I0401 23:29:53.605724 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0401 23:29:53.605916 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0401 23:29:53.606035 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0401 23:29:53.610126 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0401 23:29:53.610708 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0401 23:29:53.611060 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0401 23:29:53.611083 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0401 23:29:53.614189 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0401 23:29:53.628737 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0401 23:29:53.634417 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0401 23:29:53.639629 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0401 23:29:53.639774 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0401 23:29:53.642630 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0401 23:29:53.645045 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0401 23:29:53.647676 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0401 23:29:53.650407 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0401 23:29:53.652856 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0401 23:29:53.653052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0401 23:29:53.660593 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0401 23:29:53.664752 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0401 23:29:53.668767 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0401 23:29:53.668791 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0401 23:29:53.668800 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0401 23:29:53.668943 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0401 23:29:53.670786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0401 23:29:53.672839 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0401 23:29:53.674676 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0401 23:29:53.676435 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0401 23:29:53.678686 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0401 23:29:53.680681 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0401 23:29:53.682290 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0401 23:29:53.682400 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0401 23:29:53.690621 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0401 23:29:53.692966 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:29:53.693589 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:29:53.694607 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:29:53.717379 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:29:53.729721 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:29:53.748792 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:29:53.758459 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:29:53.774878 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:29:53.784171 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:29:53.786166 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0401 23:30:10.103712 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-01 23:30:10.103691173 +0000 UTC m=+16.531483951 I0401 23:30:10.899633 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:30:10.899743 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-01 23:30:10.899730833 +0000 UTC m=+17.327523621 I0401 23:30:10.899876 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-01 23:30:10.899856056 +0000 UTC m=+17.327648854 E0401 23:30:11.006505 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:30:11.006600 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-01 23:30:11.006589604 +0000 UTC m=+17.434382382 E0401 23:30:11.006634 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:30:11.011335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:11.011418 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-01 23:30:11.011409284 +0000 UTC m=+17.439202072 E0401 23:30:11.468920 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0401 23:30:11.469945 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:30:11.470006 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:30:11.470051 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0401 23:30:11.473538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:11.779008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vb8j8" condition "Approved" to 2026-04-01 23:30:11.77898266 +0000 UTC m=+18.206775448 I0401 23:30:11.798777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vb8j8" condition "Ready" to 2026-04-01 23:30:11.798758679 +0000 UTC m=+18.226551467 I0401 23:30:11.822262 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:11.822243379 +0000 UTC m=+18.250036157 I0401 23:30:11.840210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:11.840637 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:11.840629064 +0000 UTC m=+18.268421822 I0401 23:30:11.849989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:11.863162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:16.469875 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:16.469861818 +0000 UTC m=+22.897654596 I0401 23:30:41.338673 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:30:41.338711 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-01 23:30:41.338699443 +0000 UTC m=+47.766492201 I0401 23:30:41.338997 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-01 23:30:41.33897049 +0000 UTC m=+47.766763268 I0401 23:30:41.350456 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-01 23:30:41.350444693 +0000 UTC m=+47.778237451 I0401 23:30:41.360628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:41.360701 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-01 23:30:41.360693357 +0000 UTC m=+47.788486115 I0401 23:30:41.689858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:41.719031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nszmr" condition "Approved" to 2026-04-01 23:30:41.719020385 +0000 UTC m=+48.146813143 I0401 23:30:41.753294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nszmr" condition "Ready" to 2026-04-01 23:30:41.753281772 +0000 UTC m=+48.181074540 I0401 23:30:41.783178 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:41.783165701 +0000 UTC m=+48.210958469 I0401 23:30:41.802256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:30:41.802567 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:30:41.80255957 +0000 UTC m=+48.230352328 I0401 23:30:41.829564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:26.590809 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-01 23:32:26.590771105 +0000 UTC m=+153.018563893 I0401 23:32:26.590848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:32:26.590914 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-01 23:32:26.590907398 +0000 UTC m=+153.018700156 E0401 23:32:26.606383 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 23:32:26.606439 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-01 23:32:26.606428972 +0000 UTC m=+153.034221750 I0401 23:32:26.606490 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 23:32:26.609437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:26.609517 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:32:26.609572 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-01 23:32:26.609535137 +0000 UTC m=+153.037327895 I0401 23:32:26.618018 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-01 23:32:26.617979191 +0000 UTC m=+153.045771969 E0401 23:32:26.618072 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0401 23:32:26.618143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:32:26.618174 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-01 23:32:26.618166546 +0000 UTC m=+153.045959294 E0401 23:32:26.618384 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0401 23:32:26.618426 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0401 23:32:26.618473 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0401 23:32:26.635066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:26.635141 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-01 23:32:26.635133015 +0000 UTC m=+153.062925763 I0401 23:32:26.919077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:26.930052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-wbbhg" condition "Approved" to 2026-04-01 23:32:26.930037771 +0000 UTC m=+153.357830559 I0401 23:32:26.947141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:26.958676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-wbbhg" condition "Ready" to 2026-04-01 23:32:26.958665511 +0000 UTC m=+153.386458289 I0401 23:32:26.977981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-f6j2w" condition "Approved" to 2026-04-01 23:32:26.977964017 +0000 UTC m=+153.405756795 I0401 23:32:26.990124 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:26.99011119 +0000 UTC m=+153.417903948 I0401 23:32:26.993815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-f6j2w" condition "Ready" to 2026-04-01 23:32:26.993803599 +0000 UTC m=+153.421596377 I0401 23:32:27.004975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:27.005380 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:27.005372888 +0000 UTC m=+153.433165646 I0401 23:32:27.026087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:31.619475 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:31.619461607 +0000 UTC m=+158.047254385 I0401 23:32:31.636541 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-f6j2w" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:31.636509959 +0000 UTC m=+158.064302747 I0401 23:32:31.665771 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:31.665756264 +0000 UTC m=+158.093549032 I0401 23:32:31.687904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:31.688411 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:31.688401441 +0000 UTC m=+158.116194199 I0401 23:32:31.705815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:31.709701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:32:31.710129 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:32:31.710117495 +0000 UTC m=+158.137910273 I0401 23:34:57.789717 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-169.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:34:57.789786 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Issuing" to 2026-04-01 23:34:57.789764899 +0000 UTC m=+304.217557677 I0401 23:34:57.790319 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready" to 2026-04-01 23:34:57.790310752 +0000 UTC m=+304.218103530 I0401 23:34:57.810600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:34:57.810788 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready" to 2026-04-01 23:34:57.810776499 +0000 UTC m=+304.238569257 I0401 23:34:57.941717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:34:57.968074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-169.nip.io-tls-ts7p9" condition "Approved" to 2026-04-01 23:34:57.968056507 +0000 UTC m=+304.395849295 I0401 23:34:57.995428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-169.nip.io-tls-ts7p9" condition "Ready" to 2026-04-01 23:34:57.995412857 +0000 UTC m=+304.423205635 I0401 23:34:58.019054 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-169.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:34:58.019040729 +0000 UTC m=+304.446833517 I0401 23:34:58.044554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:34:58.088114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-169.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-169.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:07.433657 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:07.433724 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-01 23:36:07.433685846 +0000 UTC m=+373.861478634 I0401 23:36:07.433713 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-01 23:36:07.433692837 +0000 UTC m=+373.861485615 E0401 23:36:07.446287 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:36:07.446352 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-01 23:36:07.446338947 +0000 UTC m=+373.874131735 E0401 23:36:07.446423 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0401 23:36:07.448519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:07.448611 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-01 23:36:07.448600351 +0000 UTC m=+373.876393139 E0401 23:36:07.456173 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0401 23:36:07.456298 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:36:07.456327 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0401 23:36:07.456400 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0401 23:36:07.463312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:07.485880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zckhd" condition "Approved" to 2026-04-01 23:36:07.485864177 +0000 UTC m=+373.913656935 I0401 23:36:07.498123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zckhd" condition "Ready" to 2026-04-01 23:36:07.498114078 +0000 UTC m=+373.925906836 I0401 23:36:07.518107 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:07.518090621 +0000 UTC m=+373.945883399 I0401 23:36:07.534166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:07.534372 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:07.534363518 +0000 UTC m=+373.962156266 I0401 23:36:07.539795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:07.546304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:07.546473 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:07.546467566 +0000 UTC m=+373.974260314 I0401 23:36:07.549760 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:12.457629 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:12.457613386 +0000 UTC m=+378.885406174 I0401 23:36:48.685474 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:48.685539 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-01 23:36:48.685532813 +0000 UTC m=+415.113325571 I0401 23:36:48.686009 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-01 23:36:48.686004824 +0000 UTC m=+415.113797592 I0401 23:36:48.695190 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:48.695255 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-01 23:36:48.695243694 +0000 UTC m=+415.123036452 I0401 23:36:48.696004 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-01 23:36:48.695210213 +0000 UTC m=+415.123002971 I0401 23:36:48.709396 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:48.709408 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-01 23:36:48.70939013 +0000 UTC m=+415.137182888 I0401 23:36:48.709451 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-01 23:36:48.709445681 +0000 UTC m=+415.137238429 I0401 23:36:48.713540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:48.715091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:48.715121 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-01 23:36:48.715115046 +0000 UTC m=+415.142907784 I0401 23:36:48.720345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:48.720480 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-01 23:36:48.720470963 +0000 UTC m=+415.148263721 I0401 23:36:48.731782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:48.732887 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-01 23:36:48.732876818 +0000 UTC m=+415.160669616 I0401 23:36:49.011409 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:49.046997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7vwqn" condition "Approved" to 2026-04-01 23:36:49.046985535 +0000 UTC m=+415.474778273 I0401 23:36:49.069588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-7vwqn" condition "Ready" to 2026-04-01 23:36:49.069576642 +0000 UTC m=+415.497369390 I0401 23:36:49.083027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:49.094001 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:49.093991243 +0000 UTC m=+415.521784001 I0401 23:36:49.118000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:49.125076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2hfcb" condition "Approved" to 2026-04-01 23:36:49.125064151 +0000 UTC m=+415.552856909 I0401 23:36:49.145120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2hfcb" condition "Ready" to 2026-04-01 23:36:49.145107317 +0000 UTC m=+415.572900105 E0401 23:36:49.172453 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-d6mnj\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0401 23:36:49.191532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:49.191581 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-01 23:36:49.191573422 +0000 UTC m=+415.619366170 I0401 23:36:49.192981 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:49.192975625 +0000 UTC m=+415.620768373 I0401 23:36:49.484892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:49.485536 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:49.48552813 +0000 UTC m=+415.913320888 I0401 23:36:49.540833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vxq9t" condition "Approved" to 2026-04-01 23:36:49.540814154 +0000 UTC m=+415.968606942 I0401 23:36:49.583909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:49.792356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vxq9t" condition "Ready" to 2026-04-01 23:36:49.792344243 +0000 UTC m=+416.220137001 E0401 23:36:50.331716 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-t5fq2\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0401 23:36:50.397494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fpmc9" condition "Approved" to 2026-04-01 23:36:50.397472808 +0000 UTC m=+416.825265596 I0401 23:36:50.435960 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:50.435941462 +0000 UTC m=+416.863734250 I0401 23:36:50.648778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-fpmc9" condition "Ready" to 2026-04-01 23:36:50.64876251 +0000 UTC m=+417.076555268 I0401 23:36:50.884782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:50.885245 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:50.885230411 +0000 UTC m=+417.313023169 I0401 23:36:51.336956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:51.383591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:51.483857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:56.546522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:56.546568 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls" condition "Issuing" to 2026-04-01 23:36:56.546557107 +0000 UTC m=+422.974349885 I0401 23:36:56.546708 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls" condition "Ready" to 2026-04-01 23:36:56.54670038 +0000 UTC m=+422.974493138 I0401 23:36:56.560391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:56.560487 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:36:56.560513 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls" condition "Issuing" to 2026-04-01 23:36:56.560507578 +0000 UTC m=+422.988300326 I0401 23:36:56.835498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4cpb7-4nl2h" condition "Approved" to 2026-04-01 23:36:56.835482735 +0000 UTC m=+423.263275493 I0401 23:36:56.852213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4cpb7-4nl2h" condition "Ready" to 2026-04-01 23:36:56.852199492 +0000 UTC m=+423.279992250 I0401 23:36:56.878699 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:56.878684262 +0000 UTC m=+423.306477020 I0401 23:36:56.902986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:56.903276 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:56.903267726 +0000 UTC m=+423.331060484 I0401 23:36:56.922440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:36:56.922756 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4cpb7-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:36:56.922720618 +0000 UTC m=+423.350513376 I0401 23:37:19.517007 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:37:19.517043 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-01 23:37:19.517035006 +0000 UTC m=+445.944827764 I0401 23:37:19.517457 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-01 23:37:19.517452016 +0000 UTC m=+445.945244764 I0401 23:37:19.538483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:19.538594 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-01 23:37:19.538584338 +0000 UTC m=+445.966377096 I0401 23:37:21.472948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:21.957564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v89f8" condition "Approved" to 2026-04-01 23:37:21.95755271 +0000 UTC m=+448.385345468 I0401 23:37:21.977646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v89f8" condition "Ready" to 2026-04-01 23:37:21.977634548 +0000 UTC m=+448.405427306 I0401 23:37:22.002260 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:37:22.002244402 +0000 UTC m=+448.430037170 I0401 23:37:22.025024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:22.025515 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:37:22.025507926 +0000 UTC m=+448.453300674 I0401 23:37:22.028247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:22.042647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:22.044112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:37:22.044353 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:37:22.044347073 +0000 UTC m=+448.472139831 I0401 23:40:32.889367 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-01 23:40:32.889355835 +0000 UTC m=+639.317148593 I0401 23:40:32.889704 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:40:32.889821 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-01 23:40:32.889809496 +0000 UTC m=+639.317602284 I0401 23:40:32.906861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:40:32.907037 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:40:32.907112 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-01 23:40:32.907101707 +0000 UTC m=+639.334894495 I0401 23:40:33.347759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:40:33.357705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dql97" condition "Approved" to 2026-04-01 23:40:33.357686482 +0000 UTC m=+639.785479270 I0401 23:40:33.382262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-dql97" condition "Ready" to 2026-04-01 23:40:33.38202411 +0000 UTC m=+639.809816888 I0401 23:40:33.412576 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:40:33.412560276 +0000 UTC m=+639.840353034 I0401 23:40:33.434315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:40:33.434713 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:40:33.434704302 +0000 UTC m=+639.862497050 I0401 23:40:33.456095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:40:33.456260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:40:33.456521 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:40:33.45651231 +0000 UTC m=+639.884305068 I0401 23:42:57.179521 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:42:57.179648 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-01 23:42:57.179632216 +0000 UTC m=+783.607424974 I0401 23:42:57.179723 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-01 23:42:57.179704008 +0000 UTC m=+783.607496766 I0401 23:42:57.194508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:42:57.194576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:42:57.194599 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-01 23:42:57.194593152 +0000 UTC m=+783.622385910 I0401 23:42:57.346855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:42:57.360337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kfbjt" condition "Approved" to 2026-04-01 23:42:57.360321809 +0000 UTC m=+783.788114567 I0401 23:42:57.377929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kfbjt" condition "Ready" to 2026-04-01 23:42:57.377914607 +0000 UTC m=+783.805707395 I0401 23:42:57.425376 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:42:57.425362954 +0000 UTC m=+783.853155712 I0401 23:42:57.444013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:42:57.444358 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:42:57.444352475 +0000 UTC m=+783.872145223 I0401 23:42:57.448596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:42:57.460540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:44:03.836039 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:44:03.836142 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-01 23:44:03.836135094 +0000 UTC m=+850.263927852 I0401 23:44:03.836215 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-01 23:44:03.836196526 +0000 UTC m=+850.263989304 I0401 23:44:03.854841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:44:03.854905 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:44:03.854921 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-01 23:44:03.85491475 +0000 UTC m=+850.282707508 I0401 23:44:04.174851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:44:04.178806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rrtmh" condition "Approved" to 2026-04-01 23:44:04.178784144 +0000 UTC m=+850.606576902 I0401 23:44:04.200374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rrtmh" condition "Ready" to 2026-04-01 23:44:04.200358826 +0000 UTC m=+850.628151604 I0401 23:44:04.228589 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:44:04.228579187 +0000 UTC m=+850.656371945 I0401 23:44:04.247005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:44:04.306501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:47:00.438219 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-01 23:47:00.438180313 +0000 UTC m=+1026.865973091 I0401 23:47:00.438463 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0401 23:47:00.438533 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-01 23:47:00.438526202 +0000 UTC m=+1026.866318950 I0401 23:47:00.454985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:47:00.455071 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-01 23:47:00.455062784 +0000 UTC m=+1026.882855542 I0401 23:47:00.639638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0401 23:47:00.673220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wjqd5" condition "Approved" to 2026-04-01 23:47:00.673209765 +0000 UTC m=+1027.101002513 I0401 23:47:00.693578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-wjqd5" condition "Ready" to 2026-04-01 23:47:00.693561929 +0000 UTC m=+1027.121354687 I0401 23:47:00.723925 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-01 23:47:00.7239078 +0000 UTC m=+1027.151700568 I0401 23:47:00.745090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"