I0515 14:18:56.196791 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0515 14:18:56.197099 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0515 14:18:56.197217 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0515 14:18:56.202248 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0515 14:18:56.202947 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0515 14:18:56.203030 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0515 14:18:56.203060 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0515 14:18:56.205698 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0515 14:18:56.222694 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0515 14:18:56.231420 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0515 14:18:56.234651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0515 14:18:56.239817 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0515 14:18:56.239862 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0515 14:18:56.240024 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0515 14:18:56.243207 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0515 14:18:56.245835 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0515 14:18:56.245867 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0515 14:18:56.245878 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0515 14:18:56.246017 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0515 14:18:56.248822 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0515 14:18:56.251444 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0515 14:18:56.253754 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0515 14:18:56.256274 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0515 14:18:56.258841 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0515 14:18:56.258877 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0515 14:18:56.266113 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0515 14:18:56.274119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0515 14:18:56.276299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0515 14:18:56.278626 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0515 14:18:56.280583 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0515 14:18:56.282528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0515 14:18:56.284351 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0515 14:18:56.286724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0515 14:18:56.292306 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:18:56.292852 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:18:56.293331 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:18:56.293586 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:18:56.311715 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:18:56.326331 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:18:56.346570 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:18:56.362069 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:18:56.381980 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:18:56.397074 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0515 14:19:08.594547 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-15 14:19:08.59453268 +0000 UTC m=+12.451353714 I0515 14:19:09.418527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:19:09.418624 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-15 14:19:09.418611948 +0000 UTC m=+13.275433022 I0515 14:19:09.418606 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-15 14:19:09.418584387 +0000 UTC m=+13.275405411 I0515 14:19:09.433832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:19:09.433943 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-15 14:19:09.433932515 +0000 UTC m=+13.290753549 E0515 14:19:09.436941 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 14:19:09.437044 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-15 14:19:09.437034905 +0000 UTC m=+13.293855949 E0515 14:19:09.437081 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 14:19:09.482724 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0515 14:19:09.483221 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 14:19:09.483270 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 14:19:09.483358 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0515 14:19:09.487961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:19:09.518272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kfds9" condition "Approved" to 2026-05-15 14:19:09.518253135 +0000 UTC m=+13.375074169 I0515 14:19:09.533345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kfds9" condition "Ready" to 2026-05-15 14:19:09.533325224 +0000 UTC m=+13.390146258 I0515 14:19:09.560629 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:19:09.560615257 +0000 UTC m=+13.417436281 I0515 14:19:09.576327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:19:09.576732 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:19:09.576722669 +0000 UTC m=+13.433543703 I0515 14:19:09.590867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:19:09.600315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:19:14.483372 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:19:14.483340333 +0000 UTC m=+18.340161377 I0515 14:19:41.421879 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-15 14:19:41.421858174 +0000 UTC m=+45.278679208 I0515 14:19:41.422276 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:19:41.422417 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-15 14:19:41.422403252 +0000 UTC m=+45.279224296 I0515 14:19:41.437304 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-15 14:19:41.437282484 +0000 UTC m=+45.294103508 I0515 14:19:41.448158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:19:41.448265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:19:41.448296 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-15 14:19:41.44828892 +0000 UTC m=+45.305109944 I0515 14:19:41.711385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:19:41.724941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5t4km" condition "Approved" to 2026-05-15 14:19:41.724925049 +0000 UTC m=+45.581746083 I0515 14:19:41.773273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-5t4km" condition "Ready" to 2026-05-15 14:19:41.773257424 +0000 UTC m=+45.630078458 I0515 14:19:41.811478 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:19:41.811452001 +0000 UTC m=+45.668273035 I0515 14:19:41.836401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:19:41.838570 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:19:41.838556109 +0000 UTC m=+45.695377143 I0515 14:19:41.849362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:19:41.864148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:19:41.864531 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:19:41.86452126 +0000 UTC m=+45.721342284 I0515 14:22:01.482559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:22:01.482769 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-15 14:22:01.482709966 +0000 UTC m=+185.339531040 I0515 14:22:01.482797 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-15 14:22:01.482781009 +0000 UTC m=+185.339602073 E0515 14:22:01.500008 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0515 14:22:01.500110 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-15 14:22:01.500100147 +0000 UTC m=+185.356921181 I0515 14:22:01.500138 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0515 14:22:01.502829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:22:01.503035 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-15 14:22:01.50302007 +0000 UTC m=+185.359841154 E0515 14:22:01.512192 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0515 14:22:01.512460 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0515 14:22:01.512536 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0515 14:22:01.512624 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0515 14:22:01.516773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:22:01.516834 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-15 14:22:01.516823517 +0000 UTC m=+185.373644561 I0515 14:22:01.516801 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-15 14:22:01.516777826 +0000 UTC m=+185.373598880 I0515 14:22:01.531473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:22:01.531560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:22:01.531591 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-15 14:22:01.531581375 +0000 UTC m=+185.388402409 I0515 14:22:01.579289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:22:01.615301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-r8ccv" condition "Approved" to 2026-05-15 14:22:01.615271847 +0000 UTC m=+185.472092901 I0515 14:22:01.647406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-r8ccv" condition "Ready" to 2026-05-15 14:22:01.647390424 +0000 UTC m=+185.504211448 I0515 14:22:01.682272 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:22:01.682251289 +0000 UTC m=+185.539072323 I0515 14:22:01.712500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:22:01.712848 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:22:01.712839338 +0000 UTC m=+185.569660372 I0515 14:22:01.720468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:22:01.731217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:22:01.735003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:22:01.735366 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:22:01.735355712 +0000 UTC m=+185.592176756 I0515 14:22:01.764124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:22:01.774820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-tcvrm" condition "Approved" to 2026-05-15 14:22:01.774796611 +0000 UTC m=+185.631617665 I0515 14:22:01.795647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-tcvrm" condition "Ready" to 2026-05-15 14:22:01.795617091 +0000 UTC m=+185.652438155 I0515 14:22:06.513066 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:22:06.513048676 +0000 UTC m=+190.369869730 I0515 14:22:06.530390 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-tcvrm" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:22:06.530375352 +0000 UTC m=+190.387196396 I0515 14:22:06.564903 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:22:06.564882308 +0000 UTC m=+190.421703332 I0515 14:22:06.588993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:22:06.589397 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:22:06.589389004 +0000 UTC m=+190.446210028 I0515 14:22:06.598595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:22:06.610336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:24:54.393229 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready" to 2026-05-15 14:24:54.393184521 +0000 UTC m=+358.250005585 I0515 14:24:54.393353 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-138.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:24:54.393383 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Issuing" to 2026-05-15 14:24:54.393376867 +0000 UTC m=+358.250197911 I0515 14:24:54.424017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:24:54.424519 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready" to 2026-05-15 14:24:54.424508811 +0000 UTC m=+358.281329835 I0515 14:24:54.554402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:24:54.590707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-138.nip.io-tls-scdqx" condition "Approved" to 2026-05-15 14:24:54.590688879 +0000 UTC m=+358.447509943 I0515 14:24:54.612397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-138.nip.io-tls-scdqx" condition "Ready" to 2026-05-15 14:24:54.612384282 +0000 UTC m=+358.469205326 I0515 14:24:54.646434 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-138.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:24:54.646421139 +0000 UTC m=+358.503242183 I0515 14:24:54.676079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-138.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-138.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:26:11.223238 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-15 14:26:11.223188401 +0000 UTC m=+435.080009445 I0515 14:26:11.223508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:26:11.223597 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-15 14:26:11.223581994 +0000 UTC m=+435.080403028 I0515 14:26:11.238826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:26:11.238929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:26:11.238959 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-15 14:26:11.238949196 +0000 UTC m=+435.095770240 E0515 14:26:11.240508 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0515 14:26:11.240633 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-15 14:26:11.240623009 +0000 UTC m=+435.097444043 E0515 14:26:11.240746 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 14:26:11.256383 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0515 14:26:11.256650 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 14:26:11.256700 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0515 14:26:11.256749 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0515 14:26:11.288203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wpqtg" condition "Approved" to 2026-05-15 14:26:11.288186042 +0000 UTC m=+435.145007156 I0515 14:26:11.300607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wpqtg" condition "Ready" to 2026-05-15 14:26:11.300592599 +0000 UTC m=+435.157413643 I0515 14:26:11.331063 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:26:11.331045593 +0000 UTC m=+435.187866657 I0515 14:26:11.349277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:26:11.349527 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:26:11.349521245 +0000 UTC m=+435.206342269 I0515 14:26:11.720573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:26:11.727471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:26:16.257877 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:26:16.257855228 +0000 UTC m=+440.114676292 I0515 14:26:59.955781 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-15 14:26:59.95576721 +0000 UTC m=+483.812588234 I0515 14:26:59.959860 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:26:59.959901 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-15 14:26:59.959892732 +0000 UTC m=+483.816713756 I0515 14:26:59.964453 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-15 14:26:59.964441098 +0000 UTC m=+483.821262132 I0515 14:26:59.964653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:26:59.964701 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-15 14:26:59.964693446 +0000 UTC m=+483.821514490 I0515 14:26:59.964874 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:26:59.964898 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-15 14:26:59.964894022 +0000 UTC m=+483.821715056 I0515 14:26:59.964949 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-15 14:26:59.964925303 +0000 UTC m=+483.821746337 I0515 14:26:59.996588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:26:59.996650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:26:59.996672 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-15 14:26:59.996665889 +0000 UTC m=+483.853486923 I0515 14:27:00.028271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:00.028343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:27:00.028361 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-15 14:27:00.028356543 +0000 UTC m=+483.885177567 I0515 14:27:00.035639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:00.035720 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-15 14:27:00.035713428 +0000 UTC m=+483.892534452 I0515 14:27:00.290881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cz8rq" condition "Approved" to 2026-05-15 14:27:00.290867894 +0000 UTC m=+484.147688928 I0515 14:27:00.316081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-cz8rq" condition "Ready" to 2026-05-15 14:27:00.31606068 +0000 UTC m=+484.172881714 I0515 14:27:00.376659 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:27:00.376646149 +0000 UTC m=+484.233467173 I0515 14:27:00.386306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:00.386517 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:27:00.386512645 +0000 UTC m=+484.243333669 I0515 14:27:00.398823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:00.412131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:00.412620 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:27:00.41260894 +0000 UTC m=+484.269430004 I0515 14:27:00.602804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:00.631694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:00.633220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-j4fqc" condition "Approved" to 2026-05-15 14:27:00.633207161 +0000 UTC m=+484.490028185 I0515 14:27:00.649638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-75z7x" condition "Approved" to 2026-05-15 14:27:00.649619666 +0000 UTC m=+484.506440700 I0515 14:27:00.652202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-j4fqc" condition "Ready" to 2026-05-15 14:27:00.652191488 +0000 UTC m=+484.509012512 I0515 14:27:00.675940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-75z7x" condition "Ready" to 2026-05-15 14:27:00.675928418 +0000 UTC m=+484.532749442 I0515 14:27:01.002894 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:27:01.002871332 +0000 UTC m=+484.859692366 I0515 14:27:01.159826 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:27:01.159800535 +0000 UTC m=+485.016621589 I0515 14:27:01.255183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:01.255568 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:27:01.25556141 +0000 UTC m=+485.112382434 I0515 14:27:01.355362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:01.355995 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:27:01.355984634 +0000 UTC m=+485.212805688 I0515 14:27:01.804030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:01.854624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:01.903889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:01.951892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:10.207507 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls" condition "Ready" to 2026-05-15 14:27:10.207490323 +0000 UTC m=+494.064311357 I0515 14:27:10.208065 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:27:10.208114 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls" condition "Issuing" to 2026-05-15 14:27:10.208102343 +0000 UTC m=+494.064923397 I0515 14:27:10.223787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:10.223869 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls" condition "Ready" to 2026-05-15 14:27:10.223859617 +0000 UTC m=+494.080680651 I0515 14:27:10.384347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:10.419262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gmcf7-sdpqb" condition "Approved" to 2026-05-15 14:27:10.41924717 +0000 UTC m=+494.276068204 I0515 14:27:10.439144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gmcf7-sdpqb" condition "Ready" to 2026-05-15 14:27:10.439129817 +0000 UTC m=+494.295950851 I0515 14:27:10.470393 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:27:10.470380587 +0000 UTC m=+494.327201611 I0515 14:27:10.490910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:10.491235 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:27:10.491226714 +0000 UTC m=+494.348047748 I0515 14:27:10.517148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gmcf7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:42.252175 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-15 14:27:42.252127328 +0000 UTC m=+526.108948392 I0515 14:27:42.252775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:27:42.252799 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-15 14:27:42.252792429 +0000 UTC m=+526.109613483 I0515 14:27:42.271843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:42.272017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:27:42.272067 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-15 14:27:42.272052776 +0000 UTC m=+526.128873840 I0515 14:27:48.717437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mkg97" condition "Approved" to 2026-05-15 14:27:48.717395373 +0000 UTC m=+532.574216427 I0515 14:27:48.808493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mkg97" condition "Ready" to 2026-05-15 14:27:48.808480531 +0000 UTC m=+532.665301575 I0515 14:27:48.877251 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:27:48.877235603 +0000 UTC m=+532.734056637 I0515 14:27:48.921588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:27:49.049788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:31:28.735951 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:31:28.736023 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-15 14:31:28.735986237 +0000 UTC m=+752.592807261 I0515 14:31:28.736026 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-15 14:31:28.735985567 +0000 UTC m=+752.592806621 I0515 14:31:28.756036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:31:28.756133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:31:28.756163 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-15 14:31:28.756152241 +0000 UTC m=+752.612973295 I0515 14:31:28.986864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:31:28.988110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2v64f" condition "Approved" to 2026-05-15 14:31:28.988094663 +0000 UTC m=+752.844915707 I0515 14:31:29.012788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-2v64f" condition "Ready" to 2026-05-15 14:31:29.012769811 +0000 UTC m=+752.869590875 I0515 14:31:29.041779 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:31:29.041765726 +0000 UTC m=+752.898586760 I0515 14:31:29.072475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:31:29.072955 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:31:29.072946731 +0000 UTC m=+752.929767765 I0515 14:31:29.092593 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:31:29.093094 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:31:29.093082814 +0000 UTC m=+752.949903848 I0515 14:34:20.334350 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:34:20.334465 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-15 14:34:20.334443198 +0000 UTC m=+924.191264262 I0515 14:34:20.334460 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-15 14:34:20.334416947 +0000 UTC m=+924.191238011 I0515 14:34:20.350047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:34:20.350299 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-15 14:34:20.350255651 +0000 UTC m=+924.207076695 I0515 14:34:20.556624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:34:20.590100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-m69vs" condition "Approved" to 2026-05-15 14:34:20.590088196 +0000 UTC m=+924.446909240 I0515 14:34:20.607963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-m69vs" condition "Ready" to 2026-05-15 14:34:20.607952824 +0000 UTC m=+924.464773858 I0515 14:34:20.634376 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:34:20.634362744 +0000 UTC m=+924.491183778 I0515 14:34:20.661702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:34:20.662125 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:34:20.662117306 +0000 UTC m=+924.518938340 I0515 14:34:20.686562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:34:20.686636 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:34:20.687469 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:34:20.687456502 +0000 UTC m=+924.544277556 I0515 14:35:41.052275 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:35:41.052315 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-15 14:35:41.052297017 +0000 UTC m=+1004.909118071 I0515 14:35:41.052332 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-15 14:35:41.052324708 +0000 UTC m=+1004.909145732 I0515 14:35:41.073844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:35:41.073940 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-15 14:35:41.073931065 +0000 UTC m=+1004.930752129 I0515 14:35:41.345497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:35:41.381277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-g84hx" condition "Approved" to 2026-05-15 14:35:41.381260156 +0000 UTC m=+1005.238081190 I0515 14:35:41.408803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-g84hx" condition "Ready" to 2026-05-15 14:35:41.408791521 +0000 UTC m=+1005.265612545 I0515 14:35:41.444335 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:35:41.444326071 +0000 UTC m=+1005.301147095 I0515 14:35:41.479214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:35:41.479746 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:35:41.479736557 +0000 UTC m=+1005.336557601 I0515 14:35:41.496074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:35:41.498948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:35:41.499469 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:35:41.499459374 +0000 UTC m=+1005.356280408 I0515 14:39:06.479661 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0515 14:39:06.479719 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-15 14:39:06.479687707 +0000 UTC m=+1210.336508721 I0515 14:39:06.479742 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-15 14:39:06.479735179 +0000 UTC m=+1210.336556213 I0515 14:39:06.498324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:39:06.498505 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-15 14:39:06.49849002 +0000 UTC m=+1210.355311054 I0515 14:39:06.761428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:39:06.794402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-w2lbt" condition "Approved" to 2026-05-15 14:39:06.794387686 +0000 UTC m=+1210.651208700 I0515 14:39:06.820264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-w2lbt" condition "Ready" to 2026-05-15 14:39:06.820249425 +0000 UTC m=+1210.677070469 I0515 14:39:06.853500 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:39:06.85347734 +0000 UTC m=+1210.710298394 I0515 14:39:06.875646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:39:06.875962 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:39:06.875955211 +0000 UTC m=+1210.732776245 I0515 14:39:06.897974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0515 14:39:06.898625 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-15 14:39:06.898611097 +0000 UTC m=+1210.755432151 E0515 14:46:59.490777 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0515 14:46:59.490845 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0515 14:47:06.512148 1 leaderelection.go:308] Failed to release lock: etcdserver: request timed out I0515 14:47:06.513217 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0515 14:47:06.513300 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0515 14:47:06.513327 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0515 14:47:06.513328 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0515 14:47:06.513343 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0515 14:47:06.513356 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0515 14:47:06.513369 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0515 14:47:06.513382 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0515 14:47:06.513393 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0515 14:47:06.513405 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0515 14:47:06.513415 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0515 14:47:06.513426 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0515 14:47:06.513436 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0515 14:47:06.513447 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0515 14:47:06.513460 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0515 14:47:06.513471 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0515 14:47:06.513483 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0515 14:47:06.513495 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" E0515 14:47:06.514000 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"