I0615 11:50:32.254822 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0615 11:50:32.254974 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0615 11:50:32.255071 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0615 11:50:32.262698 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0615 11:50:32.263251 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0615 11:50:32.263379 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0615 11:50:32.263379 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0615 11:50:32.265486 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0615 11:50:32.295074 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0615 11:50:32.300500 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0615 11:50:32.300532 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0615 11:50:32.300651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0615 11:50:32.303494 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0615 11:50:32.308683 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0615 11:50:32.312008 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0615 11:50:32.316531 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0615 11:50:32.319436 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0615 11:50:32.319472 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0615 11:50:32.323371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0615 11:50:32.326034 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0615 11:50:32.328574 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0615 11:50:32.328604 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0615 11:50:32.328678 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0615 11:50:32.331024 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0615 11:50:32.332990 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0615 11:50:32.339133 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0615 11:50:32.342235 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0615 11:50:32.345919 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0615 11:50:32.348321 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0615 11:50:32.350641 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0615 11:50:32.353503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0615 11:50:32.355303 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0615 11:50:32.356165 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0615 11:50:32.358623 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:50:32.358898 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:50:32.359893 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:50:32.382294 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:50:32.395614 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:50:32.414473 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:50:32.430865 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:50:32.446831 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:50:32.448895 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:50:32.470078 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0615 11:50:44.914131 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-15 11:50:44.914119363 +0000 UTC m=+12.693018516 I0615 11:50:45.704534 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:50:45.704576 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 11:50:45.704567426 +0000 UTC m=+13.483466559 I0615 11:50:45.704717 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-15 11:50:45.704696849 +0000 UTC m=+13.483596002 E0615 11:50:45.719335 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 11:50:45.719458 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-15 11:50:45.719446036 +0000 UTC m=+13.498345219 E0615 11:50:45.719554 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 11:50:45.721363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:45.721437 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:50:45.721458 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-15 11:50:45.721451264 +0000 UTC m=+13.500350407 E0615 11:50:45.730603 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0615 11:50:45.730808 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 11:50:45.730906 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 11:50:45.731621 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0615 11:50:45.760753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:45.763525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-r8mz5" condition "Approved" to 2026-06-15 11:50:45.763508631 +0000 UTC m=+13.542407784 I0615 11:50:45.777915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-r8mz5" condition "Ready" to 2026-06-15 11:50:45.777899269 +0000 UTC m=+13.556798452 I0615 11:50:45.803977 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:50:45.80395493 +0000 UTC m=+13.582854113 I0615 11:50:45.822123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:45.872197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:50:50.731530 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:50:50.731514175 +0000 UTC m=+18.510413338 I0615 11:51:14.751645 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:51:14.751854 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-15 11:51:14.751708927 +0000 UTC m=+42.530608080 I0615 11:51:14.752220 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-15 11:51:14.75221423 +0000 UTC m=+42.531113383 I0615 11:51:14.768885 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-15 11:51:14.768872453 +0000 UTC m=+42.547771606 I0615 11:51:14.781358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:51:14.781481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:51:14.781529 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-15 11:51:14.781518118 +0000 UTC m=+42.560417271 I0615 11:51:14.945459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gtww2" condition "Approved" to 2026-06-15 11:51:14.945439402 +0000 UTC m=+42.724338575 I0615 11:51:14.979896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-gtww2" condition "Ready" to 2026-06-15 11:51:14.979882455 +0000 UTC m=+42.758781598 I0615 11:51:15.014066 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:51:15.014047021 +0000 UTC m=+42.792946204 I0615 11:51:15.036711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:51:15.037152 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:51:15.037145038 +0000 UTC m=+42.816044191 I0615 11:51:15.046936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:51:15.059904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:53:07.466878 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-06-15 11:53:07.466858376 +0000 UTC m=+155.245757559 I0615 11:53:07.467035 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:53:07.467145 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-06-15 11:53:07.467131152 +0000 UTC m=+155.246030325 E0615 11:53:07.486561 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0615 11:53:07.486645 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-06-15 11:53:07.486630442 +0000 UTC m=+155.265529595 I0615 11:53:07.486709 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0615 11:53:07.490808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:53:07.490932 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:53:07.490966 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-06-15 11:53:07.490956375 +0000 UTC m=+155.269855548 E0615 11:53:07.498987 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0615 11:53:07.499166 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0615 11:53:07.499238 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0615 11:53:07.499313 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0615 11:53:07.499473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:53:07.499514 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-06-15 11:53:07.499497631 +0000 UTC m=+155.278396794 I0615 11:53:07.499528 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-06-15 11:53:07.499516721 +0000 UTC m=+155.278415904 I0615 11:53:07.516176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:53:07.516254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:53:07.516273 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-06-15 11:53:07.516267014 +0000 UTC m=+155.295166177 I0615 11:53:07.617917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:53:07.625028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-6rgqc" condition "Approved" to 2026-06-15 11:53:07.625006929 +0000 UTC m=+155.403906092 I0615 11:53:07.652278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-6rgqc" condition "Ready" to 2026-06-15 11:53:07.652262674 +0000 UTC m=+155.431161827 I0615 11:53:07.685223 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:53:07.685210466 +0000 UTC m=+155.464109629 I0615 11:53:07.710785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:53:07.711254 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:53:07.711243482 +0000 UTC m=+155.490142665 I0615 11:53:07.729781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:53:07.730160 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:53:07.730147207 +0000 UTC m=+155.509046380 I0615 11:53:07.859801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:53:07.863131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-rq7hf" condition "Approved" to 2026-06-15 11:53:07.863105744 +0000 UTC m=+155.642004927 I0615 11:53:07.882787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-rq7hf" condition "Ready" to 2026-06-15 11:53:07.882770227 +0000 UTC m=+155.661669390 I0615 11:53:12.500298 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:53:12.500274694 +0000 UTC m=+160.279173877 I0615 11:53:12.521714 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-rq7hf" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:53:12.521692809 +0000 UTC m=+160.300591992 I0615 11:53:12.551115 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:53:12.551090965 +0000 UTC m=+160.329990148 I0615 11:53:12.571420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:53:12.571823 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:53:12.571813874 +0000 UTC m=+160.350713027 I0615 11:53:12.589185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:55:59.735984 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-06-15 11:55:59.735923875 +0000 UTC m=+327.514823048 I0615 11:55:59.736055 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:55:59.736356 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-06-15 11:55:59.736318995 +0000 UTC m=+327.515218138 I0615 11:55:59.755229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:55:59.755308 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:55:59.755323 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-06-15 11:55:59.755315994 +0000 UTC m=+327.534215147 I0615 11:55:59.987022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:55:59.996972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-7nnn9" condition "Approved" to 2026-06-15 11:55:59.996947543 +0000 UTC m=+327.775846716 I0615 11:56:00.015427 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-7nnn9" condition "Ready" to 2026-06-15 11:56:00.015413139 +0000 UTC m=+327.794312292 I0615 11:56:00.044997 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:56:00.044981123 +0000 UTC m=+327.823880296 I0615 11:56:00.072952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:56:00.073374 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:56:00.073364009 +0000 UTC m=+327.852263192 I0615 11:56:00.080479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:56:00.091638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:56:00.091992 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:56:00.091981959 +0000 UTC m=+327.870881112 I0615 11:56:00.094930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:57:14.087012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:57:14.087120 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-15 11:57:14.087090116 +0000 UTC m=+401.865989279 I0615 11:57:14.087684 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 11:57:14.08767645 +0000 UTC m=+401.866575613 E0615 11:57:14.099749 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 11:57:14.099815 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-15 11:57:14.099808334 +0000 UTC m=+401.878707487 E0615 11:57:14.099837 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0615 11:57:14.102855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:57:14.103000 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-15 11:57:14.102987271 +0000 UTC m=+401.881886414 E0615 11:57:14.109252 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0615 11:57:14.109482 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 11:57:14.109553 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0615 11:57:14.109605 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0615 11:57:14.120894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:57:14.147307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pgsdx" condition "Approved" to 2026-06-15 11:57:14.147291376 +0000 UTC m=+401.926190559 I0615 11:57:14.160425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pgsdx" condition "Ready" to 2026-06-15 11:57:14.160411554 +0000 UTC m=+401.939310707 I0615 11:57:14.181780 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:57:14.181762292 +0000 UTC m=+401.960661475 I0615 11:57:14.199482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:57:14.245508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:57:19.109885 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:57:19.109870231 +0000 UTC m=+406.888769404 I0615 11:58:01.455064 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-15 11:58:01.455045413 +0000 UTC m=+449.233944566 I0615 11:58:01.455495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:58:01.455517 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-15 11:58:01.455513524 +0000 UTC m=+449.234412677 I0615 11:58:01.455727 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-15 11:58:01.455707819 +0000 UTC m=+449.234606972 I0615 11:58:01.456017 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-15 11:58:01.456006536 +0000 UTC m=+449.234905689 I0615 11:58:01.456261 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:58:01.456433 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-15 11:58:01.456420276 +0000 UTC m=+449.235319459 I0615 11:58:01.457041 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:58:01.457369 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-15 11:58:01.457065562 +0000 UTC m=+449.235964705 I0615 11:58:01.496461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:01.496567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:58:01.496596 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-15 11:58:01.49658877 +0000 UTC m=+449.275487923 I0615 11:58:01.497075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:01.497102 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:01.497224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:58:01.497267 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-15 11:58:01.497258766 +0000 UTC m=+449.276157909 I0615 11:58:01.497123 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-15 11:58:01.497117333 +0000 UTC m=+449.276016496 I0615 11:58:01.703773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lk6lb" condition "Approved" to 2026-06-15 11:58:01.703758214 +0000 UTC m=+449.482657367 I0615 11:58:01.725573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-lk6lb" condition "Ready" to 2026-06-15 11:58:01.725556853 +0000 UTC m=+449.504456036 I0615 11:58:01.762226 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:58:01.762206702 +0000 UTC m=+449.541105855 I0615 11:58:01.763381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:01.779746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-46qfm" condition "Approved" to 2026-06-15 11:58:01.779732907 +0000 UTC m=+449.558632060 I0615 11:58:01.787948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:01.788410 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:58:01.788398527 +0000 UTC m=+449.567297680 I0615 11:58:01.805782 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-46qfm" condition "Ready" to 2026-06-15 11:58:01.805760878 +0000 UTC m=+449.584660031 I0615 11:58:01.824612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:01.825015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:01.866029 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:58:01.866009999 +0000 UTC m=+449.644909152 I0615 11:58:01.935330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:01.936138 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:58:01.936126519 +0000 UTC m=+449.715025702 I0615 11:58:02.137136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:02.288993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:02.464063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mn5kn" condition "Approved" to 2026-06-15 11:58:02.464006811 +0000 UTC m=+450.242905984 I0615 11:58:02.494953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mn5kn" condition "Ready" to 2026-06-15 11:58:02.494938471 +0000 UTC m=+450.273837614 I0615 11:58:03.046885 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:58:03.046860896 +0000 UTC m=+450.825760089 I0615 11:58:03.190381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:03.190849 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:58:03.190837886 +0000 UTC m=+450.969737029 I0615 11:58:03.439325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:03.489137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:10.954091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vpjmq-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:58:10.954182 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vpjmq-tls" condition "Issuing" to 2026-06-15 11:58:10.954164341 +0000 UTC m=+458.733063524 I0615 11:58:10.954239 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vpjmq-tls" condition "Ready" to 2026-06-15 11:58:10.954214042 +0000 UTC m=+458.733113195 I0615 11:58:10.970629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vpjmq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vpjmq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:10.970699 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vpjmq-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:58:10.970718 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vpjmq-tls" condition "Issuing" to 2026-06-15 11:58:10.970713062 +0000 UTC m=+458.749612215 I0615 11:58:11.153786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vpjmq-g6fvp" condition "Approved" to 2026-06-15 11:58:11.153761371 +0000 UTC m=+458.932660524 I0615 11:58:11.183753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vpjmq-g6fvp" condition "Ready" to 2026-06-15 11:58:11.183731748 +0000 UTC m=+458.962630931 I0615 11:58:11.225947 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vpjmq-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:58:11.225924781 +0000 UTC m=+459.004823934 I0615 11:58:11.253889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vpjmq-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vpjmq-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:38.681228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:58:38.681291 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-15 11:58:38.681257502 +0000 UTC m=+486.460156655 I0615 11:58:38.681947 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-15 11:58:38.681935089 +0000 UTC m=+486.460834262 I0615 11:58:38.698633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:38.698726 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 11:58:38.698755 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-15 11:58:38.698745767 +0000 UTC m=+486.477644950 I0615 11:58:38.896851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:38.906205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wwtnz" condition "Approved" to 2026-06-15 11:58:38.906185802 +0000 UTC m=+486.685084955 I0615 11:58:38.926658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wwtnz" condition "Ready" to 2026-06-15 11:58:38.926642279 +0000 UTC m=+486.705541422 I0615 11:58:38.962871 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:58:38.962848688 +0000 UTC m=+486.741747871 I0615 11:58:38.988404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 11:58:38.989312 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 11:58:38.9893025 +0000 UTC m=+486.768201643 I0615 11:58:39.012824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:02:01.960696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 12:02:01.960782 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-15 12:02:01.960749027 +0000 UTC m=+689.739648180 I0615 12:02:01.961139 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-15 12:02:01.961118346 +0000 UTC m=+689.740017479 I0615 12:02:01.985814 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:02:01.985966 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-15 12:02:01.985954194 +0000 UTC m=+689.764853337 I0615 12:02:02.064586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:02:02.095869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-drv9t" condition "Approved" to 2026-06-15 12:02:02.095854872 +0000 UTC m=+689.874754025 I0615 12:02:02.115082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-drv9t" condition "Ready" to 2026-06-15 12:02:02.115069135 +0000 UTC m=+689.893968288 I0615 12:02:02.161203 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 12:02:02.161180126 +0000 UTC m=+689.940079319 I0615 12:02:02.181993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:04:37.473660 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-06-15 12:04:37.47362937 +0000 UTC m=+845.252528513 I0615 12:04:37.473896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 12:04:37.474009 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-06-15 12:04:37.473995738 +0000 UTC m=+845.252894921 I0615 12:04:37.513934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:04:37.514208 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-06-15 12:04:37.514020691 +0000 UTC m=+845.292919844 I0615 12:04:37.911679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:04:37.962562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-988g6" condition "Approved" to 2026-06-15 12:04:37.962544812 +0000 UTC m=+845.741443945 I0615 12:04:37.987366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-988g6" condition "Ready" to 2026-06-15 12:04:37.987353509 +0000 UTC m=+845.766252662 I0615 12:04:38.032067 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 12:04:38.032053843 +0000 UTC m=+845.810952986 I0615 12:04:38.072332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:04:38.141057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:05:55.669263 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-06-15 12:05:55.669244236 +0000 UTC m=+923.448143419 I0615 12:05:55.669715 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 12:05:55.669780 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-15 12:05:55.669773709 +0000 UTC m=+923.448672882 I0615 12:05:55.694894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:05:55.694952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 12:05:55.694963 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-15 12:05:55.694959404 +0000 UTC m=+923.473858557 I0615 12:05:56.303292 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rrdvh" condition "Approved" to 2026-06-15 12:05:56.30327415 +0000 UTC m=+924.082173333 I0615 12:05:56.325945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rrdvh" condition "Ready" to 2026-06-15 12:05:56.325932644 +0000 UTC m=+924.104831787 I0615 12:05:56.383682 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 12:05:56.383665361 +0000 UTC m=+924.162564494 I0615 12:05:56.405171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:05:56.476586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:09:18.202073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 12:09:18.202210 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-06-15 12:09:18.202187192 +0000 UTC m=+1125.981086365 I0615 12:09:18.202184 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-06-15 12:09:18.202171752 +0000 UTC m=+1125.981070935 I0615 12:09:18.228015 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:09:18.228157 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0615 12:09:18.228196 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-06-15 12:09:18.228183357 +0000 UTC m=+1126.007082540 I0615 12:09:18.380406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:09:18.386191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-6zdc2" condition "Approved" to 2026-06-15 12:09:18.386178733 +0000 UTC m=+1126.165077896 I0615 12:09:18.409981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-6zdc2" condition "Ready" to 2026-06-15 12:09:18.409961785 +0000 UTC m=+1126.188860968 I0615 12:09:18.445611 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 12:09:18.445597832 +0000 UTC m=+1126.224496985 I0615 12:09:18.474041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:09:18.474452 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 12:09:18.474443845 +0000 UTC m=+1126.253342998 I0615 12:09:18.498641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0615 12:09:18.498915 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-15 12:09:18.498907103 +0000 UTC m=+1126.277806256 I0615 12:09:18.502988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"