I0420 14:25:13.291805 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 14:25:13.291963 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 14:25:13.292080 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 14:25:13.297633 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 14:25:13.298153 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 14:25:13.298246 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 14:25:13.298286 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 14:25:13.300262 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 14:25:13.313260 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 14:25:13.316481 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 14:25:13.319242 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 14:25:13.324891 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 14:25:13.327613 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 14:25:13.327647 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 14:25:13.327656 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 14:25:13.330400 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 14:25:13.333482 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 14:25:13.336641 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 14:25:13.336662 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 14:25:13.336735 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 14:25:13.339228 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 14:25:13.339533 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 14:25:13.341897 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 14:25:13.348136 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 14:25:13.352457 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 14:25:13.355276 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 14:25:13.356999 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 14:25:13.358700 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 14:25:13.360468 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 14:25:13.362440 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 14:25:13.363962 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 14:25:13.364004 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 14:25:13.367209 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 14:25:13.370288 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:25:13.370693 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:25:13.370739 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:25:13.371660 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:25:13.388816 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:25:13.403028 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:25:13.421162 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:25:13.434064 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:25:13.451975 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:25:13.461358 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 14:25:23.736855 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 14:25:23.736816723 +0000 UTC m=+10.477337930 I0420 14:25:24.439737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:25:24.439692 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 14:25:24.439676156 +0000 UTC m=+11.180197343 I0420 14:25:24.439802 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 14:25:24.439774258 +0000 UTC m=+11.180295435 E0420 14:25:24.452988 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:25:24.453067 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 14:25:24.453060764 +0000 UTC m=+11.193581941 E0420 14:25:24.453089 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:25:24.453888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:24.453981 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:25:24.454024 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 14:25:24.454013456 +0000 UTC m=+11.194534663 E0420 14:25:24.462262 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 14:25:24.462355 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:25:24.462400 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:25:24.462437 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 14:25:24.494420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:24.504712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hptpq" condition "Approved" to 2026-04-20 14:25:24.504680488 +0000 UTC m=+11.245201705 I0420 14:25:24.518362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-hptpq" condition "Ready" to 2026-04-20 14:25:24.518351453 +0000 UTC m=+11.258872630 I0420 14:25:24.538200 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:24.53818385 +0000 UTC m=+11.278705057 I0420 14:25:24.554706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:24.555020 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:24.555013013 +0000 UTC m=+11.295534190 I0420 14:25:24.571207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:24.571624 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:24.571611671 +0000 UTC m=+11.312132878 I0420 14:25:29.463546 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:29.463532359 +0000 UTC m=+16.204053566 I0420 14:25:47.101056 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 14:25:47.10100529 +0000 UTC m=+33.841526467 I0420 14:25:47.101403 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:25:47.101423 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 14:25:47.101419678 +0000 UTC m=+33.841940845 I0420 14:25:47.115961 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 14:25:47.115947161 +0000 UTC m=+33.856468328 I0420 14:25:47.137038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:47.137107 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 14:25:47.137099128 +0000 UTC m=+33.877620305 I0420 14:25:47.226873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:47.263018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xqtp2" condition "Approved" to 2026-04-20 14:25:47.263001763 +0000 UTC m=+34.003522920 I0420 14:25:47.300211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xqtp2" condition "Ready" to 2026-04-20 14:25:47.300197974 +0000 UTC m=+34.040719151 I0420 14:25:47.331141 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:25:47.331126191 +0000 UTC m=+34.071647388 I0420 14:25:47.353009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:25:47.416250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:09.048925 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-22.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:30:09.049005 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Issuing" to 2026-04-20 14:30:09.048995645 +0000 UTC m=+295.789516842 I0420 14:30:09.049179 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-04-20 14:30:09.049155718 +0000 UTC m=+295.789676885 I0420 14:30:09.072466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:09.072543 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready" to 2026-04-20 14:30:09.072534953 +0000 UTC m=+295.813056150 I0420 14:30:09.202245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:09.234660 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-4926w" condition "Approved" to 2026-04-20 14:30:09.234649195 +0000 UTC m=+295.975170372 I0420 14:30:09.261609 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-22.nip.io-tls-4926w" condition "Ready" to 2026-04-20 14:30:09.261585969 +0000 UTC m=+296.002107146 I0420 14:30:09.291193 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:30:09.29116688 +0000 UTC m=+296.031688067 I0420 14:30:09.319102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:09.319642 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-22.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:30:09.319633308 +0000 UTC m=+296.060154485 I0420 14:30:09.326324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:30:09.341665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-22.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-22.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:15.014032 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 14:31:15.013988191 +0000 UTC m=+361.754509368 I0420 14:31:15.014117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:31:15.014239 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 14:31:15.014226577 +0000 UTC m=+361.754747774 E0420 14:31:15.026599 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:31:15.026652 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 14:31:15.026642382 +0000 UTC m=+361.767163559 E0420 14:31:15.026712 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 14:31:15.029487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:15.029624 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 14:31:15.029613426 +0000 UTC m=+361.770134593 E0420 14:31:15.077250 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 14:31:15.077716 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:31:15.077760 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 14:31:15.077825 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 14:31:15.085051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:15.130727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zzhbj" condition "Approved" to 2026-04-20 14:31:15.130717071 +0000 UTC m=+361.871238238 I0420 14:31:15.263093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zzhbj" condition "Ready" to 2026-04-20 14:31:15.263066414 +0000 UTC m=+362.003587611 I0420 14:31:15.289834 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:31:15.289820288 +0000 UTC m=+362.030341465 I0420 14:31:15.311055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:15.370991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:20.078243 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:31:20.078232368 +0000 UTC m=+366.818753545 I0420 14:31:57.795907 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 14:31:57.795892818 +0000 UTC m=+404.536413985 I0420 14:31:57.796220 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 14:31:57.796203075 +0000 UTC m=+404.536724252 I0420 14:31:57.796966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:31:57.797496 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 14:31:57.797486043 +0000 UTC m=+404.538007240 I0420 14:31:57.797462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:31:57.797676 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 14:31:57.797621245 +0000 UTC m=+404.538142452 I0420 14:31:57.803512 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 14:31:57.803494401 +0000 UTC m=+404.544015568 I0420 14:31:57.803672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:31:57.803786 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 14:31:57.803775137 +0000 UTC m=+404.544296334 I0420 14:31:57.829007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:57.829109 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:31:57.829138 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 14:31:57.829128078 +0000 UTC m=+404.569649255 I0420 14:31:57.830182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:57.830254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:31:57.830291 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 14:31:57.830284562 +0000 UTC m=+404.570805749 I0420 14:31:57.831109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:57.831314 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 14:31:57.831303045 +0000 UTC m=+404.571824232 I0420 14:31:57.971674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:58.016868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5jhd7" condition "Approved" to 2026-04-20 14:31:58.016849766 +0000 UTC m=+404.757370963 I0420 14:31:58.034931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-5jhd7" condition "Ready" to 2026-04-20 14:31:58.034915142 +0000 UTC m=+404.775436309 I0420 14:31:58.044437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bk4jr" condition "Approved" to 2026-04-20 14:31:58.044426005 +0000 UTC m=+404.784947202 I0420 14:31:58.060230 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:31:58.060198562 +0000 UTC m=+404.800719739 I0420 14:31:58.063584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bk4jr" condition "Ready" to 2026-04-20 14:31:58.063574224 +0000 UTC m=+404.804095401 I0420 14:31:58.089949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:58.090245 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:31:58.090233452 +0000 UTC m=+404.830754629 I0420 14:31:58.121474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0420 14:31:58.128236 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-m88hk\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0420 14:31:58.138306 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:31:58.138349 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 14:31:58.13834072 +0000 UTC m=+404.878861907 I0420 14:31:58.144232 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:31:58.144221186 +0000 UTC m=+404.884742363 I0420 14:31:58.379911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:58.380371 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:31:58.380360898 +0000 UTC m=+405.120882075 I0420 14:31:58.537193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gvg5v" condition "Approved" to 2026-04-20 14:31:58.537172055 +0000 UTC m=+405.277693222 I0420 14:31:58.579693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:58.637317 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:31:58.637299634 +0000 UTC m=+405.377820831 I0420 14:31:58.941052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gvg5v" condition "Ready" to 2026-04-20 14:31:58.941043038 +0000 UTC m=+405.681564205 I0420 14:31:59.241053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:31:59.289235 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6dhgc" condition "Approved" to 2026-04-20 14:31:59.289221712 +0000 UTC m=+406.029742889 I0420 14:31:59.798318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6dhgc" condition "Ready" to 2026-04-20 14:31:59.798306181 +0000 UTC m=+406.538827368 I0420 14:32:00.181227 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:32:00.181209057 +0000 UTC m=+406.921730264 I0420 14:32:00.381014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:32:00.731345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:32:06.453372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:32:06.453401 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls" condition "Issuing" to 2026-04-20 14:32:06.453397313 +0000 UTC m=+413.193918480 I0420 14:32:06.453375 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls" condition "Ready" to 2026-04-20 14:32:06.453351892 +0000 UTC m=+413.193873059 I0420 14:32:06.468265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:32:06.468450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:32:06.468495 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls" condition "Issuing" to 2026-04-20 14:32:06.468470764 +0000 UTC m=+413.208991941 I0420 14:32:06.588357 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8jwk5-twjrr" condition "Approved" to 2026-04-20 14:32:06.588338284 +0000 UTC m=+413.328859461 I0420 14:32:06.609287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8jwk5-twjrr" condition "Ready" to 2026-04-20 14:32:06.609275971 +0000 UTC m=+413.349797158 I0420 14:32:06.642346 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:32:06.642330157 +0000 UTC m=+413.382851354 I0420 14:32:06.664721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:32:06.665257 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:32:06.665247915 +0000 UTC m=+413.405769092 I0420 14:32:06.668073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:32:06.689817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8jwk5-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:32:35.947657 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:32:35.947697 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 14:32:35.947685238 +0000 UTC m=+442.688206405 I0420 14:32:35.947887 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 14:32:35.947862822 +0000 UTC m=+442.688384089 I0420 14:32:35.962937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:32:35.963080 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:32:35.963156 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 14:32:35.963146998 +0000 UTC m=+442.703668165 I0420 14:32:36.133450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9cmgw" condition "Approved" to 2026-04-20 14:32:36.133436843 +0000 UTC m=+442.873958010 I0420 14:32:36.151865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9cmgw" condition "Ready" to 2026-04-20 14:32:36.151853177 +0000 UTC m=+442.892374354 I0420 14:32:36.176673 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:32:36.176659547 +0000 UTC m=+442.917180724 I0420 14:32:36.196604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:35:50.929636 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 14:35:50.929593581 +0000 UTC m=+637.670114758 I0420 14:35:50.929805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:35:50.929868 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 14:35:50.929854686 +0000 UTC m=+637.670375893 I0420 14:35:50.946209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:35:50.946303 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 14:35:50.94629136 +0000 UTC m=+637.686812537 I0420 14:35:51.065408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:35:51.097452 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-n8dc9" condition "Approved" to 2026-04-20 14:35:51.097434645 +0000 UTC m=+637.837955812 I0420 14:35:51.119558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-n8dc9" condition "Ready" to 2026-04-20 14:35:51.119543122 +0000 UTC m=+637.860064309 I0420 14:35:51.151680 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:35:51.151659764 +0000 UTC m=+637.892180961 I0420 14:35:51.181132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:35:51.181533 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:35:51.181525777 +0000 UTC m=+637.922046954 I0420 14:35:51.197890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:35:51.198378 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:35:51.198366689 +0000 UTC m=+637.938887896 I0420 14:38:13.034277 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 14:38:13.034250069 +0000 UTC m=+779.774771246 I0420 14:38:13.034651 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:38:13.037157 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 14:38:13.037147741 +0000 UTC m=+779.777668918 I0420 14:38:13.055271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:38:13.055343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:38:13.055357 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 14:38:13.055351092 +0000 UTC m=+779.795872279 I0420 14:38:13.194708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-msvp5" condition "Approved" to 2026-04-20 14:38:13.194694857 +0000 UTC m=+779.935216064 I0420 14:38:13.215381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-msvp5" condition "Ready" to 2026-04-20 14:38:13.21537071 +0000 UTC m=+779.955891897 I0420 14:38:13.258480 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:38:13.258464302 +0000 UTC m=+779.998985499 I0420 14:38:13.287721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:38:13.345169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:39:09.633528 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:39:09.633627 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 14:39:09.633610271 +0000 UTC m=+836.374131468 I0420 14:39:09.634927 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 14:39:09.634918199 +0000 UTC m=+836.375439396 I0420 14:39:09.663216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:39:09.663412 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 14:39:09.663400229 +0000 UTC m=+836.403921406 I0420 14:39:10.084239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:39:10.115358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-dvw86" condition "Approved" to 2026-04-20 14:39:10.115340621 +0000 UTC m=+836.855861778 I0420 14:39:10.143252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-dvw86" condition "Ready" to 2026-04-20 14:39:10.143235207 +0000 UTC m=+836.883756384 I0420 14:39:10.173076 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:39:10.173057337 +0000 UTC m=+836.913578514 I0420 14:39:10.200715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:39:10.201020 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:39:10.201015156 +0000 UTC m=+836.941536323 I0420 14:39:10.225663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:42:14.314730 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 14:42:14.314655295 +0000 UTC m=+1021.055176472 I0420 14:42:14.314763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 14:42:14.314841 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 14:42:14.314832189 +0000 UTC m=+1021.055353386 I0420 14:42:14.335353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:42:14.335457 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 14:42:14.33544879 +0000 UTC m=+1021.075969977 I0420 14:42:14.440944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:42:14.474650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-p5zrs" condition "Approved" to 2026-04-20 14:42:14.474640231 +0000 UTC m=+1021.215161398 I0420 14:42:14.494825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-p5zrs" condition "Ready" to 2026-04-20 14:42:14.494811013 +0000 UTC m=+1021.235332190 I0420 14:42:14.528325 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:42:14.52830653 +0000 UTC m=+1021.268827727 I0420 14:42:14.553720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 14:42:14.554029 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 14:42:14.554019721 +0000 UTC m=+1021.294540888 I0420 14:42:14.578552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"