I0227 01:26:04.385182 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0227 01:26:04.385367 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0227 01:26:04.386025 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0227 01:26:04.389794 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0227 01:26:04.390286 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0227 01:26:04.390374 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0227 01:26:04.390544 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0227 01:26:04.393384 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0227 01:26:04.409883 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0227 01:26:04.413084 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0227 01:26:04.415980 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0227 01:26:04.416371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0227 01:26:04.421918 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0227 01:26:04.424692 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0227 01:26:04.427272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0227 01:26:04.429907 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0227 01:26:04.432656 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0227 01:26:04.435034 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0227 01:26:04.437624 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0227 01:26:04.437656 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0227 01:26:04.437866 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0227 01:26:04.443065 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0227 01:26:04.445713 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0227 01:26:04.448340 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0227 01:26:04.450953 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0227 01:26:04.450984 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0227 01:26:04.450993 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0227 01:26:04.451056 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0227 01:26:04.453705 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0227 01:26:04.455849 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0227 01:26:04.457766 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0227 01:26:04.459457 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0227 01:26:04.462019 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0227 01:26:04.465371 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:04.466951 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:04.467736 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:04.508996 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:04.592110 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:04.592524 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:04.592564 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:04.593216 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:04.593418 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:04.593763 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0227 01:26:16.629480 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-02-27 01:26:16.629440468 +0000 UTC m=+12.279254858 I0227 01:26:17.329997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:26:17.330103 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-02-27 01:26:17.330093209 +0000 UTC m=+12.979907569 I0227 01:26:17.330139 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-02-27 01:26:17.330116529 +0000 UTC m=+12.979930909 E0227 01:26:17.347445 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0227 01:26:17.347548 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-02-27 01:26:17.34753709 +0000 UTC m=+12.997351470 E0227 01:26:17.347584 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0227 01:26:17.349284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:17.350045 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-02-27 01:26:17.350031516 +0000 UTC m=+12.999845946 E0227 01:26:17.363816 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0227 01:26:17.364046 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0227 01:26:17.364132 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0227 01:26:17.364303 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0227 01:26:17.368288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:17.368375 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-02-27 01:26:17.368365547 +0000 UTC m=+13.018179907 I0227 01:26:17.370451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-96kt4" condition "Approved" to 2026-02-27 01:26:17.370441074 +0000 UTC m=+13.020255434 I0227 01:26:17.382762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-96kt4" condition "Ready" to 2026-02-27 01:26:17.38274659 +0000 UTC m=+13.032560950 I0227 01:26:17.405163 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:26:17.405144653 +0000 UTC m=+13.054959013 I0227 01:26:17.438253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:17.439728 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:26:17.439527226 +0000 UTC m=+13.089341576 I0227 01:26:17.458445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:22.364901 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:26:22.364885438 +0000 UTC m=+18.014699818 I0227 01:26:44.124086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:26:44.124129 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-02-27 01:26:44.124121266 +0000 UTC m=+39.773935626 I0227 01:26:44.124593 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-02-27 01:26:44.124573906 +0000 UTC m=+39.774388266 I0227 01:26:44.140648 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-02-27 01:26:44.140638237 +0000 UTC m=+39.790452587 I0227 01:26:44.151973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:44.152076 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-02-27 01:26:44.152068064 +0000 UTC m=+39.801882424 I0227 01:26:44.303724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:44.336432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-slt8z" condition "Approved" to 2026-02-27 01:26:44.336415263 +0000 UTC m=+39.986229653 I0227 01:26:44.371380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-slt8z" condition "Ready" to 2026-02-27 01:26:44.371365567 +0000 UTC m=+40.021179927 I0227 01:26:44.401618 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:26:44.401598796 +0000 UTC m=+40.051413176 I0227 01:26:44.420687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:44.421146 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:26:44.421135315 +0000 UTC m=+40.070949675 I0227 01:26:44.438573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:26:44.438909 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:26:44.438901064 +0000 UTC m=+40.088715424 I0227 01:28:43.122536 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:28:43.122598 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-02-27 01:28:43.122584781 +0000 UTC m=+158.772399161 I0227 01:28:43.122651 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-02-27 01:28:43.122626722 +0000 UTC m=+158.772441112 I0227 01:28:43.139456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:28:43.139539 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:28:43.139561 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-02-27 01:28:43.139552992 +0000 UTC m=+158.789367352 E0227 01:28:43.140113 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0227 01:28:43.140162 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-02-27 01:28:43.140157225 +0000 UTC m=+158.789971595 I0227 01:28:43.140207 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0227 01:28:43.151567 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0227 01:28:43.153899 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0227 01:28:43.153977 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0227 01:28:43.154055 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0227 01:28:43.154171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:28:43.154235 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-02-27 01:28:43.154212879 +0000 UTC m=+158.804027229 I0227 01:28:43.154351 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-02-27 01:28:43.154338272 +0000 UTC m=+158.804152632 I0227 01:28:43.170669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:28:43.170856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:28:43.170953 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-02-27 01:28:43.170944765 +0000 UTC m=+158.820759125 I0227 01:28:43.363255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:28:43.373233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-g25tv" condition "Approved" to 2026-02-27 01:28:43.373218716 +0000 UTC m=+159.023033106 I0227 01:28:43.404074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-g25tv" condition "Ready" to 2026-02-27 01:28:43.404049026 +0000 UTC m=+159.053863406 I0227 01:28:43.418203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:28:43.424355 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-2h5lb" condition "Approved" to 2026-02-27 01:28:43.424329364 +0000 UTC m=+159.074143744 I0227 01:28:43.430204 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:28:43.430189259 +0000 UTC m=+159.080003599 I0227 01:28:43.438922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-2h5lb" condition "Ready" to 2026-02-27 01:28:43.43890731 +0000 UTC m=+159.088721670 I0227 01:28:43.446062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:28:43.446616 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:28:43.446601458 +0000 UTC m=+159.096415848 I0227 01:28:43.461642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:28:43.465309 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:28:43.465644 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:28:43.465633815 +0000 UTC m=+159.115448175 I0227 01:28:48.153380 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:28:48.153334656 +0000 UTC m=+163.803149036 I0227 01:28:48.176296 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-2h5lb" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:28:48.176281414 +0000 UTC m=+163.826095774 I0227 01:28:48.207053 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:28:48.207035933 +0000 UTC m=+163.856850293 I0227 01:28:48.225867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:28:48.226551 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:28:48.226537652 +0000 UTC m=+163.876352042 I0227 01:28:48.240415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:28:48.241574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:28:48.242046 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:28:48.242032339 +0000 UTC m=+163.891846719 I0227 01:31:15.199652 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-200.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:31:15.199742 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-200.nip.io-tls" condition "Issuing" to 2026-02-27 01:31:15.199732187 +0000 UTC m=+310.849546567 I0227 01:31:15.199743 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-200.nip.io-tls" condition "Ready" to 2026-02-27 01:31:15.199722536 +0000 UTC m=+310.849536916 I0227 01:31:15.221866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:31:15.221904 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-200.nip.io-tls" condition "Ready" to 2026-02-27 01:31:15.221899794 +0000 UTC m=+310.871714144 I0227 01:31:15.302142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:31:15.332792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-200.nip.io-tls-r4t8c" condition "Approved" to 2026-02-27 01:31:15.332775457 +0000 UTC m=+310.982589837 I0227 01:31:15.346806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-200.nip.io-tls-r4t8c" condition "Ready" to 2026-02-27 01:31:15.346795282 +0000 UTC m=+310.996609642 I0227 01:31:15.370132 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-200.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:31:15.370118816 +0000 UTC m=+311.019933196 I0227 01:31:15.389889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:31:15.434295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-200.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-200.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:32:23.839002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:32:23.839044 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-02-27 01:32:23.839036004 +0000 UTC m=+379.488850394 I0227 01:32:23.839002 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-02-27 01:32:23.838960633 +0000 UTC m=+379.488775033 I0227 01:32:23.855050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:32:23.855114 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-02-27 01:32:23.855107825 +0000 UTC m=+379.504922185 E0227 01:32:23.855412 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0227 01:32:23.855471 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-02-27 01:32:23.855463453 +0000 UTC m=+379.505277813 E0227 01:32:23.855569 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0227 01:32:23.866615 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0227 01:32:23.866814 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0227 01:32:23.866876 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0227 01:32:23.867032 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0227 01:32:23.872116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:32:23.873720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:32:23.873785 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-02-27 01:32:23.873776785 +0000 UTC m=+379.523591145 I0227 01:32:23.876534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n5n7c" condition "Approved" to 2026-02-27 01:32:23.876522686 +0000 UTC m=+379.526337046 I0227 01:32:23.886396 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-02-27 01:32:23.886387487 +0000 UTC m=+379.536201847 I0227 01:32:23.888620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-n5n7c" condition "Ready" to 2026-02-27 01:32:23.888611908 +0000 UTC m=+379.538426278 I0227 01:32:23.894630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:32:23.911288 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:32:23.911267347 +0000 UTC m=+379.561081727 I0227 01:32:23.932433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:32:23.976037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:32:28.867461 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:32:28.867445582 +0000 UTC m=+384.517259962 I0227 01:33:04.771994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:04.772067 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-02-27 01:33:04.772060323 +0000 UTC m=+420.421874673 I0227 01:33:04.772348 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-02-27 01:33:04.772332289 +0000 UTC m=+420.422146649 I0227 01:33:04.774941 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:04.774979 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-02-27 01:33:04.774971259 +0000 UTC m=+420.424785619 I0227 01:33:04.775226 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-02-27 01:33:04.775221294 +0000 UTC m=+420.425035654 I0227 01:33:04.776014 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-02-27 01:33:04.775995112 +0000 UTC m=+420.425809462 I0227 01:33:04.776435 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:04.776475 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-02-27 01:33:04.776468373 +0000 UTC m=+420.426282713 I0227 01:33:04.808478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:04.808653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:04.808694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:04.808715 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-02-27 01:33:04.808708447 +0000 UTC m=+420.458522807 I0227 01:33:04.808820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:04.808997 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:04.809014 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-02-27 01:33:04.809010714 +0000 UTC m=+420.458825074 I0227 01:33:04.809038 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-02-27 01:33:04.809020875 +0000 UTC m=+420.458835235 I0227 01:33:04.995111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bjpwv" condition "Approved" to 2026-02-27 01:33:04.995099838 +0000 UTC m=+420.644914198 I0227 01:33:05.023856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bjpwv" condition "Ready" to 2026-02-27 01:33:05.023842503 +0000 UTC m=+420.673656883 I0227 01:33:05.098582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:05.104391 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:05.104379024 +0000 UTC m=+420.754193374 I0227 01:33:05.131645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:05.132227 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:05.13221499 +0000 UTC m=+420.782029380 I0227 01:33:05.154172 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:05.154598 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:05.154588243 +0000 UTC m=+420.804402623 I0227 01:33:05.175001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:05.183483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2rbhx" condition "Approved" to 2026-02-27 01:33:05.183470582 +0000 UTC m=+420.833284942 I0227 01:33:05.199790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2rbhx" condition "Ready" to 2026-02-27 01:33:05.199780019 +0000 UTC m=+420.849594379 I0227 01:33:05.312334 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:05.312319779 +0000 UTC m=+420.962134139 I0227 01:33:05.416348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:05.416789 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:05.416778637 +0000 UTC m=+421.066593017 I0227 01:33:05.714931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:05.764004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:06.016296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kgjzc" condition "Approved" to 2026-02-27 01:33:06.016285244 +0000 UTC m=+421.666099594 I0227 01:33:06.427527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-kgjzc" condition "Ready" to 2026-02-27 01:33:06.427515189 +0000 UTC m=+422.077329549 I0227 01:33:06.531128 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-kgjzc" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-kr22x" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0227 01:33:06.770309 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f867b" condition "Approved" to 2026-02-27 01:33:06.770295956 +0000 UTC m=+422.420110316 I0227 01:33:06.874669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f867b" condition "Ready" to 2026-02-27 01:33:06.874658092 +0000 UTC m=+422.524472452 I0227 01:33:07.313948 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:07.313928407 +0000 UTC m=+422.963742787 I0227 01:33:07.414680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:07.415043 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:07.41503216 +0000 UTC m=+423.064846540 I0227 01:33:07.614726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:12.387101 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:12.387142 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls" condition "Issuing" to 2026-02-27 01:33:12.387131468 +0000 UTC m=+428.036945858 I0227 01:33:12.387233 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls" condition "Ready" to 2026-02-27 01:33:12.38721224 +0000 UTC m=+428.037026630 I0227 01:33:12.401803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:12.401870 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls" condition "Ready" to 2026-02-27 01:33:12.401864429 +0000 UTC m=+428.051678789 I0227 01:33:12.730034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:12.778624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8xcqj-vdzj7" condition "Approved" to 2026-02-27 01:33:12.778609078 +0000 UTC m=+428.428423438 I0227 01:33:12.801118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8xcqj-vdzj7" condition "Ready" to 2026-02-27 01:33:12.801095704 +0000 UTC m=+428.450910074 I0227 01:33:12.823578 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:12.823564949 +0000 UTC m=+428.473379319 I0227 01:33:12.840415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:12.840762 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:12.840754976 +0000 UTC m=+428.490569336 I0227 01:33:12.859058 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8xcqj-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:45.569969 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-02-27 01:33:45.569923879 +0000 UTC m=+461.219738239 I0227 01:33:45.570115 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:33:45.570171 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-02-27 01:33:45.570165984 +0000 UTC m=+461.219980334 I0227 01:33:45.582608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:45.582675 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-02-27 01:33:45.582669115 +0000 UTC m=+461.232483475 I0227 01:33:45.651735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:45.682044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bp4cx" condition "Approved" to 2026-02-27 01:33:45.682030229 +0000 UTC m=+461.331844599 I0227 01:33:45.698473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-bp4cx" condition "Ready" to 2026-02-27 01:33:45.698464389 +0000 UTC m=+461.348278739 I0227 01:33:45.721473 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:45.721461766 +0000 UTC m=+461.371276126 I0227 01:33:45.738264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:45.738854 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:45.738846436 +0000 UTC m=+461.388660796 I0227 01:33:45.752951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:33:45.753259 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:33:45.75325186 +0000 UTC m=+461.403066220 I0227 01:33:45.754429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:37:14.058279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:37:14.058368 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-02-27 01:37:14.058359483 +0000 UTC m=+669.708173873 I0227 01:37:14.058349 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-02-27 01:37:14.058335493 +0000 UTC m=+669.708149873 I0227 01:37:14.076197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:37:14.076291 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-02-27 01:37:14.076283033 +0000 UTC m=+669.726097393 I0227 01:37:14.174304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:37:14.207547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cw4hb" condition "Approved" to 2026-02-27 01:37:14.207535496 +0000 UTC m=+669.857349886 I0227 01:37:14.223569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-cw4hb" condition "Ready" to 2026-02-27 01:37:14.223555203 +0000 UTC m=+669.873369563 I0227 01:37:14.251041 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:37:14.251028697 +0000 UTC m=+669.900843047 I0227 01:37:14.271698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:37:14.271984 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:37:14.271976416 +0000 UTC m=+669.921790776 I0227 01:37:14.275220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:37:14.294383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:39:47.335768 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:39:47.335920 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-02-27 01:39:47.335907493 +0000 UTC m=+822.985721883 I0227 01:39:47.335737 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-02-27 01:39:47.335696178 +0000 UTC m=+822.985510558 I0227 01:39:47.353708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:39:47.353894 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-02-27 01:39:47.353881904 +0000 UTC m=+823.003696294 I0227 01:39:47.550175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:39:47.583550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-7qwtb" condition "Approved" to 2026-02-27 01:39:47.583535345 +0000 UTC m=+823.233349725 I0227 01:39:47.600921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-7qwtb" condition "Ready" to 2026-02-27 01:39:47.600903723 +0000 UTC m=+823.250718113 I0227 01:39:47.626008 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:39:47.625993474 +0000 UTC m=+823.275807834 I0227 01:39:47.646418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:39:47.695512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:41:03.967765 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:41:03.967813 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-02-27 01:41:03.967801196 +0000 UTC m=+899.617615556 I0227 01:41:03.968106 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-02-27 01:41:03.968087383 +0000 UTC m=+899.617901743 I0227 01:41:03.987668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:41:03.987789 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:41:03.987841 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-02-27 01:41:03.987834304 +0000 UTC m=+899.637648664 I0227 01:41:04.258294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5mp5l" condition "Approved" to 2026-02-27 01:41:04.258271326 +0000 UTC m=+899.908085706 I0227 01:41:04.282707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-5mp5l" condition "Ready" to 2026-02-27 01:41:04.282692731 +0000 UTC m=+899.932507111 I0227 01:41:04.319539 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:41:04.319522364 +0000 UTC m=+899.969336714 I0227 01:41:04.344727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:41:04.348165 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:41:04.348149214 +0000 UTC m=+899.997963584 I0227 01:41:04.367169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:41:04.375283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:44:12.959158 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0227 01:44:12.959226 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-02-27 01:44:12.959218833 +0000 UTC m=+1088.609033193 I0227 01:44:12.959698 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-02-27 01:44:12.959692044 +0000 UTC m=+1088.609506404 I0227 01:44:12.983967 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:44:12.984027 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-02-27 01:44:12.984021477 +0000 UTC m=+1088.633835837 I0227 01:44:13.162067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:44:13.201932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-bkdxm" condition "Approved" to 2026-02-27 01:44:13.201922001 +0000 UTC m=+1088.851736341 I0227 01:44:13.223970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-bkdxm" condition "Ready" to 2026-02-27 01:44:13.223959463 +0000 UTC m=+1088.873773833 I0227 01:44:13.255422 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-02-27 01:44:13.255412775 +0000 UTC m=+1088.905227125 I0227 01:44:13.278050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0227 01:44:13.331338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"