I0314 07:01:02.171223 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0314 07:01:02.171756 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0314 07:01:02.172114 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0314 07:01:02.177845 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0314 07:01:02.178512 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0314 07:01:02.178641 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0314 07:01:02.178700 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0314 07:01:02.181371 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0314 07:01:02.197012 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0314 07:01:02.206009 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0314 07:01:02.206128 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0314 07:01:02.209616 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0314 07:01:02.212150 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0314 07:01:02.214810 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0314 07:01:02.217706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0314 07:01:02.219672 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0314 07:01:02.222129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0314 07:01:02.226349 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0314 07:01:02.228261 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0314 07:01:02.230033 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0314 07:01:02.231713 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0314 07:01:02.231808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0314 07:01:02.233653 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0314 07:01:02.235484 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0314 07:01:02.237454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0314 07:01:02.239041 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0314 07:01:02.239064 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0314 07:01:02.239105 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0314 07:01:02.244177 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0314 07:01:02.245988 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0314 07:01:02.247697 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0314 07:01:02.247722 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0314 07:01:02.248041 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0314 07:01:02.250121 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:01:02.250775 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:01:02.251420 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:01:02.251471 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:01:02.251713 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:01:02.251785 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:01:02.252247 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:01:02.252431 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:01:02.253988 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:01:02.290345 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0314 07:01:19.727418 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-14 07:01:19.727393434 +0000 UTC m=+17.590998844 I0314 07:01:20.452874 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-14 07:01:20.452852927 +0000 UTC m=+18.316458347 I0314 07:01:20.453549 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:01:20.453727 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-14 07:01:20.453712158 +0000 UTC m=+18.317317608 E0314 07:01:20.468155 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0314 07:01:20.468248 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-14 07:01:20.468237183 +0000 UTC m=+18.331842583 E0314 07:01:20.468285 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0314 07:01:20.471938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:01:20.472077 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-14 07:01:20.472063071 +0000 UTC m=+18.335668481 E0314 07:01:20.483478 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0314 07:01:20.483615 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0314 07:01:20.483656 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0314 07:01:20.483699 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0314 07:01:20.490055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:01:20.490183 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-14 07:01:20.490167689 +0000 UTC m=+18.353773109 I0314 07:01:20.498838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xf87m" condition "Approved" to 2026-03-14 07:01:20.498816879 +0000 UTC m=+18.362422299 I0314 07:01:20.502848 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-14 07:01:20.502829061 +0000 UTC m=+18.366434481 I0314 07:01:20.510600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:01:20.512002 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-xf87m" condition "Ready" to 2026-03-14 07:01:20.511992804 +0000 UTC m=+18.375598194 I0314 07:01:20.532701 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:01:20.532690801 +0000 UTC m=+18.396296211 I0314 07:01:20.556827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:01:20.557127 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:01:20.557120616 +0000 UTC m=+18.420726006 I0314 07:01:20.560479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:01:20.569764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:01:20.570287 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:01:20.570271369 +0000 UTC m=+18.433876789 I0314 07:01:20.574083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:01:25.484098 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:01:25.484072094 +0000 UTC m=+23.347677484 I0314 07:01:42.859628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:01:42.859713 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-14 07:01:42.859686664 +0000 UTC m=+40.723292054 I0314 07:01:42.859745 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-14 07:01:42.859732495 +0000 UTC m=+40.723337905 I0314 07:01:42.877730 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-14 07:01:42.87771059 +0000 UTC m=+40.741315960 I0314 07:01:42.886767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:01:42.887087 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:01:42.887222 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-14 07:01:42.88721174 +0000 UTC m=+40.750817130 I0314 07:01:43.055956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wzbkw" condition "Approved" to 2026-03-14 07:01:43.055938046 +0000 UTC m=+40.919543436 I0314 07:01:43.089184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wzbkw" condition "Ready" to 2026-03-14 07:01:43.089167353 +0000 UTC m=+40.952772753 I0314 07:01:43.129118 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:01:43.129098096 +0000 UTC m=+40.992703486 I0314 07:01:43.155595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:01:43.157569 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:01:43.157554993 +0000 UTC m=+41.021160373 I0314 07:01:43.175370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:01:43.175905 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:01:43.175890926 +0000 UTC m=+41.039496336 I0314 07:01:43.176315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:12.703351 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-70.nip.io-tls" condition "Ready" to 2026-03-14 07:06:12.70333108 +0000 UTC m=+310.566936470 I0314 07:06:12.704009 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:06:12.704103 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-70.nip.io-tls" condition "Issuing" to 2026-03-14 07:06:12.704090609 +0000 UTC m=+310.567696019 I0314 07:06:12.721320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:12.721530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:06:12.721579 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-70.nip.io-tls" condition "Issuing" to 2026-03-14 07:06:12.721550433 +0000 UTC m=+310.585155823 I0314 07:06:12.906379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-70.nip.io-tls-k42px" condition "Approved" to 2026-03-14 07:06:12.906359946 +0000 UTC m=+310.769965366 I0314 07:06:12.930338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-70.nip.io-tls-k42px" condition "Ready" to 2026-03-14 07:06:12.930322954 +0000 UTC m=+310.793928344 I0314 07:06:12.960542 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:06:12.960523181 +0000 UTC m=+310.824128601 I0314 07:06:12.979462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:12.979828 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:06:12.979820338 +0000 UTC m=+310.843425718 I0314 07:06:12.992383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:06:13.000592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:07:19.165764 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:07:19.165790 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-14 07:07:19.165765689 +0000 UTC m=+377.029371099 I0314 07:07:19.165826 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-14 07:07:19.16581081 +0000 UTC m=+377.029416220 E0314 07:07:19.179060 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0314 07:07:19.179113 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-14 07:07:19.179103716 +0000 UTC m=+377.042709106 E0314 07:07:19.179164 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0314 07:07:19.179888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:07:19.180120 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:07:19.180240 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-14 07:07:19.180227142 +0000 UTC m=+377.043832552 E0314 07:07:19.189437 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0314 07:07:19.189682 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0314 07:07:19.189833 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0314 07:07:19.189983 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0314 07:07:19.215583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:07:19.216560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vs6k5" condition "Approved" to 2026-03-14 07:07:19.216537883 +0000 UTC m=+377.080143273 I0314 07:07:19.226760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vs6k5" condition "Ready" to 2026-03-14 07:07:19.226747836 +0000 UTC m=+377.090353226 I0314 07:07:19.245114 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:07:19.245104772 +0000 UTC m=+377.108710162 I0314 07:07:19.266753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:07:19.267120 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:07:19.267111654 +0000 UTC m=+377.130717044 I0314 07:07:19.281113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:07:19.281611 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:07:19.281601418 +0000 UTC m=+377.145206838 I0314 07:07:24.189925 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:07:24.189908527 +0000 UTC m=+382.053513947 I0314 07:08:02.872169 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-14 07:08:02.872157599 +0000 UTC m=+420.735762979 I0314 07:08:02.872502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:08:02.872524 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-14 07:08:02.872521398 +0000 UTC m=+420.736126778 I0314 07:08:02.878620 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-14 07:08:02.878604022 +0000 UTC m=+420.742209412 I0314 07:08:02.878722 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-14 07:08:02.878705424 +0000 UTC m=+420.742310814 I0314 07:08:02.879400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:08:02.879428 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-14 07:08:02.879424112 +0000 UTC m=+420.743029512 I0314 07:08:02.879774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:08:02.879894 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-14 07:08:02.879884663 +0000 UTC m=+420.743490063 I0314 07:08:02.904869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:02.904941 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-14 07:08:02.904935107 +0000 UTC m=+420.768540487 I0314 07:08:02.909619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:02.909682 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-14 07:08:02.909674909 +0000 UTC m=+420.773280299 I0314 07:08:02.912584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:02.912680 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-14 07:08:02.912671501 +0000 UTC m=+420.776276891 I0314 07:08:03.034057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:03.069800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rgk4v" condition "Approved" to 2026-03-14 07:08:03.069786117 +0000 UTC m=+420.933391507 I0314 07:08:03.097256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rgk4v" condition "Ready" to 2026-03-14 07:08:03.097240718 +0000 UTC m=+420.960846118 I0314 07:08:03.131509 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:08:03.131496341 +0000 UTC m=+420.995101731 I0314 07:08:03.193610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:03.260209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:03.272232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:03.295909 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xrhvx" condition "Approved" to 2026-03-14 07:08:03.29589241 +0000 UTC m=+421.159497790 I0314 07:08:03.314703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xrhvx" condition "Ready" to 2026-03-14 07:08:03.314689696 +0000 UTC m=+421.178295076 I0314 07:08:03.411636 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:08:03.411623146 +0000 UTC m=+421.275228516 I0314 07:08:03.450066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:03.599424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:03.599776 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:08:03.599769098 +0000 UTC m=+421.463374478 I0314 07:08:03.904857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-z9knp" condition "Approved" to 2026-03-14 07:08:03.904841264 +0000 UTC m=+421.768446674 I0314 07:08:03.948103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:03.999596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:04.211149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-z9knp" condition "Ready" to 2026-03-14 07:08:04.211134869 +0000 UTC m=+422.074740289 I0314 07:08:04.602300 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:08:04.602282687 +0000 UTC m=+422.465888077 I0314 07:08:04.699927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:04.700361 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:08:04.700348833 +0000 UTC m=+422.563954233 I0314 07:08:04.951147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:05.000290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:10.822211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:08:10.822259 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls" condition "Issuing" to 2026-03-14 07:08:10.822247208 +0000 UTC m=+428.685852618 I0314 07:08:10.822320 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls" condition "Ready" to 2026-03-14 07:08:10.822296349 +0000 UTC m=+428.685901769 I0314 07:08:10.862631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:10.862747 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:08:10.862775 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls" condition "Issuing" to 2026-03-14 07:08:10.862768318 +0000 UTC m=+428.726373708 I0314 07:08:11.315720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6bx4m-fsn97" condition "Approved" to 2026-03-14 07:08:11.315703382 +0000 UTC m=+429.179308752 I0314 07:08:11.338948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-6bx4m-fsn97" condition "Ready" to 2026-03-14 07:08:11.338910782 +0000 UTC m=+429.202516182 I0314 07:08:11.374156 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:08:11.374141048 +0000 UTC m=+429.237746448 I0314 07:08:11.396298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:11.397207 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:08:11.397195645 +0000 UTC m=+429.260801035 I0314 07:08:11.415821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:11.416429 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:08:11.416415131 +0000 UTC m=+429.280020541 I0314 07:08:11.416877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-6bx4m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:33.627985 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:08:33.628030 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-14 07:08:33.628004136 +0000 UTC m=+451.491609556 I0314 07:08:33.628051 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-14 07:08:33.628038797 +0000 UTC m=+451.491644207 I0314 07:08:33.939365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:33.939477 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:08:33.939508 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-14 07:08:33.939499124 +0000 UTC m=+451.803104534 I0314 07:08:34.678743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:34.686795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tfr2k" condition "Approved" to 2026-03-14 07:08:34.68677858 +0000 UTC m=+452.550383970 I0314 07:08:34.704034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-tfr2k" condition "Ready" to 2026-03-14 07:08:34.704020578 +0000 UTC m=+452.567625968 I0314 07:08:34.732046 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:08:34.732030153 +0000 UTC m=+452.595635543 I0314 07:08:34.751924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:08:34.799969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:47.181252 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-14 07:11:47.181237972 +0000 UTC m=+645.044843352 I0314 07:11:47.181302 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:11:47.181392 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-14 07:11:47.181380295 +0000 UTC m=+645.044985715 I0314 07:11:47.200439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:47.200509 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:11:47.200529 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-14 07:11:47.20052193 +0000 UTC m=+645.064127320 I0314 07:11:47.356987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:11:47.375322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5rdf7" condition "Approved" to 2026-03-14 07:11:47.375304819 +0000 UTC m=+645.238910219 I0314 07:11:47.397230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5rdf7" condition "Ready" to 2026-03-14 07:11:47.397215593 +0000 UTC m=+645.260820983 I0314 07:11:47.435083 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:11:47.435066854 +0000 UTC m=+645.298672244 I0314 07:11:47.471200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:14:09.446877 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-14 07:14:09.44685462 +0000 UTC m=+787.310460030 I0314 07:14:09.447085 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:14:09.447174 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-14 07:14:09.447164926 +0000 UTC m=+787.310770336 I0314 07:14:09.465162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:14:09.465267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:14:09.465318 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-14 07:14:09.46531031 +0000 UTC m=+787.328915720 I0314 07:14:09.632244 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:14:09.643124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mbskd" condition "Approved" to 2026-03-14 07:14:09.643108817 +0000 UTC m=+787.506714207 I0314 07:14:09.664437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mbskd" condition "Ready" to 2026-03-14 07:14:09.664418858 +0000 UTC m=+787.528024278 I0314 07:14:09.696848 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:14:09.696822955 +0000 UTC m=+787.560428345 I0314 07:14:09.718677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:14:09.719114 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:14:09.719106267 +0000 UTC m=+787.582711667 I0314 07:14:09.742345 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:14:09.742899 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:14:09.74288428 +0000 UTC m=+787.606489700 I0314 07:14:09.743019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:15:06.480788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:15:06.480836 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-14 07:15:06.480824344 +0000 UTC m=+844.344429754 I0314 07:15:06.481504 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-14 07:15:06.481496458 +0000 UTC m=+844.345101868 I0314 07:15:06.506440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:15:06.506588 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:15:06.506628 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-14 07:15:06.50661828 +0000 UTC m=+844.370223700 I0314 07:15:06.893090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:15:06.905231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xpbh2" condition "Approved" to 2026-03-14 07:15:06.905218784 +0000 UTC m=+844.768824174 I0314 07:15:06.925235 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xpbh2" condition "Ready" to 2026-03-14 07:15:06.925223868 +0000 UTC m=+844.788829258 I0314 07:15:06.962425 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:15:06.962410177 +0000 UTC m=+844.826015567 I0314 07:15:07.009665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:15:07.009942 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:15:07.009935933 +0000 UTC m=+844.873541323 I0314 07:15:07.052699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:15:07.053140 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:15:07.053129898 +0000 UTC m=+844.916735278 I0314 07:18:02.613862 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0314 07:18:02.613926 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-14 07:18:02.61391845 +0000 UTC m=+1020.477523830 I0314 07:18:02.613914 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-14 07:18:02.61389456 +0000 UTC m=+1020.477499970 I0314 07:18:02.634250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:18:02.634344 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-14 07:18:02.634333152 +0000 UTC m=+1020.497938562 I0314 07:18:02.831462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:18:02.859957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-s4cb7" condition "Approved" to 2026-03-14 07:18:02.859944862 +0000 UTC m=+1020.723550242 I0314 07:18:02.876564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-s4cb7" condition "Ready" to 2026-03-14 07:18:02.876554084 +0000 UTC m=+1020.740159464 I0314 07:18:02.900333 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-14 07:18:02.900319257 +0000 UTC m=+1020.763924647 I0314 07:18:02.918226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0314 07:18:02.974550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"