078697 I0408 01:31:30.774562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f5p6r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f5p6r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:31:30.811558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f5p6r-qrppq" condition "Approved" to 2026-04-08 01:31:30.81154438 +0000 UTC m=+471.691152863 I0408 01:31:30.839610 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f5p6r-qrppq" condition "Ready" to 2026-04-08 01:31:30.83959908 +0000 UTC m=+471.719207573 I0408 01:31:30.874226 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f5p6r-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:31:30.874215537 +0000 UTC m=+471.753824020 I0408 01:31:30.898920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f5p6r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f5p6r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:32:06.305566 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:32:06.305601 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 01:32:06.305593369 +0000 UTC m=+507.185201862 I0408 01:32:06.305824 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 01:32:06.305802186 +0000 UTC m=+507.185410699 I0408 01:32:06.321227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:32:06.321500 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 01:32:06.321486107 +0000 UTC m=+507.201094630 I0408 01:32:06.465180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:32:06.504003 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2l2s7" condition "Approved" to 2026-04-08 01:32:06.50399116 +0000 UTC m=+507.383599653 I0408 01:32:06.523441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2l2s7" condition "Ready" to 2026-04-08 01:32:06.523428441 +0000 UTC m=+507.403036964 I0408 01:32:06.552958 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:32:06.552944054 +0000 UTC m=+507.432552537 I0408 01:32:06.577851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:32:06.578677 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:32:06.578663236 +0000 UTC m=+507.458271759 I0408 01:32:06.605064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:35:24.036938 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 01:35:24.036912914 +0000 UTC m=+704.916521427 I0408 01:35:24.037006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:35:24.037671 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 01:35:24.037653007 +0000 UTC m=+704.917261530 I0408 01:35:24.056912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:35:24.057241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:35:24.057357 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 01:35:24.05728 +0000 UTC m=+704.936888493 I0408 01:35:24.386233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:35:24.387095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vtmrk" condition "Approved" to 2026-04-08 01:35:24.387070193 +0000 UTC m=+705.266678686 I0408 01:35:24.411079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vtmrk" condition "Ready" to 2026-04-08 01:35:24.411063903 +0000 UTC m=+705.290672396 I0408 01:35:24.437715 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:35:24.437700347 +0000 UTC m=+705.317308840 I0408 01:35:24.457297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:35:24.457841 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:35:24.457832495 +0000 UTC m=+705.337440988 I0408 01:35:24.480603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:35:24.481988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:35:24.482483 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:35:24.482468657 +0000 UTC m=+705.362077180 I0408 01:37:47.521064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:37:47.521164 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-08 01:37:47.521152874 +0000 UTC m=+848.400761397 I0408 01:37:47.521288 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-08 01:37:47.521262997 +0000 UTC m=+848.400871520 I0408 01:37:47.539026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:37:47.539116 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-08 01:37:47.539107551 +0000 UTC m=+848.418716044 I0408 01:37:47.674672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:37:47.710537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-s9wcv" condition "Approved" to 2026-04-08 01:37:47.710520129 +0000 UTC m=+848.590128652 I0408 01:37:47.734779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-s9wcv" condition "Ready" to 2026-04-08 01:37:47.734764345 +0000 UTC m=+848.614372838 I0408 01:37:47.775366 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:37:47.775348988 +0000 UTC m=+848.654957461 I0408 01:37:47.800789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:37:47.801093 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:37:47.801086661 +0000 UTC m=+848.680695144 I0408 01:37:47.826002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:39:00.475970 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-08 01:39:00.475958959 +0000 UTC m=+921.355567452 I0408 01:39:00.476582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:39:00.476634 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 01:39:00.47663018 +0000 UTC m=+921.356238673 I0408 01:39:00.490182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:39:00.490236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:39:00.490250 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 01:39:00.490245531 +0000 UTC m=+921.369854024 I0408 01:39:00.687087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:39:00.699314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4r7mx" condition "Approved" to 2026-04-08 01:39:00.699302177 +0000 UTC m=+921.578910670 I0408 01:39:00.720338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-4r7mx" condition "Ready" to 2026-04-08 01:39:00.720332422 +0000 UTC m=+921.599940895 I0408 01:39:00.754558 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:39:00.754547263 +0000 UTC m=+921.634155766 I0408 01:39:00.781988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:39:00.782312 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:39:00.78230588 +0000 UTC m=+921.661914353 I0408 01:39:00.802351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:39:00.802878 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:39:00.80286707 +0000 UTC m=+921.682475563 I0408 01:42:03.967397 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-08 01:42:03.967377428 +0000 UTC m=+1104.846985911 I0408 01:42:03.967455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 01:42:03.967633 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 01:42:03.967623656 +0000 UTC m=+1104.847232149 I0408 01:42:03.985544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:42:03.985664 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-08 01:42:03.985651877 +0000 UTC m=+1104.865260390 I0408 01:42:04.103765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 01:42:04.132260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-q697d" condition "Approved" to 2026-04-08 01:42:04.13224539 +0000 UTC m=+1105.011853883 I0408 01:42:04.149658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-q697d" condition "Ready" to 2026-04-08 01:42:04.149645681 +0000 UTC m=+1105.029254174 I0408 01:42:04.175355 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 01:42:04.175339205 +0000 UTC m=+1105.054947698 I0408 01:42:04.196722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"