I0408 10:49:01.478664 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0408 10:49:01.478818 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0408 10:49:01.478914 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0408 10:49:01.482837 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0408 10:49:01.483269 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0408 10:49:01.483362 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0408 10:49:01.483380 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0408 10:49:01.486068 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0408 10:49:01.497412 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0408 10:49:01.502220 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0408 10:49:01.509202 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0408 10:49:01.511629 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0408 10:49:01.511701 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0408 10:49:01.514119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0408 10:49:01.516443 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0408 10:49:01.518860 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0408 10:49:01.521349 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0408 10:49:01.521502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0408 10:49:01.526963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0408 10:49:01.529571 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0408 10:49:01.529599 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0408 10:49:01.529680 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0408 10:49:01.532274 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0408 10:49:01.534814 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0408 10:49:01.536931 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0408 10:49:01.539050 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0408 10:49:01.540863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0408 10:49:01.542550 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0408 10:49:01.542571 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0408 10:49:01.542667 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0408 10:49:01.547894 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0408 10:49:01.552002 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0408 10:49:01.555034 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0408 10:49:01.557224 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:49:01.558013 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:49:01.558887 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:49:01.559204 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:49:01.574598 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:49:01.591170 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:49:01.610161 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:49:01.632664 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:49:01.650150 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:49:01.651889 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0408 10:49:12.023915 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-08 10:49:12.02389995 +0000 UTC m=+10.581041317 I0408 10:49:12.780443 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 10:49:12.78041834 +0000 UTC m=+11.337559707 I0408 10:49:12.780586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:12.780665 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-08 10:49:12.780655617 +0000 UTC m=+11.337796954 I0408 10:49:12.797609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:12.798104 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 10:49:12.798089839 +0000 UTC m=+11.355231206 E0408 10:49:12.798109 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:49:12.798222 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-08 10:49:12.798209812 +0000 UTC m=+11.355351149 E0408 10:49:12.798258 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:49:12.812378 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0408 10:49:12.812596 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:49:12.812688 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:49:12.812771 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0408 10:49:12.817699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:12.817756 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-08 10:49:12.817747748 +0000 UTC m=+11.374889085 I0408 10:49:12.828688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mv8jr" condition "Approved" to 2026-04-08 10:49:12.82867941 +0000 UTC m=+11.385820747 I0408 10:49:12.841930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-mv8jr" condition "Ready" to 2026-04-08 10:49:12.841919203 +0000 UTC m=+11.399060550 I0408 10:49:12.884722 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:12.884711731 +0000 UTC m=+11.441853068 I0408 10:49:12.899959 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:12.900318 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:12.900309576 +0000 UTC m=+11.457450913 I0408 10:49:12.914449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:12.924859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:17.813564 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:17.813546099 +0000 UTC m=+16.370687466 I0408 10:49:41.780429 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:41.780623 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-08 10:49:41.780565357 +0000 UTC m=+40.337706724 I0408 10:49:41.780978 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 10:49:41.780463224 +0000 UTC m=+40.337604561 I0408 10:49:41.796666 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-08 10:49:41.796651604 +0000 UTC m=+40.353792951 I0408 10:49:41.811535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:41.811655 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:49:41.811704 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-08 10:49:41.811694703 +0000 UTC m=+40.368836050 I0408 10:49:42.239704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:49:42.249095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6spbb" condition "Approved" to 2026-04-08 10:49:42.249076329 +0000 UTC m=+40.806217666 I0408 10:49:42.293718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-6spbb" condition "Ready" to 2026-04-08 10:49:42.293700085 +0000 UTC m=+40.850841422 I0408 10:49:42.340128 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:49:42.340110387 +0000 UTC m=+40.897251754 I0408 10:49:42.386413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:30.156324 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-08 10:51:30.156291341 +0000 UTC m=+148.713432678 I0408 10:51:30.156360 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:51:30.156431 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-08 10:51:30.156418524 +0000 UTC m=+148.713559881 E0408 10:51:30.171799 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 10:51:30.171916 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-08 10:51:30.171906377 +0000 UTC m=+148.729047734 I0408 10:51:30.171944 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 10:51:30.174475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:30.174545 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-08 10:51:30.174537814 +0000 UTC m=+148.731679181 E0408 10:51:30.185073 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0408 10:51:30.185134 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0408 10:51:30.185149 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0408 10:51:30.185170 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0408 10:51:30.185997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:51:30.186004 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-08 10:51:30.185980962 +0000 UTC m=+148.743122299 I0408 10:51:30.186031 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 10:51:30.186022013 +0000 UTC m=+148.743163350 I0408 10:51:30.202287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:30.202440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:51:30.202484 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-08 10:51:30.202471519 +0000 UTC m=+148.759612876 I0408 10:51:30.360638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:30.393112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-222nl" condition "Approved" to 2026-04-08 10:51:30.393097567 +0000 UTC m=+148.950238904 I0408 10:51:30.424630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-222nl" condition "Ready" to 2026-04-08 10:51:30.424619395 +0000 UTC m=+148.981760722 I0408 10:51:30.453382 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:30.453370132 +0000 UTC m=+149.010511489 I0408 10:51:30.455734 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-jwgq2" condition "Approved" to 2026-04-08 10:51:30.455713842 +0000 UTC m=+149.012855209 I0408 10:51:30.474325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-jwgq2" condition "Ready" to 2026-04-08 10:51:30.474301924 +0000 UTC m=+149.031443271 I0408 10:51:30.474650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:30.474904 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:30.47489594 +0000 UTC m=+149.032037277 I0408 10:51:30.484936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:30.494240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:35.185835 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:35.185814431 +0000 UTC m=+153.742955798 I0408 10:51:35.204192 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-jwgq2" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:35.204178008 +0000 UTC m=+153.761319355 I0408 10:51:35.239438 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:35.239420123 +0000 UTC m=+153.796561450 I0408 10:51:35.271855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:35.272316 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:35.272304887 +0000 UTC m=+153.829446224 I0408 10:51:35.276096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:35.288512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:35.290397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:51:35.290960 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:51:35.29094992 +0000 UTC m=+153.848091287 I0408 10:54:22.157015 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-193.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:54:22.157335 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-193.nip.io-tls" condition "Issuing" to 2026-04-08 10:54:22.15704014 +0000 UTC m=+320.714181477 I0408 10:54:22.157338 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-193.nip.io-tls" condition "Ready" to 2026-04-08 10:54:22.156743703 +0000 UTC m=+320.713885060 I0408 10:54:22.176096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-193.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-193.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:54:22.176157 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-193.nip.io-tls" condition "Ready" to 2026-04-08 10:54:22.176151421 +0000 UTC m=+320.733292748 I0408 10:54:22.466789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-193.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-193.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:54:22.499550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-193.nip.io-tls-qx5p9" condition "Approved" to 2026-04-08 10:54:22.499536573 +0000 UTC m=+321.056677930 I0408 10:54:22.516970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-193.nip.io-tls-qx5p9" condition "Ready" to 2026-04-08 10:54:22.516958949 +0000 UTC m=+321.074100286 I0408 10:54:22.545128 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-193.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:54:22.545113146 +0000 UTC m=+321.102254513 I0408 10:54:22.565457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-193.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-193.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:54:22.615765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-193.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-193.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:34.554838 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-08 10:55:34.554796196 +0000 UTC m=+393.111937564 I0408 10:55:34.554840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:34.555044 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 10:55:34.555026732 +0000 UTC m=+393.112168089 E0408 10:55:34.569202 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:55:34.569270 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-08 10:55:34.569257664 +0000 UTC m=+393.126399001 E0408 10:55:34.569349 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0408 10:55:34.571487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:34.571567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:55:34.571587 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-08 10:55:34.571583115 +0000 UTC m=+393.128724452 E0408 10:55:34.578573 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0408 10:55:34.578690 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:55:34.578812 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0408 10:55:34.579118 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0408 10:55:34.606536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s82p4" condition "Approved" to 2026-04-08 10:55:34.606511198 +0000 UTC m=+393.163652555 I0408 10:55:34.620964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-s82p4" condition "Ready" to 2026-04-08 10:55:34.620947194 +0000 UTC m=+393.178088531 I0408 10:55:34.646315 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:34.646296297 +0000 UTC m=+393.203437654 I0408 10:55:34.662549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:55:39.579973 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:55:39.579950343 +0000 UTC m=+398.137091710 I0408 10:56:19.652417 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 10:56:19.652407026 +0000 UTC m=+438.209548353 I0408 10:56:19.653186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:19.653207 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-08 10:56:19.653203947 +0000 UTC m=+438.210345274 I0408 10:56:19.653432 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-08 10:56:19.653428094 +0000 UTC m=+438.210569421 I0408 10:56:19.653591 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:19.653677 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 10:56:19.653665209 +0000 UTC m=+438.210806546 I0408 10:56:19.660411 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:19.660453 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-08 10:56:19.660442877 +0000 UTC m=+438.217584204 I0408 10:56:19.660773 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 10:56:19.660768565 +0000 UTC m=+438.217909882 I0408 10:56:19.680561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:19.680650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:19.680679 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-08 10:56:19.680672765 +0000 UTC m=+438.237814102 I0408 10:56:19.684049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:19.684221 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-08 10:56:19.684208358 +0000 UTC m=+438.241349695 I0408 10:56:19.690094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:19.690238 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-08 10:56:19.690226734 +0000 UTC m=+438.247368071 I0408 10:56:20.031014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:20.071703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-h4v99" condition "Approved" to 2026-04-08 10:56:20.071689579 +0000 UTC m=+438.628830896 I0408 10:56:20.072314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kgpkl" condition "Approved" to 2026-04-08 10:56:20.072296255 +0000 UTC m=+438.629437592 I0408 10:56:20.072945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:20.101252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kgpkl" condition "Ready" to 2026-04-08 10:56:20.10123467 +0000 UTC m=+438.658376017 I0408 10:56:20.103996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-h4v99" condition "Ready" to 2026-04-08 10:56:20.103990242 +0000 UTC m=+438.661131579 I0408 10:56:20.109298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wk6dx" condition "Approved" to 2026-04-08 10:56:20.109289291 +0000 UTC m=+438.666430618 I0408 10:56:20.135835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wk6dx" condition "Ready" to 2026-04-08 10:56:20.135823084 +0000 UTC m=+438.692964411 I0408 10:56:20.144478 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:20.14446852 +0000 UTC m=+438.701609847 I0408 10:56:20.220327 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:20.220318661 +0000 UTC m=+438.777459978 I0408 10:56:20.441974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:20.537787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:20.538418 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:20.53840843 +0000 UTC m=+439.095549797 I0408 10:56:20.651846 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:20.651829753 +0000 UTC m=+439.208971090 I0408 10:56:21.131898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:21.141400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:21.141462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:21.669441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:30.679773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:30.679806 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls" condition "Issuing" to 2026-04-08 10:56:30.679796372 +0000 UTC m=+449.236937689 I0408 10:56:30.680011 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls" condition "Ready" to 2026-04-08 10:56:30.679980246 +0000 UTC m=+449.237121603 I0408 10:56:30.697487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:30.697583 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:56:30.697608 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls" condition "Issuing" to 2026-04-08 10:56:30.697599356 +0000 UTC m=+449.254740693 I0408 10:56:30.952766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mmzcl-ldlsh" condition "Approved" to 2026-04-08 10:56:30.952740141 +0000 UTC m=+449.509881498 I0408 10:56:30.971638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mmzcl-ldlsh" condition "Ready" to 2026-04-08 10:56:30.971624524 +0000 UTC m=+449.528765851 I0408 10:56:31.003973 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:31.003951409 +0000 UTC m=+449.561092756 I0408 10:56:31.035894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:56:31.036230 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:56:31.036221722 +0000 UTC m=+449.593363049 I0408 10:56:31.071771 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mmzcl-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:17.099078 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 10:57:17.099204 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-08 10:57:17.09919209 +0000 UTC m=+495.656333447 I0408 10:57:17.099310 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 10:57:17.099288602 +0000 UTC m=+495.656429969 I0408 10:57:17.357584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:17.357810 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-08 10:57:17.357798464 +0000 UTC m=+495.914939811 I0408 10:57:17.582517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 10:57:17.693926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9qv77" condition "Approved" to 2026-04-08 10:57:17.693875121 +0000 UTC m=+496.251016488 I0408 10:57:17.767811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-9qv77" condition "Ready" to 2026-04-08 10:57:17.767795092 +0000 UTC m=+496.324936449 I0408 10:57:17.874748 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 10:57:17.874657293 +0000 UTC m=+496.431798630 I0408 10:57:17.899623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:00:48.242002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:00:48.242101 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-08 11:00:48.242054849 +0000 UTC m=+706.799196206 I0408 11:00:48.242105 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 11:00:48.24208106 +0000 UTC m=+706.799222427 I0408 11:00:48.263901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:00:48.264272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:00:48.264325 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-08 11:00:48.264317539 +0000 UTC m=+706.821458876 I0408 11:00:48.494230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j8zn2" condition "Approved" to 2026-04-08 11:00:48.494200472 +0000 UTC m=+707.051341819 I0408 11:00:48.513812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j8zn2" condition "Ready" to 2026-04-08 11:00:48.513789382 +0000 UTC m=+707.070930729 I0408 11:00:48.543396 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:00:48.543377892 +0000 UTC m=+707.100519219 I0408 11:00:48.574734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:00:48.575434 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:00:48.575420096 +0000 UTC m=+707.132561463 I0408 11:00:48.599949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:00:48.600360 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:00:48.600349595 +0000 UTC m=+707.157490932 I0408 11:03:29.667548 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:03:29.667657 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-08 11:03:29.667632076 +0000 UTC m=+868.224773433 I0408 11:03:29.667678 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-08 11:03:29.667556715 +0000 UTC m=+868.224698072 I0408 11:03:29.685504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:03:29.685591 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:03:29.685612 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-08 11:03:29.685604264 +0000 UTC m=+868.242745591 I0408 11:03:29.878131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:03:29.890843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-w56w5" condition "Approved" to 2026-04-08 11:03:29.890827968 +0000 UTC m=+868.447969305 I0408 11:03:29.915570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-w56w5" condition "Ready" to 2026-04-08 11:03:29.915556211 +0000 UTC m=+868.472697548 I0408 11:03:29.947856 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:03:29.947835721 +0000 UTC m=+868.504977078 I0408 11:03:29.979926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:03:29.980551 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:03:29.980538643 +0000 UTC m=+868.537680010 I0408 11:03:29.997684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:03:29.997994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:03:29.998374 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:03:29.998363596 +0000 UTC m=+868.555504933 I0408 11:04:49.721559 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-08 11:04:49.721539413 +0000 UTC m=+948.278680750 I0408 11:04:49.722181 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:04:49.722285 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-08 11:04:49.722274262 +0000 UTC m=+948.279415619 I0408 11:04:49.741327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:04:49.741437 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-08 11:04:49.741429433 +0000 UTC m=+948.298570760 I0408 11:04:50.071227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:04:50.111290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-gbw6n" condition "Approved" to 2026-04-08 11:04:50.111218659 +0000 UTC m=+948.668359986 I0408 11:04:50.134681 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-gbw6n" condition "Ready" to 2026-04-08 11:04:50.134667809 +0000 UTC m=+948.691809156 I0408 11:04:50.181593 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:04:50.18158182 +0000 UTC m=+948.738723157 I0408 11:04:50.200212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:04:50.200707 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:04:50.20069699 +0000 UTC m=+948.757838347 I0408 11:04:50.222362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:08:17.464520 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-08 11:08:17.464481789 +0000 UTC m=+1156.021623126 I0408 11:08:17.464928 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:08:17.464991 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 11:08:17.464982952 +0000 UTC m=+1156.022124289 I0408 11:08:17.482744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:08:17.482832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0408 11:08:17.482852 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-08 11:08:17.482844515 +0000 UTC m=+1156.039985852 I0408 11:08:17.693399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:08:17.702802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8fld5" condition "Approved" to 2026-04-08 11:08:17.702789935 +0000 UTC m=+1156.259931272 I0408 11:08:17.722995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8fld5" condition "Ready" to 2026-04-08 11:08:17.722975375 +0000 UTC m=+1156.280116742 I0408 11:08:17.754805 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:08:17.754790865 +0000 UTC m=+1156.311932192 I0408 11:08:17.779615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0408 11:08:17.779888 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-08 11:08:17.779882188 +0000 UTC m=+1156.337023515 I0408 11:08:17.809936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"