I0702 15:28:18.700269       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0702 15:28:18.700400       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0702 15:28:18.700487       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0702 15:28:18.708050       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0702 15:28:18.708817       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0702 15:28:18.708911       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0702 15:28:18.708923       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0702 15:28:18.712958       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0702 15:28:18.731171       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0702 15:28:18.731430       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0702 15:28:18.735337       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0702 15:28:18.738615       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0702 15:28:18.745543       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0702 15:28:18.749611       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0702 15:28:18.752199       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0702 15:28:18.752238       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0702 15:28:18.752278       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0702 15:28:18.754951       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0702 15:28:18.757485       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0702 15:28:18.759563       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0702 15:28:18.764465       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0702 15:28:18.764531       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0702 15:28:18.764620       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0702 15:28:18.769159       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0702 15:28:18.771706       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0702 15:28:18.771756       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0702 15:28:18.774451       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0702 15:28:18.777113       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0702 15:28:18.779194       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0702 15:28:18.781214       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0702 15:28:18.783104       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0702 15:28:18.785908       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0702 15:28:18.791065       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0702 15:28:18.794093       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0702 15:28:18.794392       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0702 15:28:18.796306       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0702 15:28:18.796521       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0702 15:28:18.812889       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0702 15:28:18.829003       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0702 15:28:18.846981       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0702 15:28:18.863384       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0702 15:28:18.881147       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0702 15:28:18.903522       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0702 15:28:30.182584       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-02 15:28:30.182571123 +0000 UTC m=+11.517159302
I0702 15:28:30.927245       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0702 15:28:30.927301       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-02 15:28:30.927289398 +0000 UTC m=+12.261877617
I0702 15:28:30.927530       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 15:28:30.927512644 +0000 UTC m=+12.262100853
E0702 15:28:30.939574       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0702 15:28:30.939638       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-02 15:28:30.939630103 +0000 UTC m=+12.274218292
E0702 15:28:30.939660       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0702 15:28:30.943273       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:28:30.943462       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 15:28:30.94343409 +0000 UTC m=+12.278022289
E0702 15:28:30.954974       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0702 15:28:30.955616       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0702 15:28:30.955862       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0702 15:28:30.956143       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0702 15:28:30.961477       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:28:30.961554       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-02 15:28:30.961545702 +0000 UTC m=+12.296133891
I0702 15:28:30.965954       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:28:30.974152       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2l4kl" condition "Approved" to 2026-07-02 15:28:30.974141672 +0000 UTC m=+12.308729851
I0702 15:28:30.985586       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2l4kl" condition "Ready" to 2026-07-02 15:28:30.985570723 +0000 UTC m=+12.320158942
I0702 15:28:31.008935       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:28:31.008922939 +0000 UTC m=+12.343511128
I0702 15:28:31.026339       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:28:31.026743       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:28:31.026733493 +0000 UTC m=+12.361321692
I0702 15:28:31.035848       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:28:31.038780       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:28:31.044999       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:28:31.045557       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:28:31.045543412 +0000 UTC m=+12.380131621
I0702 15:28:35.955757       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:28:35.955738575 +0000 UTC m=+17.290326844
I0702 15:28:57.171924       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-02 15:28:57.171899921 +0000 UTC m=+38.506488130
I0702 15:28:57.171976       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0702 15:28:57.172067       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 15:28:57.172056205 +0000 UTC m=+38.506644424
I0702 15:28:57.185815       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-02 15:28:57.185799175 +0000 UTC m=+38.520387374
I0702 15:28:57.198230       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:28:57.198305       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0702 15:28:57.198345       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-02 15:28:57.198338914 +0000 UTC m=+38.532927103
I0702 15:28:57.395067       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xrndn" condition "Approved" to 2026-07-02 15:28:57.395058517 +0000 UTC m=+38.729646696
I0702 15:28:57.424969       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-xrndn" condition "Ready" to 2026-07-02 15:28:57.424949829 +0000 UTC m=+38.759538038
I0702 15:28:57.458786       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:28:57.45875962 +0000 UTC m=+38.793347809
I0702 15:28:57.482762       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:28:57.483040       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:28:57.483033949 +0000 UTC m=+38.817622138
I0702 15:28:57.492342       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:28:57.512503       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:30:42.051086       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0702 15:30:42.051138       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-02 15:30:42.051121264 +0000 UTC m=+143.385709453
I0702 15:30:42.051208       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-02 15:30:42.051193976 +0000 UTC m=+143.385782195
E0702 15:30:42.064347       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0702 15:30:42.064445       1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-07-02 15:30:42.064437915 +0000 UTC m=+143.399026104
I0702 15:30:42.064559       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0702 15:30:42.067105       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:30:42.067185       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-02 15:30:42.067177196 +0000 UTC m=+143.401765385
E0702 15:30:42.075718       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
E0702 15:30:42.075806       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0702 15:30:42.075895       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0702 15:30:42.075938       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
I0702 15:30:42.078220       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-02 15:30:42.078213958 +0000 UTC m=+143.412802147
I0702 15:30:42.078379       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0702 15:30:42.080941       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-02 15:30:42.078440154 +0000 UTC m=+143.413028353
I0702 15:30:42.097503       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:30:42.097591       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0702 15:30:42.097610       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-02 15:30:42.097604025 +0000 UTC m=+143.432192214
I0702 15:30:42.365946       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:30:42.396745       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2wmsp" condition "Approved" to 2026-07-02 15:30:42.396724878 +0000 UTC m=+143.731313157
I0702 15:30:42.423633       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2wmsp" condition "Ready" to 2026-07-02 15:30:42.423622336 +0000 UTC m=+143.758210525
I0702 15:30:42.456160       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:30:42.45614274 +0000 UTC m=+143.790730959
I0702 15:30:42.472148       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:30:42.472492       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:30:42.472483668 +0000 UTC m=+143.807071857
I0702 15:30:42.482083       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dv9wk" condition "Approved" to 2026-07-02 15:30:42.482054443 +0000 UTC m=+143.816642662
I0702 15:30:42.483152       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:30:42.497652       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-dv9wk" condition "Ready" to 2026-07-02 15:30:42.497635883 +0000 UTC m=+143.832224082
I0702 15:30:42.502643       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:30:47.077177       1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:30:47.077163764 +0000 UTC m=+148.411751973
I0702 15:30:47.094713       1 conditions.go:252] Found status change for CertificateRequest "valkey-server-dv9wk" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:30:47.094698964 +0000 UTC m=+148.429287173
I0702 15:30:47.125235       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:30:47.125220966 +0000 UTC m=+148.459809165
I0702 15:30:47.151153       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:33:24.121062       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Ready" to 2026-07-02 15:33:24.121023443 +0000 UTC m=+305.455611632
I0702 15:33:24.121133       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-139.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0702 15:33:24.121177       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Issuing" to 2026-07-02 15:33:24.121166436 +0000 UTC m=+305.455754645
I0702 15:33:24.141241       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-139.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-139.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:33:24.141325       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-139.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0702 15:33:24.141348       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Issuing" to 2026-07-02 15:33:24.141341163 +0000 UTC m=+305.475929352
I0702 15:33:24.417643       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-139.nip.io-tls-db5zr" condition "Approved" to 2026-07-02 15:33:24.417632408 +0000 UTC m=+305.752220597
I0702 15:33:24.443996       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-139.nip.io-tls-db5zr" condition "Ready" to 2026-07-02 15:33:24.443981363 +0000 UTC m=+305.778569582
I0702 15:33:24.478584       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:33:24.478566278 +0000 UTC m=+305.813154487
I0702 15:33:24.511244       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-139.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-139.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:33:24.511917       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-139.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:33:24.511903691 +0000 UTC m=+305.846491910
I0702 15:33:24.532193       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-139.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-139.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:34:44.923927       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 15:34:44.9238869 +0000 UTC m=+386.258475089
I0702 15:34:44.924089       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0702 15:34:44.924162       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-02 15:34:44.924149347 +0000 UTC m=+386.258737566
E0702 15:34:44.940839       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0702 15:34:44.940876       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-02 15:34:44.940869095 +0000 UTC m=+386.275457284
E0702 15:34:44.940920       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0702 15:34:44.944056       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:34:44.944136       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 15:34:44.944131259 +0000 UTC m=+386.278719438
E0702 15:34:44.957235       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0702 15:34:44.957347       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0702 15:34:44.957386       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0702 15:34:44.957575       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0702 15:34:44.969123       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:34:44.969204       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-02 15:34:44.969196741 +0000 UTC m=+386.303784920
I0702 15:34:44.977372       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-87wrf" condition "Approved" to 2026-07-02 15:34:44.977359641 +0000 UTC m=+386.311947830
I0702 15:34:44.993309       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-87wrf" condition "Ready" to 2026-07-02 15:34:44.99329873 +0000 UTC m=+386.327886919
I0702 15:34:45.026707       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:34:45.026684984 +0000 UTC m=+386.361273203
I0702 15:34:45.047097       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:34:45.047339       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:34:45.047331294 +0000 UTC m=+386.381919493
I0702 15:34:45.071681       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0702 15:34:49.957973       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-02 15:34:49.957957407 +0000 UTC m=+391.292545616
E0702 15:34:56.967069       1 event.go:346] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{kube-prometheus-stack.18be82f4b228a4b0  default    0 0001-01-01 00:00:00 +0000 UTC <nil> <nil> map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:ClusterIssuer,Namespace:,Name:kube-prometheus-stack,UID:e3ca18ed-fe51-49fa-83a7-0cd6cfc5e4dc,APIVersion:cert-manager.io/v1,ResourceVersion:4065,FieldPath:,},Reason:KeyPairVerified,Message:Signing CA verified,Source:EventSource{Component:cert-manager-clusterissuers,Host:,},FirstTimestamp:2026-07-02 15:34:49.957934256 +0000 UTC m=+391.292522465,LastTimestamp:2026-07-02 15:34:49.957934256 +0000 UTC m=+391.292522465,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-clusterissuers,ReportingInstance:,}"
E0702 15:34:56.975327       1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"