I0329 02:00:44.177209 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0329 02:00:44.177354 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0329 02:00:44.177440 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0329 02:00:44.182485 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0329 02:00:44.182951 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0329 02:00:44.183023 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0329 02:00:44.183364 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0329 02:00:44.185584 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0329 02:00:44.199427 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0329 02:00:44.199658 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0329 02:00:44.203545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0329 02:00:44.206914 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0329 02:00:44.211926 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0329 02:00:44.214792 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0329 02:00:44.217340 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0329 02:00:44.217370 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0329 02:00:44.217454 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0329 02:00:44.219796 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0329 02:00:44.222125 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0329 02:00:44.224099 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0329 02:00:44.225699 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0329 02:00:44.226000 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0329 02:00:44.231525 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0329 02:00:44.231600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0329 02:00:44.235294 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0329 02:00:44.237725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0329 02:00:44.239832 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0329 02:00:44.242546 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0329 02:00:44.242602 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0329 02:00:44.245299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0329 02:00:44.247546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0329 02:00:44.249906 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0329 02:00:44.253687 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0329 02:00:44.257275 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 02:00:44.257573 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 02:00:44.258250 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 02:00:44.273616 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 02:00:44.295907 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 02:00:44.314407 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 02:00:44.329117 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 02:00:44.350087 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 02:00:44.351770 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 02:00:44.365296 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 02:01:05.141943 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-29 02:01:05.141923718 +0000 UTC m=+20.997774593 I0329 02:01:05.860022 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:01:05.860159 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-29 02:01:05.860146568 +0000 UTC m=+21.715997433 I0329 02:01:05.860519 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-29 02:01:05.860502358 +0000 UTC m=+21.716353193 E0329 02:01:05.876155 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0329 02:01:05.876225 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-29 02:01:05.876218089 +0000 UTC m=+21.732068924 E0329 02:01:05.876249 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0329 02:01:05.876625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:01:05.876692 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:01:05.876709 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-29 02:01:05.876702852 +0000 UTC m=+21.732553687 E0329 02:01:05.888104 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0329 02:01:05.888391 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 02:01:05.888593 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 02:01:05.888709 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0329 02:01:05.919566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qpbx7" condition "Approved" to 2026-03-29 02:01:05.919550216 +0000 UTC m=+21.775401031 I0329 02:01:05.934471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qpbx7" condition "Ready" to 2026-03-29 02:01:05.934443634 +0000 UTC m=+21.790294499 I0329 02:01:05.957043 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:01:05.957027303 +0000 UTC m=+21.812878128 I0329 02:01:05.976532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:01:05.976860 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:01:05.976852786 +0000 UTC m=+21.832703621 I0329 02:01:05.990552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:01:05.990786 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:01:05.990776598 +0000 UTC m=+21.846627433 I0329 02:01:10.889208 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:01:10.889194292 +0000 UTC m=+26.745045117 I0329 02:01:36.614156 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-29 02:01:36.61413232 +0000 UTC m=+52.469983195 I0329 02:01:36.614349 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:01:36.614397 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-29 02:01:36.614388397 +0000 UTC m=+52.470239252 I0329 02:01:36.655568 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-29 02:01:36.655551211 +0000 UTC m=+52.511402066 I0329 02:01:36.673198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:01:36.673286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:01:36.673324 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-29 02:01:36.673313716 +0000 UTC m=+52.529164591 I0329 02:01:37.112558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ghpvz" condition "Approved" to 2026-03-29 02:01:37.112547246 +0000 UTC m=+52.968398081 I0329 02:01:37.143889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-ghpvz" condition "Ready" to 2026-03-29 02:01:37.143876482 +0000 UTC m=+52.999727317 I0329 02:01:37.182688 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:01:37.18264265 +0000 UTC m=+53.038493485 I0329 02:01:37.205872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:01:37.206279 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:01:37.206269965 +0000 UTC m=+53.062120810 I0329 02:01:37.224687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:11.663280 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-235.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:07:11.663315 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Issuing" to 2026-03-29 02:07:11.663308569 +0000 UTC m=+387.519159404 I0329 02:07:11.663454 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready" to 2026-03-29 02:07:11.663438902 +0000 UTC m=+387.519289737 I0329 02:07:11.684883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:11.684969 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready" to 2026-03-29 02:07:11.684960781 +0000 UTC m=+387.540811616 I0329 02:07:11.978572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:12.007675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-bj5wt" condition "Approved" to 2026-03-29 02:07:12.007661971 +0000 UTC m=+387.863512826 I0329 02:07:12.043502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-235.nip.io-tls-bj5wt" condition "Ready" to 2026-03-29 02:07:12.043493901 +0000 UTC m=+387.899344736 I0329 02:07:12.075963 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:07:12.075955459 +0000 UTC m=+387.931806284 I0329 02:07:12.097338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:12.098104 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-235.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:07:12.098093225 +0000 UTC m=+387.953944090 I0329 02:07:12.117948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:12.119197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-235.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-235.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:08:20.213248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:08:20.213290 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-29 02:08:20.2132785 +0000 UTC m=+456.069129365 I0329 02:08:20.213291 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-29 02:08:20.21326997 +0000 UTC m=+456.069120825 E0329 02:08:20.226576 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0329 02:08:20.226625 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-29 02:08:20.226616735 +0000 UTC m=+456.082467570 E0329 02:08:20.226707 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0329 02:08:20.229635 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:08:20.229839 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-29 02:08:20.229821622 +0000 UTC m=+456.085672517 E0329 02:08:20.261559 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0329 02:08:20.261640 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 02:08:20.261662 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 02:08:20.261697 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0329 02:08:20.317290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:08:20.418546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lmjwp" condition "Approved" to 2026-03-29 02:08:20.418529441 +0000 UTC m=+456.274380306 I0329 02:08:20.454665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-lmjwp" condition "Ready" to 2026-03-29 02:08:20.454647419 +0000 UTC m=+456.310498274 I0329 02:08:20.507976 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:08:20.507957786 +0000 UTC m=+456.363808651 I0329 02:08:20.567157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:08:20.567972 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:08:20.567957786 +0000 UTC m=+456.423808651 I0329 02:08:20.634716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:08:20.638414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:08:25.261990 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:08:25.261976728 +0000 UTC m=+461.117827583 I0329 02:09:08.947576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:09:08.947662 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-29 02:09:08.947645915 +0000 UTC m=+504.803496740 I0329 02:09:08.948110 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-29 02:09:08.948104728 +0000 UTC m=+504.803955563 I0329 02:09:08.948342 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-29 02:09:08.948337314 +0000 UTC m=+504.804188159 I0329 02:09:08.948574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:09:08.948596 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-29 02:09:08.948591781 +0000 UTC m=+504.804442616 I0329 02:09:08.957545 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:09:08.957612 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-29 02:09:08.957605528 +0000 UTC m=+504.813456353 I0329 02:09:08.958042 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-29 02:09:08.958037869 +0000 UTC m=+504.813888694 I0329 02:09:08.976344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:08.976412 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:09:08.976435 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-29 02:09:08.976428412 +0000 UTC m=+504.832279237 I0329 02:09:08.987074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:08.987146 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-29 02:09:08.987139695 +0000 UTC m=+504.842990520 I0329 02:09:08.987255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:08.987315 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:09:08.987348 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-29 02:09:08.987341791 +0000 UTC m=+504.843192646 I0329 02:09:09.070681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:09.101966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pq8hn" condition "Approved" to 2026-03-29 02:09:09.101944434 +0000 UTC m=+504.957795299 I0329 02:09:09.118598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nfhkc" condition "Approved" to 2026-03-29 02:09:09.118585429 +0000 UTC m=+504.974436274 I0329 02:09:09.123024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-pq8hn" condition "Ready" to 2026-03-29 02:09:09.1230104 +0000 UTC m=+504.978861245 I0329 02:09:09.139898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nfhkc" condition "Ready" to 2026-03-29 02:09:09.139888261 +0000 UTC m=+504.995739096 I0329 02:09:09.157172 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:09:09.157159923 +0000 UTC m=+505.013010758 I0329 02:09:09.177863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:09.178337 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:09:09.178325242 +0000 UTC m=+505.034176077 I0329 02:09:09.178938 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:09:09.178930988 +0000 UTC m=+505.034781833 I0329 02:09:09.199878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:09.292876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:09.795889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:09.849577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qd6bq" condition "Approved" to 2026-03-29 02:09:09.849560692 +0000 UTC m=+505.705411557 I0329 02:09:10.153415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-qd6bq" condition "Ready" to 2026-03-29 02:09:10.153399408 +0000 UTC m=+506.009250273 I0329 02:09:10.393409 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:09:10.393393909 +0000 UTC m=+506.249244744 I0329 02:09:10.491349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" E0329 02:09:10.827018 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-8mfxb\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0329 02:09:27.466267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:09:27.466306 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls" condition "Issuing" to 2026-03-29 02:09:27.466296969 +0000 UTC m=+523.322147804 I0329 02:09:27.466339 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls" condition "Ready" to 2026-03-29 02:09:27.46632047 +0000 UTC m=+523.322171305 I0329 02:09:27.482803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:27.482900 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls" condition "Ready" to 2026-03-29 02:09:27.482889903 +0000 UTC m=+523.338740758 I0329 02:09:27.971662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:28.008998 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mn5zn-s66dp" condition "Approved" to 2026-03-29 02:09:28.008979645 +0000 UTC m=+523.864830470 I0329 02:09:28.037708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mn5zn-s66dp" condition "Ready" to 2026-03-29 02:09:28.03767979 +0000 UTC m=+523.893530635 I0329 02:09:28.071254 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:09:28.071232337 +0000 UTC m=+523.927083192 I0329 02:09:28.098849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:28.159680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mn5zn-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:10:23.736014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:10:23.736074 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-29 02:10:23.736066367 +0000 UTC m=+579.591917212 I0329 02:10:23.736350 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-29 02:10:23.736331234 +0000 UTC m=+579.592182089 I0329 02:10:23.826000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:10:23.826099 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-29 02:10:23.826089411 +0000 UTC m=+579.681940266 I0329 02:10:24.030173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:10:24.077941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rbbmn" condition "Approved" to 2026-03-29 02:10:24.077923244 +0000 UTC m=+579.933774099 I0329 02:10:24.171476 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-rbbmn" condition "Ready" to 2026-03-29 02:10:24.171462195 +0000 UTC m=+580.027313030 I0329 02:10:24.199959 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:10:24.199943514 +0000 UTC m=+580.055794349 I0329 02:10:24.219742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:10:24.291820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:13:48.302236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:13:48.302312 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-29 02:13:48.302302517 +0000 UTC m=+784.158153372 I0329 02:13:48.302719 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-29 02:13:48.302697258 +0000 UTC m=+784.158548143 I0329 02:13:48.330437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:13:48.330575 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-29 02:13:48.33056189 +0000 UTC m=+784.186412725 I0329 02:13:48.488200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:13:48.522227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z275n" condition "Approved" to 2026-03-29 02:13:48.522215622 +0000 UTC m=+784.378066457 I0329 02:13:48.543027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-z275n" condition "Ready" to 2026-03-29 02:13:48.543016701 +0000 UTC m=+784.398867536 I0329 02:13:48.571850 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:13:48.571833339 +0000 UTC m=+784.427684174 I0329 02:13:48.593487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:13:48.593870 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:13:48.593862092 +0000 UTC m=+784.449712927 I0329 02:13:48.623874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:13:48.626231 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:13:48.626220456 +0000 UTC m=+784.482071281 I0329 02:16:26.997810 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-29 02:16:26.99779679 +0000 UTC m=+942.853647605 I0329 02:16:26.998184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:16:26.998280 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-29 02:16:26.998269763 +0000 UTC m=+942.854120628 I0329 02:16:27.211121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:16:27.211245 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:16:27.211275 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-29 02:16:27.211266258 +0000 UTC m=+943.067117113 I0329 02:16:27.888501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:16:27.895065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-j8bhn" condition "Approved" to 2026-03-29 02:16:27.895058144 +0000 UTC m=+943.750908969 I0329 02:16:28.021328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-j8bhn" condition "Ready" to 2026-03-29 02:16:28.021317623 +0000 UTC m=+943.877168458 I0329 02:16:28.410115 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:16:28.410103135 +0000 UTC m=+944.265953960 I0329 02:16:28.526564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:18:06.105529 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-29 02:18:06.105501418 +0000 UTC m=+1041.961352293 I0329 02:18:06.105638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:18:06.105992 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-29 02:18:06.105897999 +0000 UTC m=+1041.961748854 I0329 02:18:06.140534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:18:06.140785 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-29 02:18:06.140771125 +0000 UTC m=+1041.996621980 I0329 02:18:06.360508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:18:06.454658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zgxz7" condition "Approved" to 2026-03-29 02:18:06.45464387 +0000 UTC m=+1042.310494735 I0329 02:18:06.558027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-zgxz7" condition "Ready" to 2026-03-29 02:18:06.558014443 +0000 UTC m=+1042.413865268 I0329 02:18:06.687046 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:18:06.68702725 +0000 UTC m=+1042.542878115 I0329 02:18:06.741459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:18:06.741912 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:18:06.741903394 +0000 UTC m=+1042.597754229 I0329 02:18:06.745855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:18:06.760016 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:18:06.760387 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:18:06.760377041 +0000 UTC m=+1042.616227876 I0329 02:21:33.635832 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:21:33.635863 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-29 02:21:33.635852294 +0000 UTC m=+1249.491703119 I0329 02:21:33.635911 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-29 02:21:33.635901045 +0000 UTC m=+1249.491751900 I0329 02:21:33.653659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:21:33.653759 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:21:33.653779 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-29 02:21:33.653772655 +0000 UTC m=+1249.509623470 I0329 02:21:33.841368 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8946z" condition "Approved" to 2026-03-29 02:21:33.841350471 +0000 UTC m=+1249.697201306 I0329 02:21:33.859647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8946z" condition "Ready" to 2026-03-29 02:21:33.859635663 +0000 UTC m=+1249.715486498 I0329 02:21:33.889013 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:21:33.888996979 +0000 UTC m=+1249.744847814 I0329 02:21:33.911047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:21:33.911534 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:21:33.911524547 +0000 UTC m=+1249.767375382 I0329 02:21:33.939848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:21:33.941387 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:21:33.941351375 +0000 UTC m=+1249.797202220