I0418 22:18:06.539475 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0418 22:18:06.539628 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0418 22:18:06.539720 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0418 22:18:06.545451 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0418 22:18:06.545970 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0418 22:18:06.546050 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0418 22:18:06.546188 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0418 22:18:06.549728 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0418 22:18:06.566594 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0418 22:18:06.571238 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0418 22:18:06.574408 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0418 22:18:06.579431 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0418 22:18:06.579483 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0418 22:18:06.582097 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0418 22:18:06.584309 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0418 22:18:06.586612 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0418 22:18:06.588974 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0418 22:18:06.591121 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0418 22:18:06.593381 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0418 22:18:06.593458 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0418 22:18:06.593546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0418 22:18:06.599571 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0418 22:18:06.603332 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0418 22:18:06.605540 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0418 22:18:06.605627 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0418 22:18:06.607783 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0418 22:18:06.607868 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0418 22:18:06.610307 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0418 22:18:06.612755 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0418 22:18:06.614992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0418 22:18:06.617475 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0418 22:18:06.623440 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0418 22:18:06.623556 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0418 22:18:06.625828 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:18:06.626327 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:18:06.626993 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:18:06.643736 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:18:06.661294 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:18:06.679107 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:18:06.691752 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:18:06.708451 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:18:06.716764 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:18:06.724803 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 22:18:19.270577 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-18 22:18:19.270564497 +0000 UTC m=+12.765752389 I0418 22:18:20.010909 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:18:20.011029 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 22:18:20.011018101 +0000 UTC m=+13.506206003 I0418 22:18:20.011082 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 22:18:20.011070913 +0000 UTC m=+13.506258825 E0418 22:18:20.025577 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:18:20.025649 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-18 22:18:20.025641703 +0000 UTC m=+13.520829585 E0418 22:18:20.025671 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:18:20.026270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:20.026319 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 22:18:20.026313313 +0000 UTC m=+13.521501195 E0418 22:18:20.041149 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0418 22:18:20.041228 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:18:20.041454 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:18:20.041508 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0418 22:18:20.043624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:20.043761 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 22:18:20.043680605 +0000 UTC m=+13.538868487 I0418 22:18:20.046099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:20.052254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cllcw" condition "Approved" to 2026-04-18 22:18:20.052238418 +0000 UTC m=+13.547426320 I0418 22:18:20.053000 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 22:18:20.05299396 +0000 UTC m=+13.548181842 I0418 22:18:20.066374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:20.067482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-cllcw" condition "Ready" to 2026-04-18 22:18:20.067469718 +0000 UTC m=+13.562657600 I0418 22:18:20.092281 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:20.092270929 +0000 UTC m=+13.587458821 I0418 22:18:20.108926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:20.109156 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:20.109150278 +0000 UTC m=+13.604338150 I0418 22:18:20.116473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:20.128359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:25.041603 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:25.041586483 +0000 UTC m=+18.536774385 I0418 22:18:46.215737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:18:46.215825 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 22:18:46.215818365 +0000 UTC m=+39.711006247 I0418 22:18:46.215764 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-18 22:18:46.215753493 +0000 UTC m=+39.710941385 I0418 22:18:46.226289 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-18 22:18:46.226264224 +0000 UTC m=+39.721452106 I0418 22:18:46.242351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:46.242456 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-18 22:18:46.242445462 +0000 UTC m=+39.737633354 I0418 22:18:46.375867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:46.418217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qsmkk" condition "Approved" to 2026-04-18 22:18:46.418196516 +0000 UTC m=+39.913384488 I0418 22:18:46.446826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qsmkk" condition "Ready" to 2026-04-18 22:18:46.446807888 +0000 UTC m=+39.941995800 I0418 22:18:46.479734 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:18:46.479722519 +0000 UTC m=+39.974910411 I0418 22:18:46.500712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:18:46.555718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:29.345716 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:20:29.345801 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-18 22:20:29.345789967 +0000 UTC m=+142.840977869 I0418 22:20:29.345816 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-18 22:20:29.345798037 +0000 UTC m=+142.840985969 E0418 22:20:29.364953 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 22:20:29.365033 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-18 22:20:29.365021906 +0000 UTC m=+142.860209788 I0418 22:20:29.365096 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 22:20:29.365426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:29.366389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:20:29.366452 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-18 22:20:29.366441426 +0000 UTC m=+142.861629308 E0418 22:20:29.375843 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0418 22:20:29.376896 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 22:20:29.376936 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0418 22:20:29.376968 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0418 22:20:29.381911 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:20:29.381951 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-18 22:20:29.381941793 +0000 UTC m=+142.877129675 I0418 22:20:29.382330 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-18 22:20:29.382323763 +0000 UTC m=+142.877511645 I0418 22:20:29.404038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:29.404168 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-18 22:20:29.404156285 +0000 UTC m=+142.899344167 I0418 22:20:29.501988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:29.532901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-hqhjn" condition "Approved" to 2026-04-18 22:20:29.532881041 +0000 UTC m=+143.028068943 I0418 22:20:29.555182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-hqhjn" condition "Ready" to 2026-04-18 22:20:29.555160415 +0000 UTC m=+143.050348327 I0418 22:20:29.595288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:29.603800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5snsg" condition "Approved" to 2026-04-18 22:20:29.603782674 +0000 UTC m=+143.098970556 I0418 22:20:29.635151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5snsg" condition "Ready" to 2026-04-18 22:20:29.635134908 +0000 UTC m=+143.130322780 I0418 22:20:29.668991 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:20:29.66897239 +0000 UTC m=+143.164160262 I0418 22:20:29.689639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:29.689910 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:20:29.689902866 +0000 UTC m=+143.185090738 I0418 22:20:29.709069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:34.377190 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:20:34.377175758 +0000 UTC m=+147.872363660 I0418 22:20:34.391560 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-hqhjn" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:20:34.391543111 +0000 UTC m=+147.886730993 I0418 22:20:34.423180 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:20:34.423158468 +0000 UTC m=+147.918346380 I0418 22:20:34.443677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:20:34.444061 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:20:34.444048621 +0000 UTC m=+147.939236503 I0418 22:20:34.466677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:23:07.433177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:23:07.433233 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-04-18 22:23:07.433219826 +0000 UTC m=+300.928407748 I0418 22:23:07.433572 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-04-18 22:23:07.433556245 +0000 UTC m=+300.928744157 I0418 22:23:07.449555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:23:07.449658 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:23:07.449686 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-04-18 22:23:07.449676843 +0000 UTC m=+300.944864745 I0418 22:23:07.784909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-jxhhm" condition "Approved" to 2026-04-18 22:23:07.784886701 +0000 UTC m=+301.280074603 I0418 22:23:07.806248 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-jxhhm" condition "Ready" to 2026-04-18 22:23:07.806214971 +0000 UTC m=+301.301402873 I0418 22:23:07.835329 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:23:07.835318051 +0000 UTC m=+301.330505933 I0418 22:23:07.860940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:23:07.861299 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:23:07.861289417 +0000 UTC m=+301.356477329 I0418 22:23:07.883974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:24:18.380605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:24:18.380649 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 22:24:18.380640072 +0000 UTC m=+371.875827964 I0418 22:24:18.380731 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 22:24:18.380710154 +0000 UTC m=+371.875898056 E0418 22:24:18.394637 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:24:18.394701 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-18 22:24:18.394687543 +0000 UTC m=+371.889875455 E0418 22:24:18.394787 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 22:24:18.394890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:24:18.394965 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:24:18.394989 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 22:24:18.394982531 +0000 UTC m=+371.890170423 E0418 22:24:18.406696 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0418 22:24:18.406816 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:24:18.406842 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 22:24:18.406894 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0418 22:24:18.434460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:24:18.435194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dkhw9" condition "Approved" to 2026-04-18 22:24:18.435176771 +0000 UTC m=+371.930364693 I0418 22:24:18.490698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-dkhw9" condition "Ready" to 2026-04-18 22:24:18.490688527 +0000 UTC m=+371.985876399 I0418 22:24:18.510598 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:24:18.510585117 +0000 UTC m=+372.005773019 I0418 22:24:18.526856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:24:18.527331 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:24:18.527319111 +0000 UTC m=+372.022507023 I0418 22:24:18.538926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:24:18.539313 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:24:18.539303586 +0000 UTC m=+372.034491498 I0418 22:24:18.545237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:24:23.407904 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:24:23.407890045 +0000 UTC m=+376.903077957 I0418 22:25:01.436558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:25:01.436589 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 22:25:01.436584237 +0000 UTC m=+414.931772109 I0418 22:25:01.436559 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 22:25:01.436541496 +0000 UTC m=+414.931729378 I0418 22:25:01.443452 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-18 22:25:01.443434683 +0000 UTC m=+414.938622575 I0418 22:25:01.443792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:25:01.443857 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 22:25:01.443845614 +0000 UTC m=+414.939033496 I0418 22:25:01.448483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:25:01.448518 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 22:25:01.448512181 +0000 UTC m=+414.943700053 I0418 22:25:01.449108 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-18 22:25:01.449101287 +0000 UTC m=+414.944289169 I0418 22:25:01.467468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:01.467525 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:25:01.467542 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 22:25:01.467536788 +0000 UTC m=+414.962724660 I0418 22:25:01.475674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:01.475724 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:25:01.475750 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 22:25:01.475745501 +0000 UTC m=+414.970933383 I0418 22:25:01.486788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:01.487633 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-18 22:25:01.487617594 +0000 UTC m=+414.982805476 I0418 22:25:01.660665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:01.728278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-q4mp7" condition "Approved" to 2026-04-18 22:25:01.728258534 +0000 UTC m=+415.223446406 I0418 22:25:01.750302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-q4mp7" condition "Ready" to 2026-04-18 22:25:01.750292353 +0000 UTC m=+415.245480235 I0418 22:25:01.781604 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:25:01.781591684 +0000 UTC m=+415.276779566 I0418 22:25:01.805037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:01.805383 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:25:01.8053764 +0000 UTC m=+415.300564292 I0418 22:25:01.824249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:01.826598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wnjjt" condition "Approved" to 2026-04-18 22:25:01.826591136 +0000 UTC m=+415.321778998 I0418 22:25:01.829547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:01.832641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:01.832961 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:25:01.832953659 +0000 UTC m=+415.328141541 I0418 22:25:01.835423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mw2fs" condition "Approved" to 2026-04-18 22:25:01.835407996 +0000 UTC m=+415.330595878 I0418 22:25:01.840350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wnjjt" condition "Ready" to 2026-04-18 22:25:01.84034021 +0000 UTC m=+415.335528092 I0418 22:25:01.937241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mw2fs" condition "Ready" to 2026-04-18 22:25:01.937226633 +0000 UTC m=+415.432414505 I0418 22:25:02.526300 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:25:02.526289382 +0000 UTC m=+416.021477254 I0418 22:25:02.574673 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:25:02.574662667 +0000 UTC m=+416.069850549 I0418 22:25:02.780046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:02.822522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:02.822980 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:25:02.822968775 +0000 UTC m=+416.318156677 I0418 22:25:03.124965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:09.412843 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l7xz9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:25:09.412895 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l7xz9-tls" condition "Issuing" to 2026-04-18 22:25:09.412884606 +0000 UTC m=+422.908072478 I0418 22:25:09.413593 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l7xz9-tls" condition "Ready" to 2026-04-18 22:25:09.413583085 +0000 UTC m=+422.908770977 I0418 22:25:09.428392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l7xz9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l7xz9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:09.428496 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l7xz9-tls" condition "Ready" to 2026-04-18 22:25:09.42848298 +0000 UTC m=+422.923670882 I0418 22:25:09.591696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l7xz9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l7xz9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:09.625868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-l7xz9-g9ml6" condition "Approved" to 2026-04-18 22:25:09.625854503 +0000 UTC m=+423.121042375 I0418 22:25:09.650701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-l7xz9-g9ml6" condition "Ready" to 2026-04-18 22:25:09.650680698 +0000 UTC m=+423.145868620 I0418 22:25:09.679576 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-l7xz9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:25:09.679561203 +0000 UTC m=+423.174749085 I0418 22:25:09.700064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l7xz9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l7xz9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:31.584677 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-18 22:25:31.584663588 +0000 UTC m=+445.079851470 I0418 22:25:31.584718 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:25:31.584737 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 22:25:31.58473254 +0000 UTC m=+445.079920422 I0418 22:25:31.610454 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:31.610532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:25:31.610552 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 22:25:31.610544011 +0000 UTC m=+445.105731893 I0418 22:25:31.813060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:31.820436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4zmzd" condition "Approved" to 2026-04-18 22:25:31.820422594 +0000 UTC m=+445.315610476 I0418 22:25:31.863749 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-4zmzd" condition "Ready" to 2026-04-18 22:25:31.863738301 +0000 UTC m=+445.358926173 I0418 22:25:31.898706 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:25:31.898694041 +0000 UTC m=+445.393881913 I0418 22:25:31.916196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:31.916639 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:25:31.916632309 +0000 UTC m=+445.411820191 I0418 22:25:31.924537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:25:31.933367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:28:46.923339 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 22:28:46.923282595 +0000 UTC m=+640.418470527 I0418 22:28:46.923404 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:28:46.923500 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-18 22:28:46.923489021 +0000 UTC m=+640.418676933 I0418 22:28:46.941066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:28:46.941143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:28:46.941162 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-18 22:28:46.941157492 +0000 UTC m=+640.436345374 I0418 22:28:47.144444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lpzqq" condition "Approved" to 2026-04-18 22:28:47.144416721 +0000 UTC m=+640.639604623 I0418 22:28:47.161059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lpzqq" condition "Ready" to 2026-04-18 22:28:47.161044915 +0000 UTC m=+640.656232787 I0418 22:28:47.194071 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:28:47.194060484 +0000 UTC m=+640.689248346 I0418 22:28:47.217583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:28:47.218096 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:28:47.218085139 +0000 UTC m=+640.713273021 I0418 22:28:47.241535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:31:18.322998 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-18 22:31:18.3229441 +0000 UTC m=+791.818132012 I0418 22:31:18.323019 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:31:18.323246 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-18 22:31:18.323233638 +0000 UTC m=+791.818421570 I0418 22:31:18.340538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:31:18.340645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:31:18.340671 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-18 22:31:18.340664514 +0000 UTC m=+791.835852396 I0418 22:31:18.538268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:31:18.547513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-krtlr" condition "Approved" to 2026-04-18 22:31:18.547496553 +0000 UTC m=+792.042684436 I0418 22:31:18.573654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-krtlr" condition "Ready" to 2026-04-18 22:31:18.573641978 +0000 UTC m=+792.068829860 I0418 22:31:18.604645 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:31:18.604628084 +0000 UTC m=+792.099815966 I0418 22:31:18.629312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:31:18.630944 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:31:18.630937233 +0000 UTC m=+792.126125105 I0418 22:31:18.650056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:32:21.953816 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-18 22:32:21.953736278 +0000 UTC m=+855.448924200 I0418 22:32:21.953869 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:32:21.954344 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-18 22:32:21.954333804 +0000 UTC m=+855.449521696 I0418 22:32:21.970736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:32:21.970818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:32:21.970890 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-18 22:32:21.970835986 +0000 UTC m=+855.466023888 I0418 22:32:22.353716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:32:22.359720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fc2tn" condition "Approved" to 2026-04-18 22:32:22.359705248 +0000 UTC m=+855.854893130 I0418 22:32:22.381368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fc2tn" condition "Ready" to 2026-04-18 22:32:22.38135564 +0000 UTC m=+855.876543552 I0418 22:32:22.420658 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:32:22.420639105 +0000 UTC m=+855.915826977 I0418 22:32:22.450746 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:32:22.451269 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:32:22.451257524 +0000 UTC m=+855.946445436 I0418 22:32:22.453941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:32:22.470279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:35:29.916240 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-18 22:35:29.916203974 +0000 UTC m=+1043.411391876 I0418 22:35:29.916633 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:35:29.916788 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-18 22:35:29.91677303 +0000 UTC m=+1043.411960942 I0418 22:35:29.934396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:35:29.934484 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 22:35:29.934505 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-18 22:35:29.934498522 +0000 UTC m=+1043.429686434 I0418 22:35:30.115014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 22:35:30.126620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vfg8g" condition "Approved" to 2026-04-18 22:35:30.126604159 +0000 UTC m=+1043.621792041 I0418 22:35:30.151894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vfg8g" condition "Ready" to 2026-04-18 22:35:30.15187935 +0000 UTC m=+1043.647067252 I0418 22:35:30.184300 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 22:35:30.184277669 +0000 UTC m=+1043.679465541 I0418 22:35:30.213946 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"