I0416 16:33:57.808432 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0416 16:33:57.808633 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0416 16:33:57.808747 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0416 16:33:57.815215 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0416 16:33:57.815737 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0416 16:33:57.815859 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0416 16:33:57.815869 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0416 16:33:57.819309 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0416 16:33:57.836725 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0416 16:33:57.842890 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0416 16:33:57.847806 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0416 16:33:57.847892 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0416 16:33:57.853023 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0416 16:33:57.857371 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0416 16:33:57.857406 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0416 16:33:57.857504 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0416 16:33:57.861305 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0416 16:33:57.861418 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0416 16:33:57.864032 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0416 16:33:57.865905 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0416 16:33:57.867977 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0416 16:33:57.869747 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0416 16:33:57.871437 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0416 16:33:57.876575 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0416 16:33:57.876701 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0416 16:33:57.880541 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0416 16:33:57.883149 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0416 16:33:57.883267 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0416 16:33:57.885853 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0416 16:33:57.888609 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0416 16:33:57.891228 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0416 16:33:57.893371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0416 16:33:57.895782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0416 16:33:57.898564 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:33:57.899450 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:33:57.900224 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:33:57.902057 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:33:57.918781 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:33:57.980876 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:33:58.003281 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:33:58.004672 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:33:58.024959 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:33:58.042545 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0416 16:34:11.969224 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-16 16:34:11.96905179 +0000 UTC m=+14.200643342 I0416 16:34:12.722049 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 16:34:12.722033094 +0000 UTC m=+14.953624676 I0416 16:34:12.722370 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:34:12.722464 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-16 16:34:12.722450445 +0000 UTC m=+14.954042027 E0416 16:34:12.751206 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:34:12.751276 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-16 16:34:12.751266168 +0000 UTC m=+14.982857740 E0416 16:34:12.751426 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:34:12.755775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:12.755863 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-16 16:34:12.755854743 +0000 UTC m=+14.987446295 E0416 16:34:12.787672 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0416 16:34:12.787913 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:34:12.787949 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:34:12.787977 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0416 16:34:12.796897 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:12.945085 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tzhkw" condition "Approved" to 2026-04-16 16:34:12.945071345 +0000 UTC m=+15.176662897 I0416 16:34:13.081898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tzhkw" condition "Ready" to 2026-04-16 16:34:13.08185044 +0000 UTC m=+15.313442012 I0416 16:34:13.148127 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:13.148104753 +0000 UTC m=+15.379696315 I0416 16:34:13.251720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:13.252313 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:13.252303107 +0000 UTC m=+15.483894689 I0416 16:34:13.270120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:13.310886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:17.788476 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:17.788404048 +0000 UTC m=+20.019995630 I0416 16:34:58.051119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:34:58.051280 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-16 16:34:58.051269358 +0000 UTC m=+60.282860920 I0416 16:34:58.051330 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 16:34:58.051308769 +0000 UTC m=+60.282900341 I0416 16:34:58.081738 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-16 16:34:58.081720137 +0000 UTC m=+60.313311709 I0416 16:34:58.086834 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:58.086925 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-16 16:34:58.086919006 +0000 UTC m=+60.318510548 I0416 16:34:58.238959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:58.281399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t622n" condition "Approved" to 2026-04-16 16:34:58.281383756 +0000 UTC m=+60.512975318 I0416 16:34:58.315379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-t622n" condition "Ready" to 2026-04-16 16:34:58.315367187 +0000 UTC m=+60.546958729 I0416 16:34:58.346369 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:58.346349669 +0000 UTC m=+60.577941241 I0416 16:34:58.373569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:58.374206 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:34:58.374194271 +0000 UTC m=+60.605785823 I0416 16:34:58.388086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:34:58.402990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:51.096973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:40:51.097116 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-04-16 16:40:51.097090791 +0000 UTC m=+413.328682363 I0416 16:40:51.098210 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-04-16 16:40:51.098191455 +0000 UTC m=+413.329783027 I0416 16:40:51.136173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:51.136250 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-04-16 16:40:51.136241863 +0000 UTC m=+413.367833445 I0416 16:40:51.221155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:51.281773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-s77dl" condition "Approved" to 2026-04-16 16:40:51.28174801 +0000 UTC m=+413.513339592 I0416 16:40:51.349819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-s77dl" condition "Ready" to 2026-04-16 16:40:51.349802693 +0000 UTC m=+413.581394275 I0416 16:40:51.463645 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:51.463630777 +0000 UTC m=+413.695222349 I0416 16:40:51.493668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:40:51.494012 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:40:51.494005161 +0000 UTC m=+413.725596703 I0416 16:40:51.535134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:02.606339 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-16 16:42:02.606320348 +0000 UTC m=+484.837911930 I0416 16:42:02.606455 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:42:02.606514 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 16:42:02.606501882 +0000 UTC m=+484.838093454 E0416 16:42:02.620665 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:42:02.620783 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-16 16:42:02.620771565 +0000 UTC m=+484.852363127 E0416 16:42:02.620892 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0416 16:42:02.623370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:02.623447 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:42:02.623466 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-16 16:42:02.623459425 +0000 UTC m=+484.855050977 E0416 16:42:02.631904 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0416 16:42:02.632027 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:42:02.632064 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0416 16:42:02.632098 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0416 16:42:02.661483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:02.665612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qvzrs" condition "Approved" to 2026-04-16 16:42:02.665593866 +0000 UTC m=+484.897185428 I0416 16:42:02.678342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-qvzrs" condition "Ready" to 2026-04-16 16:42:02.678330054 +0000 UTC m=+484.909921606 I0416 16:42:02.705769 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:42:02.705751833 +0000 UTC m=+484.937343405 I0416 16:42:02.720484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:02.720744 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:42:02.720735641 +0000 UTC m=+484.952327193 I0416 16:42:02.735815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:02.740542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:07.632834 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:42:07.632821184 +0000 UTC m=+489.864412766 I0416 16:42:45.847572 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:42:45.847640 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 16:42:45.847623135 +0000 UTC m=+528.079214677 I0416 16:42:45.848036 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-16 16:42:45.848032024 +0000 UTC m=+528.079623566 I0416 16:42:45.856457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:42:45.857728 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-16 16:42:45.857666981 +0000 UTC m=+528.089258543 I0416 16:42:45.858424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:42:45.858513 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-16 16:42:45.858508251 +0000 UTC m=+528.090099823 I0416 16:42:45.858656 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 16:42:45.858643604 +0000 UTC m=+528.090235166 I0416 16:42:45.858782 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 16:42:45.858239955 +0000 UTC m=+528.089831507 I0416 16:42:45.887788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:45.887856 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-16 16:42:45.887848752 +0000 UTC m=+528.119440304 I0416 16:42:45.888207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:45.888246 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:42:45.888263 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-16 16:42:45.888259811 +0000 UTC m=+528.119851363 I0416 16:42:45.898221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:45.900148 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-16 16:42:45.90013223 +0000 UTC m=+528.131732182 I0416 16:42:46.016310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:46.017926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:46.047120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vxj65" condition "Approved" to 2026-04-16 16:42:46.047105697 +0000 UTC m=+528.278697259 I0416 16:42:46.049824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7hgd9" condition "Approved" to 2026-04-16 16:42:46.049818598 +0000 UTC m=+528.281410140 I0416 16:42:46.061599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vxj65" condition "Ready" to 2026-04-16 16:42:46.061588033 +0000 UTC m=+528.293179585 I0416 16:42:46.066709 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-7hgd9" condition "Ready" to 2026-04-16 16:42:46.066698739 +0000 UTC m=+528.298290301 I0416 16:42:46.099603 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:42:46.099595782 +0000 UTC m=+528.331187314 I0416 16:42:46.107201 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:42:46.107191772 +0000 UTC m=+528.338783314 I0416 16:42:46.121985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:46.127769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:46.128211 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:42:46.128201617 +0000 UTC m=+528.359793189 I0416 16:42:46.332773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:46.381312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:46.893840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-486s9" condition "Approved" to 2026-04-16 16:42:46.893819516 +0000 UTC m=+529.125411088 I0416 16:42:47.099088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-486s9" condition "Ready" to 2026-04-16 16:42:47.09907701 +0000 UTC m=+529.330668562 I0416 16:42:47.483710 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:42:47.48368882 +0000 UTC m=+529.715280392 I0416 16:42:47.584029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:47.584488 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:42:47.584477595 +0000 UTC m=+529.816069167 I0416 16:42:47.782714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:56.244614 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cz2zn-tls" condition "Ready" to 2026-04-16 16:42:56.244593719 +0000 UTC m=+538.476185301 I0416 16:42:56.244868 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cz2zn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:42:56.244935 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cz2zn-tls" condition "Issuing" to 2026-04-16 16:42:56.244920196 +0000 UTC m=+538.476511768 I0416 16:42:56.286706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cz2zn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cz2zn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:56.286836 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cz2zn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:42:56.286867 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cz2zn-tls" condition "Issuing" to 2026-04-16 16:42:56.286859263 +0000 UTC m=+538.518450815 I0416 16:42:56.457276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cz2zn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cz2zn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:42:56.461816 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cz2zn-rnjnj" condition "Approved" to 2026-04-16 16:42:56.461800642 +0000 UTC m=+538.693392194 I0416 16:42:56.493215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cz2zn-rnjnj" condition "Ready" to 2026-04-16 16:42:56.49320408 +0000 UTC m=+538.724795622 I0416 16:42:56.521850 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cz2zn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:42:56.521830926 +0000 UTC m=+538.753422528 I0416 16:42:56.549260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cz2zn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cz2zn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:43:50.629021 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:43:50.629058 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-16 16:43:50.629052401 +0000 UTC m=+592.860643963 I0416 16:43:50.629028 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 16:43:50.628986089 +0000 UTC m=+592.860577641 I0416 16:43:50.649454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:43:50.649634 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-16 16:43:50.649601474 +0000 UTC m=+592.881193026 I0416 16:43:50.732896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:43:50.760863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pwdnh" condition "Approved" to 2026-04-16 16:43:50.760851916 +0000 UTC m=+592.992443458 I0416 16:43:50.784560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-pwdnh" condition "Ready" to 2026-04-16 16:43:50.78454867 +0000 UTC m=+593.016140222 I0416 16:43:50.821523 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:43:50.821499284 +0000 UTC m=+593.053090846 I0416 16:43:50.841559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:43:50.842047 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:43:50.842038678 +0000 UTC m=+593.073630230 I0416 16:43:50.861121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:47:23.281479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:47:23.281509 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-16 16:47:23.281492825 +0000 UTC m=+805.513084417 I0416 16:47:23.281527 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 16:47:23.281517406 +0000 UTC m=+805.513108988 I0416 16:47:23.297407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:47:23.298137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:47:23.298174 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-16 16:47:23.298165881 +0000 UTC m=+805.529757453 I0416 16:47:23.438379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:47:23.449313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cbzcn" condition "Approved" to 2026-04-16 16:47:23.449298807 +0000 UTC m=+805.680890389 I0416 16:47:23.466788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cbzcn" condition "Ready" to 2026-04-16 16:47:23.46677653 +0000 UTC m=+805.698368082 I0416 16:47:23.492048 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:47:23.492032979 +0000 UTC m=+805.723624521 I0416 16:47:23.513968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:47:23.514247 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:47:23.51424234 +0000 UTC m=+805.745833882 I0416 16:47:23.555785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:47:23.560066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:47:23.560441 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:47:23.56043119 +0000 UTC m=+805.792022752 I0416 16:49:56.527936 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-16 16:49:56.527880399 +0000 UTC m=+958.759471981 I0416 16:49:56.527955 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:49:56.528033 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-16 16:49:56.528023202 +0000 UTC m=+958.759614784 I0416 16:49:56.543953 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:49:56.544053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:49:56.544082 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-16 16:49:56.544073405 +0000 UTC m=+958.775664977 I0416 16:49:56.855148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:49:56.870481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-7xm8r" condition "Approved" to 2026-04-16 16:49:56.870466934 +0000 UTC m=+959.102058466 I0416 16:49:56.914776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-7xm8r" condition "Ready" to 2026-04-16 16:49:56.914764684 +0000 UTC m=+959.146356226 I0416 16:49:56.937211 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:49:56.93719336 +0000 UTC m=+959.168784942 I0416 16:49:56.955609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:49:56.958054 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:49:56.95804651 +0000 UTC m=+959.189638062 I0416 16:49:56.974660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:49:56.976805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:49:56.977688 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:49:56.977676314 +0000 UTC m=+959.209267896 I0416 16:51:12.075006 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-16 16:51:12.074976172 +0000 UTC m=+1034.306567724 I0416 16:51:12.075058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:51:12.075149 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-16 16:51:12.075138726 +0000 UTC m=+1034.306730308 I0416 16:51:12.104324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:51:12.104464 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:51:12.104510 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-16 16:51:12.104503249 +0000 UTC m=+1034.336094801 I0416 16:51:12.478814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-28c7w" condition "Approved" to 2026-04-16 16:51:12.478798559 +0000 UTC m=+1034.710390131 I0416 16:51:12.496416 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-28c7w" condition "Ready" to 2026-04-16 16:51:12.496407537 +0000 UTC m=+1034.727999079 I0416 16:51:12.525114 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:51:12.525101025 +0000 UTC m=+1034.756692587 I0416 16:51:12.548131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:51:12.548523 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:51:12.548516855 +0000 UTC m=+1034.780108407 I0416 16:51:12.553725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:51:12.562904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:51:12.563092 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:51:12.563085214 +0000 UTC m=+1034.794676756 I0416 16:54:52.243808 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0416 16:54:52.243864 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-16 16:54:52.243858087 +0000 UTC m=+1254.475449639 I0416 16:54:52.243880 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-16 16:54:52.243857257 +0000 UTC m=+1254.475448829 I0416 16:54:52.259094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:54:52.259205 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-16 16:54:52.259195303 +0000 UTC m=+1254.490786855 I0416 16:54:52.406209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0416 16:54:52.436732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-fvfw4" condition "Approved" to 2026-04-16 16:54:52.436723298 +0000 UTC m=+1254.668314840 I0416 16:54:52.454232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-fvfw4" condition "Ready" to 2026-04-16 16:54:52.454221274 +0000 UTC m=+1254.685812826 I0416 16:54:52.480007 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-16 16:54:52.479993826 +0000 UTC m=+1254.711585378 I0416 16:54:52.504411 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"