I0313 10:17:20.553747 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0313 10:17:20.553929 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0313 10:17:20.554023 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0313 10:17:20.558256 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0313 10:17:20.558654 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0313 10:17:20.558764 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0313 10:17:20.558824 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0313 10:17:20.561370 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0313 10:17:20.577139 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0313 10:17:20.580007 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0313 10:17:20.583734 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0313 10:17:20.587438 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0313 10:17:20.589800 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0313 10:17:20.592253 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0313 10:17:20.594584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0313 10:17:20.597128 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0313 10:17:20.598952 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0313 10:17:20.598981 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0313 10:17:20.599048 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0313 10:17:20.603546 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0313 10:17:20.603719 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0313 10:17:20.607863 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0313 10:17:20.611384 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0313 10:17:20.613863 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0313 10:17:20.613881 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0313 10:17:20.614003 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0313 10:17:20.615749 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0313 10:17:20.617529 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0313 10:17:20.619347 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0313 10:17:20.621189 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0313 10:17:20.625042 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0313 10:17:20.625247 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0313 10:17:20.631144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0313 10:17:20.633385 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 10:17:20.633844 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 10:17:20.634565 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 10:17:20.651045 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 10:17:20.670254 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 10:17:20.671816 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 10:17:20.694986 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 10:17:20.716579 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 10:17:20.733220 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 10:17:20.751186 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 10:17:37.839084 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-13 10:17:37.839071241 +0000 UTC m=+17.315258038 I0313 10:17:38.519097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:17:38.519215 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-13 10:17:38.519205217 +0000 UTC m=+17.995392084 I0313 10:17:38.519077 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-13 10:17:38.519059733 +0000 UTC m=+17.995246590 E0313 10:17:38.534229 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 10:17:38.534336 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-13 10:17:38.534322659 +0000 UTC m=+18.010509496 E0313 10:17:38.534391 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 10:17:38.534471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:17:38.534620 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-13 10:17:38.534610267 +0000 UTC m=+18.010797074 E0313 10:17:38.544115 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0313 10:17:38.544295 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 10:17:38.544399 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 10:17:38.544523 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0313 10:17:38.554225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:17:38.577479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kprgv" condition "Approved" to 2026-03-13 10:17:38.577434222 +0000 UTC m=+18.053621059 I0313 10:17:38.593145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kprgv" condition "Ready" to 2026-03-13 10:17:38.59313061 +0000 UTC m=+18.069317427 I0313 10:17:38.618431 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:17:38.618424506 +0000 UTC m=+18.094611313 I0313 10:17:38.638685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:17:38.639480 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:17:38.639464013 +0000 UTC m=+18.115650850 I0313 10:17:38.643023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:17:38.655021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:17:38.655551 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:17:38.655534261 +0000 UTC m=+18.131721088 I0313 10:17:43.544545 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:17:43.544514149 +0000 UTC m=+23.020700976 I0313 10:18:04.770667 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:18:04.770748 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-13 10:18:04.770739996 +0000 UTC m=+44.246926803 I0313 10:18:04.770747 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-13 10:18:04.770725606 +0000 UTC m=+44.246912433 I0313 10:18:04.780722 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-13 10:18:04.780709044 +0000 UTC m=+44.256895841 I0313 10:18:04.794887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:18:04.794951 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:18:04.794970 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-13 10:18:04.794964952 +0000 UTC m=+44.271151749 I0313 10:18:04.917265 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qj4fs" condition "Approved" to 2026-03-13 10:18:04.917251744 +0000 UTC m=+44.393438571 I0313 10:18:04.945902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qj4fs" condition "Ready" to 2026-03-13 10:18:04.945890953 +0000 UTC m=+44.422077770 I0313 10:18:04.972598 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:18:04.972584328 +0000 UTC m=+44.448771155 I0313 10:18:04.989922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:18:04.990419 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:18:04.990409865 +0000 UTC m=+44.466596682 I0313 10:18:05.000116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:18:05.007710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:19:50.085491 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:19:50.085537 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-13 10:19:50.085527767 +0000 UTC m=+149.561714624 I0313 10:19:50.085575 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-13 10:19:50.085549868 +0000 UTC m=+149.561736705 E0313 10:19:50.100133 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0313 10:19:50.100181 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-13 10:19:50.100175086 +0000 UTC m=+149.576361893 I0313 10:19:50.100241 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0313 10:19:50.102772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:19:50.102873 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:19:50.102917 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-13 10:19:50.10291174 +0000 UTC m=+149.579098557 E0313 10:19:50.108637 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0313 10:19:50.109158 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0313 10:19:50.109303 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0313 10:19:50.109393 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0313 10:19:50.114266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:19:50.114329 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-13 10:19:50.114313721 +0000 UTC m=+149.590500568 I0313 10:19:50.114376 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-13 10:19:50.114347012 +0000 UTC m=+149.590533819 I0313 10:19:50.128365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:19:50.128418 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:19:50.128431 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-13 10:19:50.128425445 +0000 UTC m=+149.604612242 I0313 10:19:50.219659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:19:50.227112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-szqgj" condition "Approved" to 2026-03-13 10:19:50.227096982 +0000 UTC m=+149.703283779 I0313 10:19:50.251940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-szqgj" condition "Ready" to 2026-03-13 10:19:50.251918328 +0000 UTC m=+149.728105165 I0313 10:19:50.277285 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:19:50.277276118 +0000 UTC m=+149.753462915 I0313 10:19:50.296286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:19:50.296545 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:19:50.296536812 +0000 UTC m=+149.772723609 I0313 10:19:50.313828 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:19:50.314094 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:19:50.31408723 +0000 UTC m=+149.790274027 I0313 10:19:50.369444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:19:50.375567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-98f29" condition "Approved" to 2026-03-13 10:19:50.375548304 +0000 UTC m=+149.851735131 I0313 10:19:50.389517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-98f29" condition "Ready" to 2026-03-13 10:19:50.389505754 +0000 UTC m=+149.865692551 I0313 10:19:55.110056 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:19:55.110038292 +0000 UTC m=+154.586225129 I0313 10:19:55.125184 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-98f29" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:19:55.125172664 +0000 UTC m=+154.601359471 I0313 10:19:55.154246 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:19:55.154232415 +0000 UTC m=+154.630419222 I0313 10:19:55.169469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:19:55.169916 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:19:55.169906562 +0000 UTC m=+154.646093389 I0313 10:19:55.190138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:22:21.226306 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-10.nip.io-tls" condition "Ready" to 2026-03-13 10:22:21.226287444 +0000 UTC m=+300.702474271 I0313 10:22:21.226377 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-10.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:22:21.226751 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-10.nip.io-tls" condition "Issuing" to 2026-03-13 10:22:21.226742606 +0000 UTC m=+300.702929433 I0313 10:22:21.252751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-10.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-10.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:22:21.252852 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-10.nip.io-tls" condition "Ready" to 2026-03-13 10:22:21.25284141 +0000 UTC m=+300.729028217 I0313 10:22:21.719110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-10.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-10.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:22:21.746566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-10.nip.io-tls-6l295" condition "Approved" to 2026-03-13 10:22:21.74655419 +0000 UTC m=+301.222741017 I0313 10:22:21.763040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-10.nip.io-tls-6l295" condition "Ready" to 2026-03-13 10:22:21.76303012 +0000 UTC m=+301.239216957 I0313 10:22:21.788121 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-10.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:22:21.788114077 +0000 UTC m=+301.264300884 I0313 10:22:21.806248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-10.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-10.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:23:29.899614 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:23:29.899672 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-13 10:23:29.899649885 +0000 UTC m=+369.375836712 I0313 10:23:29.899684 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-13 10:23:29.899668456 +0000 UTC m=+369.375855283 E0313 10:23:29.911702 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 10:23:29.911758 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-13 10:23:29.911749512 +0000 UTC m=+369.387936349 E0313 10:23:29.911850 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 10:23:29.913573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:23:29.913703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:23:29.913734 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-13 10:23:29.913725875 +0000 UTC m=+369.389912682 E0313 10:23:29.923063 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0313 10:23:29.923695 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 10:23:29.923744 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 10:23:29.923797 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0313 10:23:29.949202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:23:29.949553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jklcl" condition "Approved" to 2026-03-13 10:23:29.94952998 +0000 UTC m=+369.425716787 I0313 10:23:29.959902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jklcl" condition "Ready" to 2026-03-13 10:23:29.959880949 +0000 UTC m=+369.436067756 I0313 10:23:29.979173 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:23:29.979159859 +0000 UTC m=+369.455346666 I0313 10:23:30.022816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:23:34.926087 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:23:34.926071085 +0000 UTC m=+374.402257912 I0313 10:24:11.995608 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-13 10:24:11.995585927 +0000 UTC m=+411.471772764 I0313 10:24:11.996157 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:24:11.996182 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-13 10:24:11.996174683 +0000 UTC m=+411.472361490 I0313 10:24:12.001636 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-13 10:24:12.001623369 +0000 UTC m=+411.477810236 I0313 10:24:12.001676 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:24:12.001708 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-13 10:24:12.001699501 +0000 UTC m=+411.477886298 I0313 10:24:12.002486 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-13 10:24:12.002477992 +0000 UTC m=+411.478664799 I0313 10:24:12.002745 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:24:12.002768 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-13 10:24:12.00276415 +0000 UTC m=+411.478950957 I0313 10:24:12.042606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:12.042648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:12.042785 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-13 10:24:12.042680596 +0000 UTC m=+411.518867403 I0313 10:24:12.042789 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:24:12.042874 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-13 10:24:12.04283974 +0000 UTC m=+411.519026577 I0313 10:24:12.044154 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:12.044212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:24:12.044260 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-13 10:24:12.044255858 +0000 UTC m=+411.520442665 I0313 10:24:12.197074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:12.203842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n6ckt" condition "Approved" to 2026-03-13 10:24:12.203823459 +0000 UTC m=+411.680010296 I0313 10:24:12.226194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-n6ckt" condition "Ready" to 2026-03-13 10:24:12.226179792 +0000 UTC m=+411.702366599 I0313 10:24:12.231891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dkkms" condition "Approved" to 2026-03-13 10:24:12.231872875 +0000 UTC m=+411.708059712 I0313 10:24:12.248619 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-dkkms" condition "Ready" to 2026-03-13 10:24:12.248602466 +0000 UTC m=+411.724789303 I0313 10:24:12.251204 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:24:12.251186486 +0000 UTC m=+411.727373293 I0313 10:24:12.281103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:12.320795 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:24:12.320778702 +0000 UTC m=+411.796965499 I0313 10:24:12.342410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:12.342998 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:24:12.34298308 +0000 UTC m=+411.819169907 I0313 10:24:12.649488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:12.847824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pfqf7" condition "Approved" to 2026-03-13 10:24:12.847804937 +0000 UTC m=+412.323991744 I0313 10:24:13.153998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pfqf7" condition "Ready" to 2026-03-13 10:24:13.153980409 +0000 UTC m=+412.630167246 I0313 10:24:13.527640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:24:13.527683 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-13 10:24:13.527674091 +0000 UTC m=+413.003860888 I0313 10:24:13.538422 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:24:13.538411351 +0000 UTC m=+413.014598148 I0313 10:24:13.643909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:13.644543 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:24:13.644525691 +0000 UTC m=+413.120712548 I0313 10:24:13.692706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:13.949776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-v88fs" condition "Approved" to 2026-03-13 10:24:13.949755498 +0000 UTC m=+413.425942305 I0313 10:24:14.156144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-v88fs" condition "Ready" to 2026-03-13 10:24:14.156130711 +0000 UTC m=+413.632317518 I0313 10:24:14.792345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:14.807279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:21.758202 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhf92-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:24:21.758231 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lhf92-tls" condition "Issuing" to 2026-03-13 10:24:21.758224035 +0000 UTC m=+421.234410832 I0313 10:24:21.758734 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lhf92-tls" condition "Ready" to 2026-03-13 10:24:21.758729739 +0000 UTC m=+421.234916526 I0313 10:24:21.773923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhf92-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lhf92-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:21.773982 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lhf92-tls" condition "Ready" to 2026-03-13 10:24:21.773976259 +0000 UTC m=+421.250163056 I0313 10:24:21.871997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhf92-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lhf92-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:21.908457 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lhf92-7fs2k" condition "Approved" to 2026-03-13 10:24:21.908443084 +0000 UTC m=+421.384629881 I0313 10:24:21.988022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lhf92-7fs2k" condition "Ready" to 2026-03-13 10:24:21.988010238 +0000 UTC m=+421.464197035 I0313 10:24:22.610315 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lhf92-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:24:22.610290291 +0000 UTC m=+422.086477118 I0313 10:24:22.888305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhf92-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lhf92-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:22.888638 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lhf92-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:24:22.888628933 +0000 UTC m=+422.364815730 I0313 10:24:22.897016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhf92-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lhf92-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:22.903845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lhf92-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lhf92-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:22.904174 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lhf92-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:24:22.904164292 +0000 UTC m=+422.380351099 I0313 10:24:52.529461 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-13 10:24:52.529409504 +0000 UTC m=+452.005596331 I0313 10:24:52.529805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:24:52.529863 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-13 10:24:52.529852776 +0000 UTC m=+452.006039563 I0313 10:24:52.546870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:52.546990 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-13 10:24:52.546977986 +0000 UTC m=+452.023164823 I0313 10:24:52.795599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:52.830935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-m6wf7" condition "Approved" to 2026-03-13 10:24:52.830915811 +0000 UTC m=+452.307102618 I0313 10:24:52.849872 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-m6wf7" condition "Ready" to 2026-03-13 10:24:52.849863171 +0000 UTC m=+452.326049978 I0313 10:24:52.880415 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:24:52.880396443 +0000 UTC m=+452.356583250 I0313 10:24:52.902927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:24:52.903222 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:24:52.903210807 +0000 UTC m=+452.379397614 I0313 10:24:52.919629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:28:10.698562 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-13 10:28:10.698543377 +0000 UTC m=+650.174730194 I0313 10:28:10.698652 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:28:10.698703 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-13 10:28:10.698698241 +0000 UTC m=+650.174885048 I0313 10:28:10.716251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:28:10.716397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:28:10.716430 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-13 10:28:10.716422177 +0000 UTC m=+650.192609014 I0313 10:28:10.985019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z267q" condition "Approved" to 2026-03-13 10:28:10.985004373 +0000 UTC m=+650.461191210 I0313 10:28:11.018837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z267q" condition "Ready" to 2026-03-13 10:28:11.01882696 +0000 UTC m=+650.495013757 I0313 10:28:11.042945 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:28:11.04293124 +0000 UTC m=+650.519118037 I0313 10:28:11.068809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:28:11.069508 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:28:11.069496448 +0000 UTC m=+650.545683275 I0313 10:28:11.081330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:28:11.091195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:28:11.091594 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:28:11.091581153 +0000 UTC m=+650.567767980 I0313 10:30:30.752039 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:30:30.752067 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-13 10:30:30.75205118 +0000 UTC m=+790.228238007 I0313 10:30:30.752119 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-13 10:30:30.752109192 +0000 UTC m=+790.228296019 I0313 10:30:30.769641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:30:30.769837 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-13 10:30:30.769804613 +0000 UTC m=+790.245991420 I0313 10:30:31.081288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:30:31.106664 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-7vxpw" condition "Approved" to 2026-03-13 10:30:31.106653886 +0000 UTC m=+790.582840693 I0313 10:30:31.125898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-7vxpw" condition "Ready" to 2026-03-13 10:30:31.125886179 +0000 UTC m=+790.602072976 I0313 10:30:31.151285 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:30:31.151266618 +0000 UTC m=+790.627453445 I0313 10:30:31.170619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:31:40.500842 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-13 10:31:40.500821452 +0000 UTC m=+859.977008259 I0313 10:31:40.500925 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:31:40.500964 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-13 10:31:40.500956435 +0000 UTC m=+859.977143242 I0313 10:31:40.516434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:31:40.516560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:31:40.516589 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-13 10:31:40.51658097 +0000 UTC m=+859.992767807 I0313 10:31:41.090287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:31:41.099238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-qdj9g" condition "Approved" to 2026-03-13 10:31:41.099224572 +0000 UTC m=+860.575411399 I0313 10:31:41.117643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-qdj9g" condition "Ready" to 2026-03-13 10:31:41.117633483 +0000 UTC m=+860.593820290 I0313 10:31:41.147589 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:31:41.147578286 +0000 UTC m=+860.623765104 I0313 10:31:41.173334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:31:41.173594 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:31:41.173588153 +0000 UTC m=+860.649774960 I0313 10:31:41.190678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:34:47.285080 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:34:47.285148 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-13 10:34:47.285143191 +0000 UTC m=+1046.761329988 I0313 10:34:47.285119 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-13 10:34:47.2851001 +0000 UTC m=+1046.761286927 I0313 10:34:47.305301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:34:47.305410 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-13 10:34:47.305400866 +0000 UTC m=+1046.781587673 I0313 10:34:47.404714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:34:47.435839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-lgf4g" condition "Approved" to 2026-03-13 10:34:47.435823359 +0000 UTC m=+1046.912010166 I0313 10:34:47.466916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-lgf4g" condition "Ready" to 2026-03-13 10:34:47.466903704 +0000 UTC m=+1046.943090511 I0313 10:34:47.494439 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:34:47.494421133 +0000 UTC m=+1046.970607940 I0313 10:34:47.529569 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:34:47.530290 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:34:47.530279366 +0000 UTC m=+1047.006466173 I0313 10:34:47.555864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"