I0420 08:13:32.107532 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0420 08:13:32.107673 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0420 08:13:32.107767 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0420 08:13:32.112687 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0420 08:13:32.113222 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0420 08:13:32.113255 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0420 08:13:32.113333 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0420 08:13:32.116196 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0420 08:13:32.131241 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0420 08:13:32.139957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0420 08:13:32.143101 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0420 08:13:32.143173 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0420 08:13:32.147327 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0420 08:13:32.149668 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0420 08:13:32.152154 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0420 08:13:32.154651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0420 08:13:32.160740 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0420 08:13:32.160831 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0420 08:13:32.162895 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0420 08:13:32.165699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0420 08:13:32.167121 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0420 08:13:32.169099 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0420 08:13:32.171486 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0420 08:13:32.175848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0420 08:13:32.180206 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0420 08:13:32.180334 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0420 08:13:32.187057 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0420 08:13:32.191016 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0420 08:13:32.191052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0420 08:13:32.193823 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0420 08:13:32.195826 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0420 08:13:32.195844 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0420 08:13:32.196428 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0420 08:13:32.198357 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:32.198814 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:32.198888 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:32.199934 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:32.217976 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:32.235109 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:32.252675 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:32.266974 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:32.284887 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:32.291007 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0420 08:13:45.080336 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-20 08:13:45.080320306 +0000 UTC m=+13.007051617 I0420 08:13:45.823881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:45.823984 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 08:13:45.823975193 +0000 UTC m=+13.750706524 I0420 08:13:45.824120 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-20 08:13:45.824102186 +0000 UTC m=+13.750833517 E0420 08:13:45.837882 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:13:45.837943 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-20 08:13:45.837936296 +0000 UTC m=+13.764667597 E0420 08:13:45.837965 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0420 08:13:45.840513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:45.840560 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:13:45.840572 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-20 08:13:45.840567732 +0000 UTC m=+13.767299043 E0420 08:13:45.847952 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0420 08:13:45.848026 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:13:45.848056 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0420 08:13:45.848090 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0420 08:13:45.889961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2x5h6" condition "Approved" to 2026-04-20 08:13:45.889943119 +0000 UTC m=+13.816674450 I0420 08:13:45.902985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2x5h6" condition "Ready" to 2026-04-20 08:13:45.902966488 +0000 UTC m=+13.829697799 I0420 08:13:45.930088 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:45.930069482 +0000 UTC m=+13.856800793 I0420 08:13:45.950252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:45.950668 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:45.950660313 +0000 UTC m=+13.877391624 I0420 08:13:45.969149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:13:50.849501 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:13:50.849479919 +0000 UTC m=+18.776211250 I0420 08:14:14.276657 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-20 08:14:14.276639233 +0000 UTC m=+42.203370544 I0420 08:14:14.276667 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:14:14.277181 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 08:14:14.277156236 +0000 UTC m=+42.203887547 I0420 08:14:14.298001 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-20 08:14:14.297987133 +0000 UTC m=+42.224718444 I0420 08:14:14.303874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:14:14.303976 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:14:14.304007 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-20 08:14:14.303999064 +0000 UTC m=+42.230730375 I0420 08:14:14.418165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:14:14.427987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-74bzn" condition "Approved" to 2026-04-20 08:14:14.427971646 +0000 UTC m=+42.354702987 I0420 08:14:14.459554 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-74bzn" condition "Ready" to 2026-04-20 08:14:14.459540214 +0000 UTC m=+42.386271535 I0420 08:14:14.494739 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:14:14.494726893 +0000 UTC m=+42.421458204 I0420 08:14:14.518101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:14:14.518807 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:14:14.518796411 +0000 UTC m=+42.445527732 I0420 08:14:14.525312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:14:14.544609 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:14:14.544889 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:14:14.5448805 +0000 UTC m=+42.471611811 I0420 08:16:26.054884 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-20 08:16:26.054840666 +0000 UTC m=+173.981571997 I0420 08:16:26.055281 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:16:26.055395 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 08:16:26.055378529 +0000 UTC m=+173.982109860 E0420 08:16:26.069429 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 08:16:26.069539 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-20 08:16:26.069528657 +0000 UTC m=+173.996259968 I0420 08:16:26.069562 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 08:16:26.069844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:16:26.069921 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:16:26.069983 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-20 08:16:26.069943867 +0000 UTC m=+173.996675208 E0420 08:16:26.084421 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0420 08:16:26.084593 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0420 08:16:26.084632 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0420 08:16:26.084683 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0420 08:16:26.088035 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 08:16:26.088006265 +0000 UTC m=+174.014737586 I0420 08:16:26.088098 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0420 08:16:26.088129 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-20 08:16:26.088120897 +0000 UTC m=+174.014852208 I0420 08:16:26.104692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:16:26.104873 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-20 08:16:26.10486024 +0000 UTC m=+174.031591571 I0420 08:16:26.280227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-l9s9j" condition "Approved" to 2026-04-20 08:16:26.280209823 +0000 UTC m=+174.206941164 I0420 08:16:26.313787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-l9s9j" condition "Ready" to 2026-04-20 08:16:26.313775291 +0000 UTC m=+174.240506592 I0420 08:16:26.345077 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:16:26.345062882 +0000 UTC m=+174.271794193 I0420 08:16:26.365969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:16:26.366859 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:16:26.366842573 +0000 UTC m=+174.293573904 I0420 08:16:26.388727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:16:26.388900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:16:26.418520 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-jpdzv" condition "Approved" to 2026-04-20 08:16:26.41850124 +0000 UTC m=+174.345232571 I0420 08:16:26.435960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-jpdzv" condition "Ready" to 2026-04-20 08:16:26.43594168 +0000 UTC m=+174.362672981 I0420 08:16:31.085728 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:16:31.0857012 +0000 UTC m=+179.012432541 I0420 08:16:31.100748 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-jpdzv" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:16:31.10073389 +0000 UTC m=+179.027465201 I0420 08:16:31.133232 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:16:31.133205811 +0000 UTC m=+179.059937152 I0420 08:16:31.158994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:16:31.159283 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:16:31.15927327 +0000 UTC m=+179.086004581 I0420 08:16:31.173288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:16:31.177498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0420 08:16:31.177748 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-20 08:16:31.177737006 +0000 UTC m=+179.104468307