I0407 12:59:59.208054 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 12:59:59.208180 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 12:59:59.208306 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 12:59:59.212270 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 12:59:59.212694 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 12:59:59.212902 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 12:59:59.212912 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 12:59:59.215293 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 12:59:59.230411 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 12:59:59.230744 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 12:59:59.230867 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 12:59:59.230903 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 12:59:59.235687 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 12:59:59.240786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 12:59:59.246412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 12:59:59.249743 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 12:59:59.252575 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 12:59:59.255263 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 12:59:59.255363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 12:59:59.258220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 12:59:59.260238 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 12:59:59.262837 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 12:59:59.269319 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 12:59:59.273982 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 12:59:59.274038 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 12:59:59.274082 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 12:59:59.278426 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 12:59:59.280465 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 12:59:59.282503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 12:59:59.284536 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 12:59:59.286798 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 12:59:59.288726 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 12:59:59.292644 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 12:59:59.296400 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:59.297635 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:59.297643 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:59.298954 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:59.312484 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:59.342925 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:59.353866 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:59.371326 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:59.387930 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 12:59:59.392961 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 13:00:09.728884 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 13:00:09.728860665 +0000 UTC m=+10.558482505 I0407 13:00:10.512005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:00:10.512098 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 13:00:10.512087705 +0000 UTC m=+11.341709535 I0407 13:00:10.512080 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 13:00:10.512063865 +0000 UTC m=+11.341685715 E0407 13:00:10.529777 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:00:10.529962 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 13:00:10.529883621 +0000 UTC m=+11.359505471 E0407 13:00:10.530060 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:00:10.532215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:10.532341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:00:10.532428 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 13:00:10.532418279 +0000 UTC m=+11.362040099 E0407 13:00:10.544271 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 13:00:10.544443 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:00:10.544575 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:00:10.544694 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 13:00:10.576832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4zlds" condition "Approved" to 2026-04-07 13:00:10.576816473 +0000 UTC m=+11.406438323 I0407 13:00:10.592319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4zlds" condition "Ready" to 2026-04-07 13:00:10.592307497 +0000 UTC m=+11.421929317 I0407 13:00:10.628391 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:10.628374469 +0000 UTC m=+11.457996309 I0407 13:00:10.647740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:10.648162 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:10.648150222 +0000 UTC m=+11.477772072 I0407 13:00:10.657201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:10.661315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:10.661615 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:10.661603888 +0000 UTC m=+11.491225708 I0407 13:00:15.545794 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:15.545744771 +0000 UTC m=+16.375366631 I0407 13:00:37.921133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:00:37.921241 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 13:00:37.921186683 +0000 UTC m=+38.750808533 I0407 13:00:37.921927 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 13:00:37.921185573 +0000 UTC m=+38.750807403 I0407 13:00:37.932178 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 13:00:37.932138483 +0000 UTC m=+38.761760303 I0407 13:00:37.947196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:37.947283 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 13:00:37.947273448 +0000 UTC m=+38.776895268 I0407 13:00:38.121816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:38.162760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4h97h" condition "Approved" to 2026-04-07 13:00:38.162734047 +0000 UTC m=+38.992355947 I0407 13:00:38.199510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-4h97h" condition "Ready" to 2026-04-07 13:00:38.199494895 +0000 UTC m=+39.029116735 I0407 13:00:38.233660 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:38.233597124 +0000 UTC m=+39.063218944 I0407 13:00:38.258634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:38.258995 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:38.258982604 +0000 UTC m=+39.088604424 I0407 13:00:38.280827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:38.285523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:00:38.286096 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:00:38.286084582 +0000 UTC m=+39.115706402 I0407 13:02:47.437327 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 13:02:47.437278814 +0000 UTC m=+168.266900654 I0407 13:02:47.437424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:02:47.437567 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-07 13:02:47.43755484 +0000 UTC m=+168.267176680 E0407 13:02:47.455552 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 13:02:47.455657 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-07 13:02:47.455639411 +0000 UTC m=+168.285261261 I0407 13:02:47.455741 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 13:02:47.460010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:47.460133 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-07 13:02:47.460122463 +0000 UTC m=+168.289744273 E0407 13:02:47.473278 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0407 13:02:47.473694 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0407 13:02:47.473670 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-07 13:02:47.473649911 +0000 UTC m=+168.303271741 I0407 13:02:47.473745 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0407 13:02:47.473823 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0407 13:02:47.474389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:02:47.474431 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 13:02:47.474423318 +0000 UTC m=+168.304045168 I0407 13:02:47.492739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:47.492816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:02:47.492832 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-07 13:02:47.492824586 +0000 UTC m=+168.322446396 I0407 13:02:47.701976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-gmpj8" condition "Approved" to 2026-04-07 13:02:47.70196306 +0000 UTC m=+168.531584880 I0407 13:02:47.722328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-gmpj8" condition "Ready" to 2026-04-07 13:02:47.722315972 +0000 UTC m=+168.551937792 I0407 13:02:47.749315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:47.782455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5dqwq" condition "Approved" to 2026-04-07 13:02:47.782438368 +0000 UTC m=+168.612060188 I0407 13:02:47.812296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5dqwq" condition "Ready" to 2026-04-07 13:02:47.812279777 +0000 UTC m=+168.641901597 I0407 13:02:47.843939 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:47.843919856 +0000 UTC m=+168.673541666 I0407 13:02:47.864900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:47.865276 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:47.865267541 +0000 UTC m=+168.694889361 I0407 13:02:47.881436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:47.881759 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:47.881748686 +0000 UTC m=+168.711370506 I0407 13:02:52.474742 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:52.474724635 +0000 UTC m=+173.304346485 I0407 13:02:52.492562 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-gmpj8" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:52.492548791 +0000 UTC m=+173.322170621 I0407 13:02:52.526140 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:52.526124334 +0000 UTC m=+173.355746174 I0407 13:02:52.551445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:52.551806 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:02:52.551798437 +0000 UTC m=+173.381420267 I0407 13:02:52.559469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:02:52.570618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.109772 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-236.nip.io-tls" condition "Ready" to 2026-04-07 13:05:40.109750489 +0000 UTC m=+340.939372309 I0407 13:05:40.110274 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-236.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:05:40.110337 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-236.nip.io-tls" condition "Issuing" to 2026-04-07 13:05:40.110323952 +0000 UTC m=+340.939945792 I0407 13:05:40.134498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-236.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-236.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.134624 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-236.nip.io-tls" condition "Ready" to 2026-04-07 13:05:40.134610672 +0000 UTC m=+340.964232512 I0407 13:05:40.277673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-236.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-236.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.314227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-236.nip.io-tls-g7b5x" condition "Approved" to 2026-04-07 13:05:40.31419776 +0000 UTC m=+341.143819620 I0407 13:05:40.335430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-236.nip.io-tls-g7b5x" condition "Ready" to 2026-04-07 13:05:40.33541105 +0000 UTC m=+341.165032890 I0407 13:05:40.364897 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-236.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:05:40.364883288 +0000 UTC m=+341.194505108 I0407 13:05:40.386683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-236.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-236.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:05:40.444150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-236.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-236.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:53.989985 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:06:53.990067 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 13:06:53.990011169 +0000 UTC m=+414.819633019 I0407 13:06:53.990120 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 13:06:53.990103861 +0000 UTC m=+414.819725691 E0407 13:06:54.004758 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:06:54.004835 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 13:06:54.004821445 +0000 UTC m=+414.834443315 E0407 13:06:54.004918 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 13:06:54.006148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:54.006244 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 13:06:54.006232437 +0000 UTC m=+414.835854297 E0407 13:06:54.015941 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 13:06:54.016093 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:06:54.016133 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 13:06:54.016192 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 13:06:54.021395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:54.042844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-spbvj" condition "Approved" to 2026-04-07 13:06:54.042825967 +0000 UTC m=+414.872447787 I0407 13:06:54.054253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-spbvj" condition "Ready" to 2026-04-07 13:06:54.054231077 +0000 UTC m=+414.883852927 I0407 13:06:54.080502 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:54.080486602 +0000 UTC m=+414.910108412 I0407 13:06:54.097815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:06:59.017319 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:06:59.017302789 +0000 UTC m=+419.846924619 I0407 13:07:39.551449 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 13:07:39.550959295 +0000 UTC m=+460.380581125 I0407 13:07:39.551578 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:39.551620 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 13:07:39.551611381 +0000 UTC m=+460.381233191 I0407 13:07:39.554901 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 13:07:39.554875175 +0000 UTC m=+460.384497015 I0407 13:07:39.555692 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:39.555720 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 13:07:39.555714223 +0000 UTC m=+460.385336063 I0407 13:07:39.556379 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 13:07:39.556370718 +0000 UTC m=+460.385992558 I0407 13:07:39.556866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:39.556897 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 13:07:39.556890341 +0000 UTC m=+460.386512181 I0407 13:07:39.577609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:39.577719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:39.577752 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 13:07:39.577743433 +0000 UTC m=+460.407365253 I0407 13:07:39.584854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:39.584940 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:39.584963 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 13:07:39.584955698 +0000 UTC m=+460.414577498 I0407 13:07:39.587647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:39.587891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:39.587975 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 13:07:39.587964076 +0000 UTC m=+460.417585896 I0407 13:07:39.806418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:39.825850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-j4xhn" condition "Approved" to 2026-04-07 13:07:39.825836533 +0000 UTC m=+460.655458373 I0407 13:07:39.873406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-j4xhn" condition "Ready" to 2026-04-07 13:07:39.873394271 +0000 UTC m=+460.703016081 I0407 13:07:39.913225 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7jsm7" condition "Approved" to 2026-04-07 13:07:39.913206685 +0000 UTC m=+460.742828485 I0407 13:07:39.920296 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:39.920284545 +0000 UTC m=+460.749906355 I0407 13:07:39.922768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fbvkj" condition "Approved" to 2026-04-07 13:07:39.922744851 +0000 UTC m=+460.752366671 I0407 13:07:39.935423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7jsm7" condition "Ready" to 2026-04-07 13:07:39.935408269 +0000 UTC m=+460.765030079 I0407 13:07:39.940060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fbvkj" condition "Ready" to 2026-04-07 13:07:39.940047623 +0000 UTC m=+460.769669433 I0407 13:07:39.947691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:39.948296 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:39.94828438 +0000 UTC m=+460.777906220 E0407 13:07:40.426868 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-pngxk\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0407 13:07:40.522933 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:40.522913147 +0000 UTC m=+461.352534957 I0407 13:07:40.585506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:40.632377 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0407 13:07:40.731116 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-qzrcs\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0407 13:07:40.764816 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:40.764787936 +0000 UTC m=+461.594409786 I0407 13:07:40.829686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:40.830234 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:40.83022539 +0000 UTC m=+461.659847230 I0407 13:07:40.981182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:40.982226 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:40.982209228 +0000 UTC m=+461.811831078 I0407 13:07:41.379479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:41.429252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:41.480324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:41.629274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:47.587985 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:07:47.588031 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls" condition "Issuing" to 2026-04-07 13:07:47.588021519 +0000 UTC m=+468.417643339 I0407 13:07:47.588015 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls" condition "Ready" to 2026-04-07 13:07:47.587990248 +0000 UTC m=+468.417612068 I0407 13:07:47.605207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:47.605430 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls" condition "Ready" to 2026-04-07 13:07:47.605419063 +0000 UTC m=+468.435040873 I0407 13:07:47.696817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:47.731419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lwtjf-829fl" condition "Approved" to 2026-04-07 13:07:47.731391105 +0000 UTC m=+468.561012925 I0407 13:07:47.762028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lwtjf-829fl" condition "Ready" to 2026-04-07 13:07:47.762007747 +0000 UTC m=+468.591629567 I0407 13:07:47.794366 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:47.794301849 +0000 UTC m=+468.623923669 I0407 13:07:47.817756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:47.818137 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:07:47.818124388 +0000 UTC m=+468.647746238 I0407 13:07:47.826239 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:07:47.841260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lwtjf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:08:16.295286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:08:16.295350 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 13:08:16.295335406 +0000 UTC m=+497.124957256 I0407 13:08:16.295465 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 13:08:16.295435859 +0000 UTC m=+497.125057669 I0407 13:08:16.312395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:08:16.312457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:08:16.312470 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 13:08:16.312464864 +0000 UTC m=+497.142086684 I0407 13:08:16.453457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ltlfd" condition "Approved" to 2026-04-07 13:08:16.453436745 +0000 UTC m=+497.283058565 I0407 13:08:16.480026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ltlfd" condition "Ready" to 2026-04-07 13:08:16.480008647 +0000 UTC m=+497.309630497 I0407 13:08:16.525847 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:08:16.525825524 +0000 UTC m=+497.355447344 I0407 13:08:16.547971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:08:16.548569 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:08:16.548559128 +0000 UTC m=+497.378180948 I0407 13:08:16.574931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:11:32.791786 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 13:11:32.791726071 +0000 UTC m=+693.621347921 I0407 13:11:32.791910 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:11:32.792327 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 13:11:32.792298904 +0000 UTC m=+693.621920724 I0407 13:11:32.818417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:11:32.818546 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 13:11:32.81853541 +0000 UTC m=+693.648157240 I0407 13:11:33.322714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:11:33.355625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mxvss" condition "Approved" to 2026-04-07 13:11:33.355606366 +0000 UTC m=+694.185228186 I0407 13:11:33.379168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mxvss" condition "Ready" to 2026-04-07 13:11:33.379152743 +0000 UTC m=+694.208774563 I0407 13:11:33.411578 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:11:33.411560029 +0000 UTC m=+694.241181849 I0407 13:11:33.434511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:14:04.224870 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 13:14:04.22485307 +0000 UTC m=+845.054474910 I0407 13:14:04.225377 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:14:04.225420 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 13:14:04.225410902 +0000 UTC m=+845.055032742 I0407 13:14:04.244357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:14:04.244443 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 13:14:04.244437055 +0000 UTC m=+845.074058865 I0407 13:14:04.372659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:14:04.412364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-795vn" condition "Approved" to 2026-04-07 13:14:04.412351571 +0000 UTC m=+845.241973421 I0407 13:14:04.438247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-795vn" condition "Ready" to 2026-04-07 13:14:04.438239189 +0000 UTC m=+845.267861009 I0407 13:14:04.469640 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:14:04.469621032 +0000 UTC m=+845.299242852 I0407 13:14:04.497431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:14:04.497695 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:14:04.49768876 +0000 UTC m=+845.327310580 I0407 13:14:04.517964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:15:12.530949 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 13:15:12.530910101 +0000 UTC m=+913.360531921 I0407 13:15:12.531001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:15:12.531040 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 13:15:12.531028534 +0000 UTC m=+913.360650354 I0407 13:15:12.549167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:15:12.549252 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 13:15:12.549244837 +0000 UTC m=+913.378866647 I0407 13:15:12.838692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:15:12.873630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-txfp9" condition "Approved" to 2026-04-07 13:15:12.873618189 +0000 UTC m=+913.703239999 I0407 13:15:12.892644 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-txfp9" condition "Ready" to 2026-04-07 13:15:12.892630581 +0000 UTC m=+913.722252431 I0407 13:15:12.932546 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:15:12.932515977 +0000 UTC m=+913.762137817 I0407 13:15:12.958099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:15:12.958561 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:15:12.958549239 +0000 UTC m=+913.788171049 I0407 13:15:12.964825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:15:12.981712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:15:12.981828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:15:12.982344 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:15:12.98233498 +0000 UTC m=+913.811956800 I0407 13:18:26.931003 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 13:18:26.930955264 +0000 UTC m=+1107.760577104 I0407 13:18:26.931446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:18:26.931559 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 13:18:26.931549908 +0000 UTC m=+1107.761171758 I0407 13:18:26.948842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:18:26.948929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 13:18:26.948959 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 13:18:26.948949514 +0000 UTC m=+1107.778571334 I0407 13:18:27.165528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:18:27.174638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-h9p7j" condition "Approved" to 2026-04-07 13:18:27.174620556 +0000 UTC m=+1108.004242376 I0407 13:18:27.197233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-h9p7j" condition "Ready" to 2026-04-07 13:18:27.19722261 +0000 UTC m=+1108.026844430 I0407 13:18:27.229397 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:18:27.229382152 +0000 UTC m=+1108.059003972 I0407 13:18:27.251723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:18:27.252215 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 13:18:27.25220484 +0000 UTC m=+1108.081826680 I0407 13:18:27.261956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 13:18:27.285595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"