I0420 20:59:26.475534 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 20:59:26.475673 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 20:59:26.475778 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 20:59:26.483015 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 20:59:26.483690 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 20:59:26.483688 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 20:59:26.483719 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 20:59:26.487023 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 20:59:26.503409 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 20:59:26.509272 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 20:59:26.512476 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 20:59:26.512588 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 20:59:26.520052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 20:59:26.524241 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 20:59:26.526795 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 20:59:26.528972 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 20:59:26.530858 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 20:59:26.532730 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 20:59:26.537802 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 20:59:26.542193 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 20:59:26.544612 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 20:59:26.547112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 20:59:26.549621 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 20:59:26.549642 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 20:59:26.549653 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 20:59:26.549691 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 20:59:26.552363 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 20:59:26.554409 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 20:59:26.556073 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 20:59:26.559371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 20:59:26.564925 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 20:59:26.564978 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 20:59:26.565015 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 20:59:26.568115 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:59:26.568974 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:59:26.569224 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:59:26.570692 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:59:26.583796 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:59:26.597441 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:59:26.615376 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:59:26.628475 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:59:26.645615 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:59:26.658182 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 20:59:39.555980 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 20:59:39.555969177 +0000 UTC m=+13.113438444 I0420 20:59:40.264512 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 20:59:40.264497537 +0000 UTC m=+13.821966804 I0420 20:59:40.264694 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:59:40.264827 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 20:59:40.264775076 +0000 UTC m=+13.822244373 E0420 20:59:40.278755 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 20:59:40.278863 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 20:59:40.278855617 +0000 UTC m=+13.836324894 E0420 20:59:40.278889 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 20:59:40.279082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:40.279165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 20:59:40.279191 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 20:59:40.279184387 +0000 UTC m=+13.836653684 E0420 20:59:40.297308 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 20:59:40.297553 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 20:59:40.297706 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 20:59:40.297827 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 20:59:40.322340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:40.326024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qswbr" condition "Approved" to 2026-04-20 20:59:40.32600925 +0000 UTC m=+13.883478547 I0420 20:59:40.339825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-qswbr" condition "Ready" to 2026-04-20 20:59:40.339807292 +0000 UTC m=+13.897276559 I0420 20:59:40.364593 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:59:40.364582027 +0000 UTC m=+13.922051284 I0420 20:59:40.390462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:40.390743 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:59:40.390734995 +0000 UTC m=+13.948204252 I0420 20:59:40.403402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:40.406874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 20:59:45.298025 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 20:59:45.298008808 +0000 UTC m=+18.855478095 I0420 21:00:09.356168 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:00:09.356229 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 21:00:09.356222728 +0000 UTC m=+42.913691995 I0420 21:00:09.356559 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 21:00:09.356554308 +0000 UTC m=+42.914023565 I0420 21:00:09.370092 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 21:00:09.370072691 +0000 UTC m=+42.927541958 I0420 21:00:09.373487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:09.373885 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 21:00:09.37387387 +0000 UTC m=+42.931343127 I0420 21:00:09.687242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:09.723405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-h6lfd" condition "Approved" to 2026-04-20 21:00:09.723394932 +0000 UTC m=+43.280864199 I0420 21:00:09.757617 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-h6lfd" condition "Ready" to 2026-04-20 21:00:09.757600822 +0000 UTC m=+43.315070119 I0420 21:00:09.798292 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:00:09.798279674 +0000 UTC m=+43.355748941 I0420 21:00:09.821261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:00:09.821904 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:00:09.821894572 +0000 UTC m=+43.379363839 I0420 21:00:09.843676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:02.505875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:02:02.505940 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 21:02:02.505934131 +0000 UTC m=+156.063403408 I0420 21:02:02.505893 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 21:02:02.505878089 +0000 UTC m=+156.063347386 E0420 21:02:02.523627 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 21:02:02.523723 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 21:02:02.52371295 +0000 UTC m=+156.081182227 I0420 21:02:02.523753 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 21:02:02.528349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:02.528554 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:02:02.528614 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 21:02:02.528604646 +0000 UTC m=+156.086073943 E0420 21:02:02.534043 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 21:02:02.534160 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 21:02:02.534214 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 21:02:02.534266 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 21:02:02.536189 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:02:02.536213 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 21:02:02.536205529 +0000 UTC m=+156.093674796 I0420 21:02:02.536625 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 21:02:02.536611702 +0000 UTC m=+156.094080999 I0420 21:02:02.555153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:02.555272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:02:02.555314 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 21:02:02.55530184 +0000 UTC m=+156.112771137 I0420 21:02:02.664209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:02.671054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-z57v9" condition "Approved" to 2026-04-20 21:02:02.671034503 +0000 UTC m=+156.228503800 I0420 21:02:02.685333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:02.685732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-z57v9" condition "Ready" to 2026-04-20 21:02:02.685721913 +0000 UTC m=+156.243191180 I0420 21:02:02.692343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-lxmq7" condition "Approved" to 2026-04-20 21:02:02.692335975 +0000 UTC m=+156.249805242 I0420 21:02:02.719282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-lxmq7" condition "Ready" to 2026-04-20 21:02:02.719269067 +0000 UTC m=+156.276738354 I0420 21:02:02.744037 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:02.744020789 +0000 UTC m=+156.301490076 I0420 21:02:02.762405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:02.762845 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:02.762838041 +0000 UTC m=+156.320307308 I0420 21:02:02.765076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:02.780404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:02.780934 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:02.780922589 +0000 UTC m=+156.338391876 I0420 21:02:07.534707 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:07.534694339 +0000 UTC m=+161.092163636 I0420 21:02:07.550659 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-z57v9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:07.550642629 +0000 UTC m=+161.108111926 I0420 21:02:07.585759 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:07.585742142 +0000 UTC m=+161.143211429 I0420 21:02:07.604666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:07.605058 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:02:07.60504821 +0000 UTC m=+161.162517497 I0420 21:02:07.613458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:02:07.620613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:44.503796 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Ready" to 2026-04-20 21:04:44.503763083 +0000 UTC m=+318.061232350 I0420 21:04:44.503833 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-244.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:04:44.503883 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Issuing" to 2026-04-20 21:04:44.503870596 +0000 UTC m=+318.061339883 I0420 21:04:44.525404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:44.525711 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-244.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:04:44.525748 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Issuing" to 2026-04-20 21:04:44.525737458 +0000 UTC m=+318.083206745 I0420 21:04:44.697544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:44.708880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-244.nip.io-tls-7jvsk" condition "Approved" to 2026-04-20 21:04:44.708871511 +0000 UTC m=+318.266340768 I0420 21:04:44.725591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-244.nip.io-tls-7jvsk" condition "Ready" to 2026-04-20 21:04:44.725572779 +0000 UTC m=+318.283042036 I0420 21:04:44.758601 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:04:44.758583744 +0000 UTC m=+318.316053041 I0420 21:04:44.777545 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:44.778114 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-244.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:04:44.778104932 +0000 UTC m=+318.335574219 I0420 21:04:44.797525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:04:44.800053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-244.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-244.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:05:56.438938 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:05:56.439387 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 21:05:56.439028444 +0000 UTC m=+389.996497741 I0420 21:05:56.439438 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-20 21:05:56.438788397 +0000 UTC m=+389.996257684 I0420 21:05:56.454252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:05:56.454351 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:05:56.454398 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-20 21:05:56.45439001 +0000 UTC m=+390.011859277 E0420 21:05:56.455285 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 21:05:56.455345 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-20 21:05:56.45533348 +0000 UTC m=+390.012802747 E0420 21:05:56.455415 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 21:05:56.466291 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0420 21:05:56.466508 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 21:05:56.466569 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 21:05:56.466627 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0420 21:05:56.494833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:05:56.500995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gl87g" condition "Approved" to 2026-04-20 21:05:56.500974645 +0000 UTC m=+390.058443912 I0420 21:05:56.513060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gl87g" condition "Ready" to 2026-04-20 21:05:56.513051017 +0000 UTC m=+390.070520284 I0420 21:05:56.533534 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:05:56.533508334 +0000 UTC m=+390.090977621 I0420 21:05:56.551985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:05:56.552333 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:05:56.55232221 +0000 UTC m=+390.109791497 I0420 21:05:56.567680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:05:56.568104 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:05:56.568091349 +0000 UTC m=+390.125560646 I0420 21:06:01.466796 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:06:01.46678248 +0000 UTC m=+395.024251777 I0420 21:06:40.826546 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 21:06:40.826528043 +0000 UTC m=+434.383997310 I0420 21:06:40.826667 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:06:40.826730 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-20 21:06:40.82672211 +0000 UTC m=+434.384191377 I0420 21:06:40.831463 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-20 21:06:40.831455059 +0000 UTC m=+434.388924326 I0420 21:06:40.831508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:06:40.831548 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 21:06:40.831537642 +0000 UTC m=+434.389006909 I0420 21:06:40.837415 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-20 21:06:40.837399587 +0000 UTC m=+434.394868844 I0420 21:06:40.837775 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:06:40.837803 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 21:06:40.83779925 +0000 UTC m=+434.395268507 I0420 21:06:40.858808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:40.858891 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-20 21:06:40.858883427 +0000 UTC m=+434.416352684 I0420 21:06:40.870324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:40.870444 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:06:40.870474 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-20 21:06:40.870466494 +0000 UTC m=+434.427935761 I0420 21:06:40.871164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:40.871362 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:06:40.871977 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-20 21:06:40.871963171 +0000 UTC m=+434.429432488 I0420 21:06:41.037940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:41.064088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wf5g2" condition "Approved" to 2026-04-20 21:06:41.064077421 +0000 UTC m=+434.621546678 I0420 21:06:41.090104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m4mr4" condition "Approved" to 2026-04-20 21:06:41.090090844 +0000 UTC m=+434.647560111 I0420 21:06:41.093067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-wf5g2" condition "Ready" to 2026-04-20 21:06:41.093058258 +0000 UTC m=+434.650527515 I0420 21:06:41.105405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m4mr4" condition "Ready" to 2026-04-20 21:06:41.105394318 +0000 UTC m=+434.662863575 I0420 21:06:41.122980 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:06:41.122955684 +0000 UTC m=+434.680424971 I0420 21:06:41.136187 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:06:41.136174462 +0000 UTC m=+434.693643719 I0420 21:06:41.148958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:41.156213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:41.157078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:41.821367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:41.868717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:41.973200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6zdjl" condition "Approved" to 2026-04-20 21:06:41.97318625 +0000 UTC m=+435.530655507 I0420 21:06:42.078631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-6zdjl" condition "Ready" to 2026-04-20 21:06:42.078620736 +0000 UTC m=+435.636090013 I0420 21:06:42.520150 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-6zdjl" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-m6q8z" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0420 21:06:42.750994 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-m6q8z\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0420 21:06:42.802889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hxsb6" condition "Approved" to 2026-04-20 21:06:42.802871975 +0000 UTC m=+436.360341262 I0420 21:06:43.031626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hxsb6" condition "Ready" to 2026-04-20 21:06:43.031616154 +0000 UTC m=+436.589085411 I0420 21:06:43.422998 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:06:43.422980068 +0000 UTC m=+436.980449365 I0420 21:06:43.521199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:43.521536 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:06:43.521528597 +0000 UTC m=+437.078997864 I0420 21:06:43.772159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:43.822482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:51.704424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d77f6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:06:51.704450 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-d77f6-tls" condition "Ready" to 2026-04-20 21:06:51.704434896 +0000 UTC m=+445.261904153 I0420 21:06:51.704471 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-d77f6-tls" condition "Issuing" to 2026-04-20 21:06:51.704461397 +0000 UTC m=+445.261930694 I0420 21:06:51.720914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d77f6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d77f6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:51.720977 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d77f6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:06:51.720995 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-d77f6-tls" condition "Issuing" to 2026-04-20 21:06:51.72098941 +0000 UTC m=+445.278458667 I0420 21:06:52.085115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d77f6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d77f6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:52.094623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-d77f6-gd4qb" condition "Approved" to 2026-04-20 21:06:52.094607813 +0000 UTC m=+445.652077080 I0420 21:06:52.122627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-d77f6-gd4qb" condition "Ready" to 2026-04-20 21:06:52.122616639 +0000 UTC m=+445.680085896 I0420 21:06:52.215261 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-d77f6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:06:52.21524264 +0000 UTC m=+445.772711897 I0420 21:06:52.238197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d77f6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d77f6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:06:52.294745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-d77f6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-d77f6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:23.580320 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-20 21:07:23.580297239 +0000 UTC m=+477.137766546 I0420 21:07:23.580527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:07:23.580581 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 21:07:23.580568787 +0000 UTC m=+477.138038074 I0420 21:07:23.598797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:23.598952 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:07:23.599036 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-20 21:07:23.599024911 +0000 UTC m=+477.156494208 I0420 21:07:23.751319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7xflv" condition "Approved" to 2026-04-20 21:07:23.751303164 +0000 UTC m=+477.308772441 I0420 21:07:23.768522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-7xflv" condition "Ready" to 2026-04-20 21:07:23.768510218 +0000 UTC m=+477.325979485 I0420 21:07:23.806011 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:23.805996623 +0000 UTC m=+477.363465890 I0420 21:07:23.827603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:23.827974 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:23.827966737 +0000 UTC m=+477.385436004 I0420 21:07:23.844461 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:07:23.844872 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:07:23.844861551 +0000 UTC m=+477.402330828 I0420 21:10:43.190319 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:10:43.190359 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-20 21:10:43.19035155 +0000 UTC m=+676.747820807 I0420 21:10:43.190774 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 21:10:43.190197305 +0000 UTC m=+676.747666572 I0420 21:10:43.211990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:10:43.212166 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-20 21:10:43.212158131 +0000 UTC m=+676.769627398 I0420 21:10:43.388083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:10:43.422536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b6djz" condition "Approved" to 2026-04-20 21:10:43.4225164 +0000 UTC m=+676.979985707 I0420 21:10:43.440981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-b6djz" condition "Ready" to 2026-04-20 21:10:43.440968064 +0000 UTC m=+676.998437331 I0420 21:10:43.508130 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:10:43.508114429 +0000 UTC m=+677.065583716 I0420 21:10:43.533391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:10:43.533655 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:10:43.533648447 +0000 UTC m=+677.091117724 I0420 21:10:43.545519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:10:43.572453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:10:43.576708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:10:43.577121 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:10:43.577110043 +0000 UTC m=+677.134579330 I0420 21:13:07.721198 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 21:13:07.721155628 +0000 UTC m=+821.278624915 I0420 21:13:07.721544 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:13:07.721639 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-20 21:13:07.721627003 +0000 UTC m=+821.279096290 I0420 21:13:07.745590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:13:07.745686 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-20 21:13:07.745675981 +0000 UTC m=+821.303145248 I0420 21:13:07.920233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:13:07.949129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kxq5k" condition "Approved" to 2026-04-20 21:13:07.949113572 +0000 UTC m=+821.506582869 I0420 21:13:07.976781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kxq5k" condition "Ready" to 2026-04-20 21:13:07.976735392 +0000 UTC m=+821.534204689 I0420 21:13:08.019297 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:13:08.019283173 +0000 UTC m=+821.576752430 I0420 21:13:08.045612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:13:08.046026 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:13:08.046018726 +0000 UTC m=+821.603487993 I0420 21:13:08.079403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:14:16.912724 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:14:16.912765 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-20 21:14:16.912746976 +0000 UTC m=+890.470216223 I0420 21:14:16.912820 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 21:14:16.912802568 +0000 UTC m=+890.470271825 I0420 21:14:16.931499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:14:16.931655 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-20 21:14:16.931641831 +0000 UTC m=+890.489111118 I0420 21:14:17.213001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:14:17.253037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xzsr8" condition "Approved" to 2026-04-20 21:14:17.253020598 +0000 UTC m=+890.810489865 I0420 21:14:17.271019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-xzsr8" condition "Ready" to 2026-04-20 21:14:17.271007555 +0000 UTC m=+890.828476812 I0420 21:14:17.311630 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:14:17.311588473 +0000 UTC m=+890.869057760 I0420 21:14:17.335060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:14:17.335397 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:14:17.335386373 +0000 UTC m=+890.892855660 I0420 21:14:17.359402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:17:27.361701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:17:27.361830 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 21:17:27.36181883 +0000 UTC m=+1080.919288127 I0420 21:17:27.361635 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-20 21:17:27.361561452 +0000 UTC m=+1080.919030749 I0420 21:17:27.380065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0420 21:17:27.380166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 21:17:27.380197 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-20 21:17:27.380189071 +0000 UTC m=+1080.937658348 I0420 21:17:27.519713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xmn5c" condition "Approved" to 2026-04-20 21:17:27.51969931 +0000 UTC m=+1081.077168597 I0420 21:17:27.541158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xmn5c" condition "Ready" to 2026-04-20 21:17:27.541148979 +0000 UTC m=+1081.098618226 I0420 21:17:27.574551 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 21:17:27.574537546 +0000 UTC m=+1081.132006813 I0420 21:17:27.597325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"