I0420 02:07:07.901228 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 02:07:07.901488 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 02:07:07.901615 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 02:07:07.906316 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 02:07:07.906896 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 02:07:07.907104 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 02:07:07.907159 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 02:07:07.910329 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 02:07:07.928199 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 02:07:07.928523 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 02:07:07.928615 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 02:07:07.936252 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 02:07:07.942173 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 02:07:07.946623 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 02:07:07.948619 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 02:07:07.950707 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 02:07:07.952569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 02:07:07.954681 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 02:07:07.960229 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 02:07:07.960286 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 02:07:07.960305 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 02:07:07.960322 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 02:07:07.964812 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 02:07:07.969286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 02:07:07.971911 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 02:07:07.973801 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 02:07:07.975673 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 02:07:07.977786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 02:07:07.979745 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 02:07:07.986213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 02:07:07.991419 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 02:07:07.994633 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 02:07:07.994672 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 02:07:07.999402 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:07.999665 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:08.000274 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:08.000750 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:08.019382 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:08.038523 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:08.053970 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:08.069509 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:08.087003 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:08.093712 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 02:07:21.101880 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 02:07:21.101858561 +0000 UTC m=+13.239299379 I0420 02:07:21.926662 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:07:21.926681 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 02:07:21.926660295 +0000 UTC m=+14.064101103 I0420 02:07:21.926787 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 02:07:21.926771538 +0000 UTC m=+14.064212356 I0420 02:07:21.941715 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:07:21.941835 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:07:21.941861 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 02:07:21.941852627 +0000 UTC m=+14.079293415 E0420 02:07:21.945046 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 02:07:21.945155 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 02:07:21.945139051 +0000 UTC m=+14.082579869 E0420 02:07:21.945216 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:07:21.968608 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 02:07:21.968779 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:07:21.968875 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:07:21.969493 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 02:07:21.991056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bxtl7" condition "Approved" to 2026-04-20 02:07:21.991040186 +0000 UTC m=+14.128480984 I0420 02:07:22.006200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-bxtl7" condition "Ready" to 2026-04-20 02:07:22.006187776 +0000 UTC m=+14.143628564 I0420 02:07:22.034339 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:07:22.034322952 +0000 UTC m=+14.171763740 I0420 02:07:22.051674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:07:22.052162 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:07:22.052150612 +0000 UTC m=+14.189591420 I0420 02:07:22.076462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:07:22.076482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:07:26.969287 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:07:26.969271628 +0000 UTC m=+19.106712436 I0420 02:07:48.436546 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 02:07:48.436525394 +0000 UTC m=+40.573966182 I0420 02:07:48.436957 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:07:48.437093 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 02:07:48.437080409 +0000 UTC m=+40.574521197 I0420 02:07:48.457270 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 02:07:48.457257161 +0000 UTC m=+40.594697929 I0420 02:07:48.465120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:07:48.465184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:07:48.465624 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 02:07:48.465615087 +0000 UTC m=+40.603055865 I0420 02:07:48.699648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:07:48.710767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-slnb8" condition "Approved" to 2026-04-20 02:07:48.710748523 +0000 UTC m=+40.848189331 I0420 02:07:48.745335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-slnb8" condition "Ready" to 2026-04-20 02:07:48.745321918 +0000 UTC m=+40.882762696 I0420 02:07:48.785828 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:07:48.785809006 +0000 UTC m=+40.923249784 I0420 02:07:48.840113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:07:48.840520 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:07:48.840511471 +0000 UTC m=+40.977952249 I0420 02:07:48.874983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:09:28.452988 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 02:09:28.452969586 +0000 UTC m=+140.590410374 I0420 02:09:28.453065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:09:28.453153 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 02:09:28.453137691 +0000 UTC m=+140.590578489 E0420 02:09:28.472341 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 02:09:28.472478 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 02:09:28.472467749 +0000 UTC m=+140.609908537 I0420 02:09:28.472546 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 02:09:28.475560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:09:28.475920 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 02:09:28.475909938 +0000 UTC m=+140.613350756 E0420 02:09:28.484203 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 02:09:28.484378 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 02:09:28.484424 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 02:09:28.484463 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 02:09:28.486708 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 02:09:28.486685917 +0000 UTC m=+140.624126725 I0420 02:09:28.486746 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:09:28.486767 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 02:09:28.486762649 +0000 UTC m=+140.624203437 I0420 02:09:28.501383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:09:28.501484 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 02:09:28.501474168 +0000 UTC m=+140.638914956 I0420 02:09:28.574923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:09:28.609763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5zqcr" condition "Approved" to 2026-04-20 02:09:28.609744442 +0000 UTC m=+140.747185250 I0420 02:09:28.641486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5zqcr" condition "Ready" to 2026-04-20 02:09:28.641469992 +0000 UTC m=+140.778910800 I0420 02:09:28.671489 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:09:28.671471835 +0000 UTC m=+140.808912623 I0420 02:09:28.691023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:09:28.691279 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:09:28.691270597 +0000 UTC m=+140.828711375 I0420 02:09:28.708731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:09:28.714359 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:09:28.786765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:09:28.819394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-vz5bh" condition "Approved" to 2026-04-20 02:09:28.819376294 +0000 UTC m=+140.956817082 I0420 02:09:28.836654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-vz5bh" condition "Ready" to 2026-04-20 02:09:28.836640789 +0000 UTC m=+140.974081577 I0420 02:09:33.485384 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:09:33.485346542 +0000 UTC m=+145.622787370 I0420 02:09:33.506525 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-vz5bh" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:09:33.506508119 +0000 UTC m=+145.643948937 I0420 02:09:33.540794 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:09:33.540779683 +0000 UTC m=+145.678220471 I0420 02:09:33.562120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:09:33.562465 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:09:33.562458013 +0000 UTC m=+145.699898821 I0420 02:09:33.578881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:09:33.581698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:12:18.129872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-69.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:12:18.129876 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-69.nip.io-tls" condition "Ready" to 2026-04-20 02:12:18.129865131 +0000 UTC m=+310.267305919 I0420 02:12:18.129922 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-69.nip.io-tls" condition "Issuing" to 2026-04-20 02:12:18.129909642 +0000 UTC m=+310.267350470 I0420 02:12:18.155818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-69.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-69.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:12:18.155860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-69.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:12:18.155870 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-69.nip.io-tls" condition "Issuing" to 2026-04-20 02:12:18.155866125 +0000 UTC m=+310.293306903 I0420 02:12:18.557420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-69.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-69.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:12:18.563636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-69.nip.io-tls-22qtd" condition "Approved" to 2026-04-20 02:12:18.563623046 +0000 UTC m=+310.701063854 I0420 02:12:18.580603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-69.nip.io-tls-22qtd" condition "Ready" to 2026-04-20 02:12:18.580578966 +0000 UTC m=+310.718019744 I0420 02:12:18.607978 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-69.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:12:18.607941496 +0000 UTC m=+310.745382314 I0420 02:12:18.626640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-69.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-69.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:12:18.627174 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-69.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:12:18.627158055 +0000 UTC m=+310.764598863 I0420 02:12:18.647497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-69.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-69.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:12:18.649708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-69.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-69.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:31.979460 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 02:13:31.979436041 +0000 UTC m=+384.116876879 I0420 02:13:31.979552 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:13:31.979620 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 02:13:31.979610716 +0000 UTC m=+384.117051524 E0420 02:13:31.996204 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 02:13:31.996240 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 02:13:31.996231212 +0000 UTC m=+384.133672000 E0420 02:13:31.996294 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 02:13:31.999010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:31.999080 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 02:13:31.999073166 +0000 UTC m=+384.136513954 E0420 02:13:32.010170 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 02:13:32.010324 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:13:32.010357 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 02:13:32.010388 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 02:13:32.016667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:32.038397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mqct9" condition "Approved" to 2026-04-20 02:13:32.038377909 +0000 UTC m=+384.175818697 I0420 02:13:32.051950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-mqct9" condition "Ready" to 2026-04-20 02:13:32.051938374 +0000 UTC m=+384.189379162 I0420 02:13:32.076264 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:32.076249492 +0000 UTC m=+384.213690290 I0420 02:13:32.093238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:13:37.010699 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:13:37.010684843 +0000 UTC m=+389.148125651 I0420 02:14:16.728923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:14:16.729000 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 02:14:16.728802359 +0000 UTC m=+428.866243167 I0420 02:14:16.732907 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 02:14:16.732889716 +0000 UTC m=+428.870330534 I0420 02:14:16.737236 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 02:14:16.73720804 +0000 UTC m=+428.874648848 I0420 02:14:16.737312 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 02:14:16.737309073 +0000 UTC m=+428.874749861 I0420 02:14:16.737858 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:14:16.737901 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 02:14:16.737894148 +0000 UTC m=+428.875334936 I0420 02:14:16.737944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:14:16.738032 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 02:14:16.738023092 +0000 UTC m=+428.875463870 I0420 02:14:16.766690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:16.766763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:14:16.766787 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 02:14:16.766781119 +0000 UTC m=+428.904221897 I0420 02:14:16.783345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:16.783483 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 02:14:16.783473338 +0000 UTC m=+428.920914116 I0420 02:14:16.785035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:16.785095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:14:16.785164 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 02:14:16.785113211 +0000 UTC m=+428.922553989 I0420 02:14:17.062598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:17.127030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gzj5v" condition "Approved" to 2026-04-20 02:14:17.127010444 +0000 UTC m=+429.264451232 I0420 02:14:17.156773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gzj5v" condition "Ready" to 2026-04-20 02:14:17.156760007 +0000 UTC m=+429.294200785 I0420 02:14:17.174206 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-99wnh" condition "Approved" to 2026-04-20 02:14:17.174192426 +0000 UTC m=+429.311633214 I0420 02:14:17.188997 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:14:17.188981225 +0000 UTC m=+429.326422013 I0420 02:14:17.191949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-99wnh" condition "Ready" to 2026-04-20 02:14:17.191929902 +0000 UTC m=+429.329370690 I0420 02:14:17.213768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:17.214008 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:14:17.213999892 +0000 UTC m=+429.351440670 I0420 02:14:17.220120 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:14:17.220106403 +0000 UTC m=+429.357547191 I0420 02:14:17.231767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:17.248159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:17.268488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:17.269073 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:14:17.269059941 +0000 UTC m=+429.406500759 I0420 02:14:17.713761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:17.769201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:17.870398 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-99bxd" condition "Approved" to 2026-04-20 02:14:17.870375099 +0000 UTC m=+430.007815897 I0420 02:14:18.142370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-99bxd" condition "Ready" to 2026-04-20 02:14:18.142355235 +0000 UTC m=+430.279796023 I0420 02:14:18.465663 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-99bxd" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-cht2f" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0420 02:14:18.672283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g5xbk" condition "Approved" to 2026-04-20 02:14:18.672257033 +0000 UTC m=+430.809697831 I0420 02:14:18.828060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-g5xbk" condition "Ready" to 2026-04-20 02:14:18.828048962 +0000 UTC m=+430.965489750 I0420 02:14:19.435150 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:14:19.435134552 +0000 UTC m=+431.572575370 I0420 02:14:19.459909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:26.300490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f7hff-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:14:26.300528 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f7hff-tls" condition "Issuing" to 2026-04-20 02:14:26.300518763 +0000 UTC m=+438.437959551 I0420 02:14:26.300815 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f7hff-tls" condition "Ready" to 2026-04-20 02:14:26.30074893 +0000 UTC m=+438.438189758 I0420 02:14:26.318556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f7hff-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f7hff-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:26.318651 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-f7hff-tls" condition "Ready" to 2026-04-20 02:14:26.318642429 +0000 UTC m=+438.456083227 I0420 02:14:26.481913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f7hff-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f7hff-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:26.514231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f7hff-hvxfh" condition "Approved" to 2026-04-20 02:14:26.514204245 +0000 UTC m=+438.651645033 I0420 02:14:26.534374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-f7hff-hvxfh" condition "Ready" to 2026-04-20 02:14:26.534348414 +0000 UTC m=+438.671789222 I0420 02:14:26.565759 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-f7hff-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:14:26.56573639 +0000 UTC m=+438.703177178 I0420 02:14:26.584950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f7hff-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f7hff-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:26.634929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-f7hff-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-f7hff-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:56.569356 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 02:14:56.569341317 +0000 UTC m=+468.706782085 I0420 02:14:56.569758 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:14:56.569785 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 02:14:56.569780738 +0000 UTC m=+468.707221516 I0420 02:14:56.583692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:56.583807 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:14:56.583828 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 02:14:56.583818407 +0000 UTC m=+468.721259195 I0420 02:14:56.847046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-947qt" condition "Approved" to 2026-04-20 02:14:56.847034731 +0000 UTC m=+468.984475499 I0420 02:14:56.870305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-947qt" condition "Ready" to 2026-04-20 02:14:56.870289974 +0000 UTC m=+469.007730772 I0420 02:14:56.906023 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:14:56.905996973 +0000 UTC m=+469.043437761 I0420 02:14:56.933862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:56.934352 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:14:56.934344698 +0000 UTC m=+469.071785476 I0420 02:14:56.952895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:14:56.953264 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:14:56.953254605 +0000 UTC m=+469.090695383 I0420 02:18:13.814588 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:18:13.814668 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 02:18:13.814658476 +0000 UTC m=+665.952099284 I0420 02:18:13.814987 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 02:18:13.814976803 +0000 UTC m=+665.952417621 I0420 02:18:13.833711 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:18:13.833853 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 02:18:13.833839796 +0000 UTC m=+665.971280594 I0420 02:18:14.004360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:18:14.038772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m8lm2" condition "Approved" to 2026-04-20 02:18:14.038742733 +0000 UTC m=+666.176183521 I0420 02:18:14.063330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-m8lm2" condition "Ready" to 2026-04-20 02:18:14.063311653 +0000 UTC m=+666.200752451 I0420 02:18:14.100024 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:18:14.10000184 +0000 UTC m=+666.237442628 I0420 02:18:14.119975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:18:14.120594 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:18:14.120584818 +0000 UTC m=+666.258025596 I0420 02:18:14.133646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:18:14.142046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:20:43.035679 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 02:20:43.03563008 +0000 UTC m=+815.173070878 I0420 02:20:43.036112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:20:43.036191 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 02:20:43.036181354 +0000 UTC m=+815.173622172 I0420 02:20:43.055545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:20:43.055886 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 02:20:43.055875407 +0000 UTC m=+815.193316215 I0420 02:20:43.177387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:20:43.210087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-j422p" condition "Approved" to 2026-04-20 02:20:43.210062172 +0000 UTC m=+815.347503000 I0420 02:20:43.226935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-j422p" condition "Ready" to 2026-04-20 02:20:43.22692218 +0000 UTC m=+815.364362968 I0420 02:20:43.263795 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:20:43.26377561 +0000 UTC m=+815.401216388 I0420 02:20:43.291008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:20:43.291505 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:20:43.291495331 +0000 UTC m=+815.428936119 I0420 02:20:43.298423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:20:43.313344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:21:50.481955 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:21:50.482040 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 02:21:50.482030091 +0000 UTC m=+882.619470919 I0420 02:21:50.482561 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 02:21:50.482551905 +0000 UTC m=+882.619992723 I0420 02:21:50.505608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:21:50.505867 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 02:21:50.505856546 +0000 UTC m=+882.643297334 I0420 02:21:50.618766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:21:50.656918 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vwcvr" condition "Approved" to 2026-04-20 02:21:50.656901528 +0000 UTC m=+882.794342316 I0420 02:21:50.680380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vwcvr" condition "Ready" to 2026-04-20 02:21:50.680362944 +0000 UTC m=+882.817803732 I0420 02:21:50.710449 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:21:50.710428411 +0000 UTC m=+882.847869209 I0420 02:21:50.729414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:21:50.729902 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:21:50.729893514 +0000 UTC m=+882.867334302 I0420 02:21:50.762889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:24:57.698341 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 02:24:57.69832352 +0000 UTC m=+1069.835764328 I0420 02:24:57.698374 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:24:57.698455 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 02:24:57.698447243 +0000 UTC m=+1069.835888051 I0420 02:24:57.718001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:24:57.718094 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 02:24:57.718112 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 02:24:57.718105944 +0000 UTC m=+1069.855546722 I0420 02:24:57.859424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-w568m" condition "Approved" to 2026-04-20 02:24:57.859408371 +0000 UTC m=+1069.996849159 I0420 02:24:57.878277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-w568m" condition "Ready" to 2026-04-20 02:24:57.878260821 +0000 UTC m=+1070.015701609 I0420 02:24:57.905347 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:24:57.90532675 +0000 UTC m=+1070.042767538 I0420 02:24:57.930991 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 02:24:57.931353 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 02:24:57.931345173 +0000 UTC m=+1070.068785961 I0420 02:24:57.956560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"