I0402 08:50:45.972085 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0402 08:50:45.972208 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0402 08:50:45.972298 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0402 08:50:45.976646 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0402 08:50:45.977132 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0402 08:50:45.977257 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0402 08:50:45.977298 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0402 08:50:45.980869 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0402 08:50:45.996437 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0402 08:50:45.999629 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0402 08:50:46.006301 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0402 08:50:46.009863 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0402 08:50:46.009933 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0402 08:50:46.012685 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0402 08:50:46.015750 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0402 08:50:46.017703 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0402 08:50:46.017725 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0402 08:50:46.017738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0402 08:50:46.019675 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0402 08:50:46.024923 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0402 08:50:46.028805 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0402 08:50:46.031134 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0402 08:50:46.031189 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0402 08:50:46.033979 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0402 08:50:46.036374 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0402 08:50:46.038299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0402 08:50:46.040322 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0402 08:50:46.042032 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0402 08:50:46.047969 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0402 08:50:46.052137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0402 08:50:46.056324 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0402 08:50:46.056395 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0402 08:50:46.056418 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0402 08:50:46.059692 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 08:50:46.059695 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 08:50:46.060990 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 08:50:46.077077 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 08:50:46.096470 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 08:50:46.113641 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 08:50:46.136355 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 08:50:46.154041 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 08:50:46.154739 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 08:50:46.169678 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0402 08:50:59.323825 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-02 08:50:59.323799777 +0000 UTC m=+13.385581660 I0402 08:51:00.096023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:51:00.096069 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-02 08:51:00.096058999 +0000 UTC m=+14.157840882 I0402 08:51:00.097070 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 08:51:00.097061842 +0000 UTC m=+14.158843725 E0402 08:51:00.113692 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 08:51:00.113839 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-02 08:51:00.113827722 +0000 UTC m=+14.175609605 E0402 08:51:00.113873 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 08:51:00.116933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:51:00.117018 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-02 08:51:00.117008395 +0000 UTC m=+14.178790278 E0402 08:51:00.127277 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0402 08:51:00.127561 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 08:51:00.127658 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 08:51:00.127703 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0402 08:51:00.133268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:51:00.157278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w762r" condition "Approved" to 2026-04-02 08:51:00.157258939 +0000 UTC m=+14.219040892 I0402 08:51:00.174346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-w762r" condition "Ready" to 2026-04-02 08:51:00.174321736 +0000 UTC m=+14.236103629 I0402 08:51:00.200540 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:51:00.200524551 +0000 UTC m=+14.262306424 I0402 08:51:00.222453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:51:00.223170 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:51:00.223159005 +0000 UTC m=+14.284940868 I0402 08:51:00.240310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:51:05.128178 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:51:05.128153861 +0000 UTC m=+19.189935814 I0402 08:51:27.748845 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 08:51:27.748824479 +0000 UTC m=+41.810606362 I0402 08:51:27.748813 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:51:27.748944 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-02 08:51:27.748929901 +0000 UTC m=+41.810711764 I0402 08:51:27.762906 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-02 08:51:27.762893168 +0000 UTC m=+41.824675031 I0402 08:51:27.775997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:51:27.776103 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-02 08:51:27.776094788 +0000 UTC m=+41.837876661 I0402 08:51:27.917131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:51:27.956594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j9c92" condition "Approved" to 2026-04-02 08:51:27.956578095 +0000 UTC m=+42.018359958 I0402 08:51:27.989493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-j9c92" condition "Ready" to 2026-04-02 08:51:27.989481553 +0000 UTC m=+42.051263416 I0402 08:51:28.033868 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:51:28.0338474 +0000 UTC m=+42.095629253 I0402 08:51:28.058571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:51:28.115252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:53:12.082100 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-02 08:53:12.081932091 +0000 UTC m=+146.143713934 I0402 08:53:12.082556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:53:12.082637 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-02 08:53:12.082632427 +0000 UTC m=+146.144414280 E0402 08:53:12.099330 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 08:53:12.099426 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-02 08:53:12.099418418 +0000 UTC m=+146.161200271 I0402 08:53:12.099467 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 08:53:12.102855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:53:12.102959 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:53:12.103002 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-02 08:53:12.102990799 +0000 UTC m=+146.164772692 E0402 08:53:12.109082 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0402 08:53:12.109433 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0402 08:53:12.109523 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0402 08:53:12.109657 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0402 08:53:12.114955 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:53:12.114995 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-02 08:53:12.114987631 +0000 UTC m=+146.176769494 I0402 08:53:12.115332 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-02 08:53:12.115300908 +0000 UTC m=+146.177082781 I0402 08:53:12.134127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:53:12.134231 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-02 08:53:12.134221867 +0000 UTC m=+146.196003730 I0402 08:53:12.216933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:53:12.241014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:53:12.260916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-whsg4" condition "Approved" to 2026-04-02 08:53:12.260902562 +0000 UTC m=+146.322684425 I0402 08:53:12.261244 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-w5ztp" condition "Approved" to 2026-04-02 08:53:12.261239579 +0000 UTC m=+146.323021442 I0402 08:53:12.292977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-w5ztp" condition "Ready" to 2026-04-02 08:53:12.29295797 +0000 UTC m=+146.354739833 I0402 08:53:12.298953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-whsg4" condition "Ready" to 2026-04-02 08:53:12.298945246 +0000 UTC m=+146.360727109 I0402 08:53:12.328595 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:53:12.328577378 +0000 UTC m=+146.390359241 I0402 08:53:12.349361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:53:12.350106 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:53:12.350091836 +0000 UTC m=+146.411873739 I0402 08:53:12.368406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:53:12.368728 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:53:12.368718989 +0000 UTC m=+146.430500852 I0402 08:53:12.369822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:53:17.109515 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:53:17.109506638 +0000 UTC m=+151.171288491 I0402 08:53:17.131002 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-w5ztp" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:53:17.130985036 +0000 UTC m=+151.192766919 I0402 08:53:17.167746 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:53:17.16772375 +0000 UTC m=+151.229505613 I0402 08:53:17.189445 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:56:14.234833 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-78.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:56:14.234943 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Issuing" to 2026-04-02 08:56:14.234897789 +0000 UTC m=+328.296679682 I0402 08:56:14.235213 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready" to 2026-04-02 08:56:14.235177026 +0000 UTC m=+328.296958919 I0402 08:56:14.248704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:56:14.248770 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready" to 2026-04-02 08:56:14.248762608 +0000 UTC m=+328.310544501 I0402 08:56:14.358116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:56:14.384809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-78.nip.io-tls-ncs5j" condition "Approved" to 2026-04-02 08:56:14.384792105 +0000 UTC m=+328.446573968 I0402 08:56:14.402641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-78.nip.io-tls-ncs5j" condition "Ready" to 2026-04-02 08:56:14.40259196 +0000 UTC m=+328.464373823 I0402 08:56:14.434140 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:56:14.434126082 +0000 UTC m=+328.495907975 I0402 08:56:14.459357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:56:14.459663 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:56:14.459655219 +0000 UTC m=+328.521437082 I0402 08:56:14.476505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:56:14.476798 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:56:14.476790732 +0000 UTC m=+328.538572595 I0402 08:57:28.045495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:57:28.045535 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 08:57:28.045526596 +0000 UTC m=+402.107308459 I0402 08:57:28.045590 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-02 08:57:28.045571757 +0000 UTC m=+402.107353610 E0402 08:57:28.059056 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 08:57:28.059156 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-02 08:57:28.059145632 +0000 UTC m=+402.120927525 E0402 08:57:28.059192 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0402 08:57:28.062632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:57:28.062921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:57:28.062976 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-02 08:57:28.062965108 +0000 UTC m=+402.124746991 E0402 08:57:28.074555 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0402 08:57:28.074842 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 08:57:28.074879 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0402 08:57:28.075032 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0402 08:57:28.107802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8h9n2" condition "Approved" to 2026-04-02 08:57:28.107783166 +0000 UTC m=+402.169565069 I0402 08:57:28.122120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-8h9n2" condition "Ready" to 2026-04-02 08:57:28.122104869 +0000 UTC m=+402.183886742 I0402 08:57:28.145087 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:57:28.145065045 +0000 UTC m=+402.206846928 I0402 08:57:28.163530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:57:33.075487 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:57:33.075470904 +0000 UTC m=+407.137252797 I0402 08:58:13.091104 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:58:13.091162 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 08:58:13.091131838 +0000 UTC m=+447.152913691 I0402 08:58:13.091266 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-02 08:58:13.09126021 +0000 UTC m=+447.153042093 I0402 08:58:13.099910 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-02 08:58:13.099881973 +0000 UTC m=+447.161663836 I0402 08:58:13.100396 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:58:13.100434 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 08:58:13.100428645 +0000 UTC m=+447.162210518 I0402 08:58:13.100650 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-02 08:58:13.10064445 +0000 UTC m=+447.162426313 I0402 08:58:13.100919 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:58:13.100946 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 08:58:13.100941547 +0000 UTC m=+447.162723410 I0402 08:58:13.122633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:13.122688 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:58:13.122706 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-02 08:58:13.122701353 +0000 UTC m=+447.184483206 I0402 08:58:13.129739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:13.129797 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:58:13.129814 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-02 08:58:13.129807483 +0000 UTC m=+447.191589356 I0402 08:58:13.132020 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:13.132166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:58:13.132236 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-02 08:58:13.132192906 +0000 UTC m=+447.193974769 I0402 08:58:13.305861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:13.314844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-w6w28" condition "Approved" to 2026-04-02 08:58:13.314835322 +0000 UTC m=+447.376617185 I0402 08:58:13.334766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-w6w28" condition "Ready" to 2026-04-02 08:58:13.334757448 +0000 UTC m=+447.396539311 I0402 08:58:13.373853 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:58:13.373831842 +0000 UTC m=+447.435613695 I0402 08:58:13.401442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:13.415470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-l8br4" condition "Approved" to 2026-04-02 08:58:13.415458063 +0000 UTC m=+447.477239926 I0402 08:58:13.436221 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-l8br4" condition "Ready" to 2026-04-02 08:58:13.436207977 +0000 UTC m=+447.497989850 I0402 08:58:13.460497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:13.465823 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:58:13.46580914 +0000 UTC m=+447.527591013 I0402 08:58:13.526178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:13.828532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:13.883616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rd5dz" condition "Approved" to 2026-04-02 08:58:13.883607216 +0000 UTC m=+447.945389069 I0402 08:58:14.084168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-rd5dz" condition "Ready" to 2026-04-02 08:58:14.084158553 +0000 UTC m=+448.145940416 I0402 08:58:14.573074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:14.666190 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:58:14.666178553 +0000 UTC m=+448.727960406 I0402 08:58:14.727134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:22.392823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l8c9h-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:58:22.392858 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l8c9h-tls" condition "Issuing" to 2026-04-02 08:58:22.392849147 +0000 UTC m=+456.454631010 I0402 08:58:22.392882 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l8c9h-tls" condition "Ready" to 2026-04-02 08:58:22.392865468 +0000 UTC m=+456.454647331 I0402 08:58:22.408628 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l8c9h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l8c9h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:22.408793 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-l8c9h-tls" condition "Ready" to 2026-04-02 08:58:22.408783233 +0000 UTC m=+456.470565096 I0402 08:58:22.494789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l8c9h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l8c9h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:22.525906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-l8c9h-8drlv" condition "Approved" to 2026-04-02 08:58:22.525890973 +0000 UTC m=+456.587672836 I0402 08:58:22.546959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-l8c9h-8drlv" condition "Ready" to 2026-04-02 08:58:22.546949135 +0000 UTC m=+456.608730998 I0402 08:58:22.579729 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-l8c9h-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:58:22.579717367 +0000 UTC m=+456.641499220 I0402 08:58:22.613780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-l8c9h-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-l8c9h-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:57.545563 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:58:57.545564 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-02 08:58:57.545544639 +0000 UTC m=+491.607326522 I0402 08:58:57.545611 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 08:58:57.54558989 +0000 UTC m=+491.607371753 I0402 08:58:57.564964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:57.565049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 08:58:57.565066 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-02 08:58:57.565060966 +0000 UTC m=+491.626842819 I0402 08:58:58.061630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 08:58:58.151099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7mrjz" condition "Approved" to 2026-04-02 08:58:58.151075275 +0000 UTC m=+492.212857168 I0402 08:58:58.190378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7mrjz" condition "Ready" to 2026-04-02 08:58:58.190364225 +0000 UTC m=+492.252146078 I0402 08:58:58.227889 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 08:58:58.227875053 +0000 UTC m=+492.289656906 I0402 08:58:58.250273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:03:24.721055 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 09:03:24.721029716 +0000 UTC m=+758.782811569 I0402 09:03:24.721198 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 09:03:24.721622 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-02 09:03:24.721453106 +0000 UTC m=+758.783235019 I0402 09:03:24.739032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:03:24.739198 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-02 09:03:24.739186208 +0000 UTC m=+758.800968071 I0402 09:03:24.908829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:03:24.942369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5nbmh" condition "Approved" to 2026-04-02 09:03:24.942355183 +0000 UTC m=+759.004137046 I0402 09:03:24.964956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5nbmh" condition "Ready" to 2026-04-02 09:03:24.964936434 +0000 UTC m=+759.026718327 I0402 09:03:24.999558 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 09:03:24.99954311 +0000 UTC m=+759.061324973 I0402 09:03:25.028226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:03:25.028640 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 09:03:25.028632516 +0000 UTC m=+759.090414379 I0402 09:03:25.051509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:03:25.051986 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 09:03:25.051973393 +0000 UTC m=+759.113755246 I0402 09:03:25.058426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:06:00.330053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 09:06:00.330156 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-02 09:06:00.330085102 +0000 UTC m=+914.391866985 I0402 09:06:00.330735 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 09:06:00.33003316 +0000 UTC m=+914.391815053 I0402 09:06:00.349643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:06:00.349945 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-02 09:06:00.349932082 +0000 UTC m=+914.411713975 I0402 09:06:00.567185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:06:00.607105 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-wf9hf" condition "Approved" to 2026-04-02 09:06:00.607090691 +0000 UTC m=+914.668872544 I0402 09:06:00.629149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-wf9hf" condition "Ready" to 2026-04-02 09:06:00.629137549 +0000 UTC m=+914.690919412 I0402 09:06:00.660289 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 09:06:00.660268168 +0000 UTC m=+914.722050031 I0402 09:06:00.680462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:06:00.680919 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 09:06:00.680909815 +0000 UTC m=+914.742691678 I0402 09:06:00.706913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:07:12.584878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 09:07:12.584958 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-02 09:07:12.584946846 +0000 UTC m=+986.646728729 I0402 09:07:12.584971 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 09:07:12.584952366 +0000 UTC m=+986.646734249 I0402 09:07:12.609595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:07:12.609663 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-02 09:07:12.609658373 +0000 UTC m=+986.671440236 I0402 09:07:13.107786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:07:13.151228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-sjqph" condition "Approved" to 2026-04-02 09:07:13.151213666 +0000 UTC m=+987.212995519 I0402 09:07:13.170097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-sjqph" condition "Ready" to 2026-04-02 09:07:13.170082923 +0000 UTC m=+987.231864786 I0402 09:07:13.201850 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 09:07:13.201830535 +0000 UTC m=+987.263612428 I0402 09:07:13.231146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:07:13.231619 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 09:07:13.231611085 +0000 UTC m=+987.293392948 I0402 09:07:13.236649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:07:13.247258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:07:13.247643 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 09:07:13.24763575 +0000 UTC m=+987.309417613 I0402 09:10:17.897836 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0402 09:10:17.898105 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-02 09:10:17.898091369 +0000 UTC m=+1171.959873292 I0402 09:10:17.897963 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 09:10:17.897916885 +0000 UTC m=+1171.959698778 I0402 09:10:17.917481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:10:17.917730 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-02 09:10:17.917716524 +0000 UTC m=+1171.979498437 I0402 09:10:18.263177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:10:18.298536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8lz55" condition "Approved" to 2026-04-02 09:10:18.29852267 +0000 UTC m=+1172.360304513 I0402 09:10:18.336853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8lz55" condition "Ready" to 2026-04-02 09:10:18.336839009 +0000 UTC m=+1172.398620872 I0402 09:10:18.374849 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 09:10:18.37482542 +0000 UTC m=+1172.436607303 I0402 09:10:18.408086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:10:18.408631 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-02 09:10:18.408620287 +0000 UTC m=+1172.470402170 I0402 09:10:18.422016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0402 09:10:18.437453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"