I0422 06:05:41.396705 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0422 06:05:41.396913 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0422 06:05:41.397030 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0422 06:05:41.401988 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0422 06:05:41.402679 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0422 06:05:41.402776 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0422 06:05:41.402789 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0422 06:05:41.406183 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0422 06:05:41.422722 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0422 06:05:41.427139 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0422 06:05:41.433066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0422 06:05:41.436113 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0422 06:05:41.438645 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0422 06:05:41.438747 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0422 06:05:41.441329 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0422 06:05:41.443783 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0422 06:05:41.445982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0422 06:05:41.451327 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0422 06:05:41.455884 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0422 06:05:41.455965 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0422 06:05:41.459637 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0422 06:05:41.461363 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0422 06:05:41.461387 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0422 06:05:41.461394 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0422 06:05:41.461434 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0422 06:05:41.463636 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0422 06:05:41.465542 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0422 06:05:41.467361 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0422 06:05:41.469215 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0422 06:05:41.472129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0422 06:05:41.478187 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0422 06:05:41.478297 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0422 06:05:41.482886 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0422 06:05:41.484377 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:05:41.485056 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:05:41.485483 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:05:41.486609 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:05:41.508603 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:05:41.534250 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:05:41.555206 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:05:41.570525 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:05:41.586997 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:05:41.595083 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0422 06:05:53.192260 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-22 06:05:53.192244219 +0000 UTC m=+11.831795787 I0422 06:05:53.947380 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 06:05:53.947363329 +0000 UTC m=+12.586914907 I0422 06:05:53.947581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:05:53.947740 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-22 06:05:53.947726158 +0000 UTC m=+12.587277736 E0422 06:05:53.965659 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 06:05:53.965865 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-22 06:05:53.965765564 +0000 UTC m=+12.605317152 E0422 06:05:53.965965 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 06:05:53.967552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:05:53.967754 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 06:05:53.967741975 +0000 UTC m=+12.607293543 E0422 06:05:53.979442 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0422 06:05:53.979555 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 06:05:53.979595 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 06:05:53.979639 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0422 06:05:53.989909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:05:53.990060 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-22 06:05:53.990044841 +0000 UTC m=+12.629596419 I0422 06:05:53.992275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s5k9r" condition "Approved" to 2026-04-22 06:05:53.992259277 +0000 UTC m=+12.631810835 I0422 06:05:54.008539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-s5k9r" condition "Ready" to 2026-04-22 06:05:54.008519467 +0000 UTC m=+12.648071055 I0422 06:05:54.036658 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:05:54.036644022 +0000 UTC m=+12.676195570 I0422 06:05:54.055853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:05:54.057319 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:05:54.057311206 +0000 UTC m=+12.696862754 I0422 06:05:54.066757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:05:54.076994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:05:54.077330 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:05:54.077318202 +0000 UTC m=+12.716869760 I0422 06:05:58.980708 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:05:58.980694586 +0000 UTC m=+17.620246134 I0422 06:06:18.180789 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:06:18.180820 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-22 06:06:18.180790859 +0000 UTC m=+36.820342437 I0422 06:06:18.180840 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-22 06:06:18.18082994 +0000 UTC m=+36.820381498 I0422 06:06:18.191728 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-22 06:06:18.191709921 +0000 UTC m=+36.831261499 I0422 06:06:18.204535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:06:18.204701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:06:18.204741 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-22 06:06:18.204731026 +0000 UTC m=+36.844282594 I0422 06:06:18.494888 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:06:18.507469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sssmc" condition "Approved" to 2026-04-22 06:06:18.507451186 +0000 UTC m=+37.147002774 I0422 06:06:18.543213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sssmc" condition "Ready" to 2026-04-22 06:06:18.543197318 +0000 UTC m=+37.182748876 I0422 06:06:18.576581 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:06:18.576560159 +0000 UTC m=+37.216111737 I0422 06:06:18.603262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:06:18.603537 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:06:18.603525775 +0000 UTC m=+37.243077333 I0422 06:06:18.635034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:10:58.457203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-78.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:10:58.457292 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Issuing" to 2026-04-22 06:10:58.457248418 +0000 UTC m=+317.096799996 I0422 06:10:58.457410 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready" to 2026-04-22 06:10:58.457380501 +0000 UTC m=+317.096932089 I0422 06:10:58.474332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:10:58.474576 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready" to 2026-04-22 06:10:58.474502286 +0000 UTC m=+317.114053914 I0422 06:10:58.670238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:10:58.702715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-78.nip.io-tls-9xj78" condition "Approved" to 2026-04-22 06:10:58.702691588 +0000 UTC m=+317.342243176 I0422 06:10:58.732771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-78.nip.io-tls-9xj78" condition "Ready" to 2026-04-22 06:10:58.732754253 +0000 UTC m=+317.372305831 I0422 06:10:58.765693 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:10:58.76567528 +0000 UTC m=+317.405226868 I0422 06:10:58.792093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:10:58.792593 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:10:58.792584404 +0000 UTC m=+317.432135962 I0422 06:10:58.809725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-78.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-78.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:10:58.810211 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-78.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:10:58.810199192 +0000 UTC m=+317.449750780 I0422 06:12:06.657632 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:12:06.657695 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-22 06:12:06.657683882 +0000 UTC m=+385.297235460 I0422 06:12:06.657682 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-22 06:12:06.657663072 +0000 UTC m=+385.297214660 E0422 06:12:06.674070 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 06:12:06.674189 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-22 06:12:06.674172259 +0000 UTC m=+385.313723857 E0422 06:12:06.674292 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0422 06:12:06.676088 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:06.676250 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-22 06:12:06.676235962 +0000 UTC m=+385.315787540 E0422 06:12:06.684536 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0422 06:12:06.684643 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 06:12:06.684672 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0422 06:12:06.684703 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0422 06:12:06.691890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:06.719815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hbtbz" condition "Approved" to 2026-04-22 06:12:06.719796776 +0000 UTC m=+385.359348354 I0422 06:12:06.733226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hbtbz" condition "Ready" to 2026-04-22 06:12:06.733201776 +0000 UTC m=+385.372753364 I0422 06:12:06.755559 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:12:06.755543992 +0000 UTC m=+385.395095550 I0422 06:12:06.774767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:06.819175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:11.685833 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:12:11.685817953 +0000 UTC m=+390.325369531 I0422 06:12:53.145642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:12:53.145679 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-22 06:12:53.145671297 +0000 UTC m=+431.785222855 I0422 06:12:53.145935 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-22 06:12:53.145929423 +0000 UTC m=+431.785480981 I0422 06:12:53.150256 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-22 06:12:53.150249793 +0000 UTC m=+431.789801341 I0422 06:12:53.150650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:12:53.150660 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-22 06:12:53.150657813 +0000 UTC m=+431.790209361 I0422 06:12:53.157517 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-22 06:12:53.157498225 +0000 UTC m=+431.797049803 I0422 06:12:53.157684 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:12:53.157721 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-22 06:12:53.157712872 +0000 UTC m=+431.797264460 I0422 06:12:53.186957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:53.187173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:53.187318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:12:53.187353 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-22 06:12:53.18734594 +0000 UTC m=+431.826897488 I0422 06:12:53.187320 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-22 06:12:53.187312329 +0000 UTC m=+431.826863877 I0422 06:12:53.187619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:53.187655 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:12:53.187690 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-22 06:12:53.187686999 +0000 UTC m=+431.827238537 I0422 06:12:53.361369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-99xcm" condition "Approved" to 2026-04-22 06:12:53.361350726 +0000 UTC m=+432.000902304 I0422 06:12:53.384618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-99xcm" condition "Ready" to 2026-04-22 06:12:53.384598984 +0000 UTC m=+432.024150572 I0422 06:12:53.415668 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:12:53.415645669 +0000 UTC m=+432.055197217 I0422 06:12:53.436194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:53.449867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:53.504283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sdjzp" condition "Approved" to 2026-04-22 06:12:53.504271717 +0000 UTC m=+432.143823255 I0422 06:12:53.518631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:53.526570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-sdjzp" condition "Ready" to 2026-04-22 06:12:53.52655678 +0000 UTC m=+432.166108338 I0422 06:12:53.789917 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lhklq" condition "Approved" to 2026-04-22 06:12:53.789898653 +0000 UTC m=+432.429450231 I0422 06:12:53.833026 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:12:53.833004653 +0000 UTC m=+432.472556241 I0422 06:12:54.026273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lhklq" condition "Ready" to 2026-04-22 06:12:54.026248415 +0000 UTC m=+432.665799993 I0422 06:12:54.340129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:54.340615 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:12:54.340607107 +0000 UTC m=+432.980158665 E0422 06:12:54.375376 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-28827\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" E0422 06:12:54.519430 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-z8lkj\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0422 06:12:54.784832 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-lhklq" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-v2jcm" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0422 06:12:54.884317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:55.042201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:55.091241 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5b72g" condition "Approved" to 2026-04-22 06:12:55.091220672 +0000 UTC m=+433.730772230 I0422 06:12:55.493296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5b72g" condition "Ready" to 2026-04-22 06:12:55.49327785 +0000 UTC m=+434.132829438 E0422 06:12:55.530935 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-v2jcm\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0422 06:12:55.839628 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:12:55.83960657 +0000 UTC m=+434.479158178 I0422 06:12:55.863619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:55.864060 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:12:55.864052738 +0000 UTC m=+434.503604296 I0422 06:12:56.085247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:56.133940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:59.579974 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-btghb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:12:59.580046 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-btghb-tls" condition "Issuing" to 2026-04-22 06:12:59.580019773 +0000 UTC m=+438.219571361 I0422 06:12:59.580013 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-btghb-tls" condition "Ready" to 2026-04-22 06:12:59.579976522 +0000 UTC m=+438.219528100 I0422 06:12:59.597432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-btghb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-btghb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:59.597536 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-btghb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:12:59.597583 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-btghb-tls" condition "Issuing" to 2026-04-22 06:12:59.597572036 +0000 UTC m=+438.237123594 I0422 06:12:59.743246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-btghb-gpbn4" condition "Approved" to 2026-04-22 06:12:59.743224816 +0000 UTC m=+438.382776364 I0422 06:12:59.766834 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-btghb-gpbn4" condition "Ready" to 2026-04-22 06:12:59.766763331 +0000 UTC m=+438.406314889 I0422 06:12:59.796432 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-btghb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:12:59.796409279 +0000 UTC m=+438.435960837 I0422 06:12:59.821786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-btghb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-btghb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:59.822188 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-btghb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:12:59.822173691 +0000 UTC m=+438.461725249 I0422 06:12:59.831059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-btghb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-btghb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:59.842770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-btghb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-btghb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:12:59.843209 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-btghb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:12:59.843196832 +0000 UTC m=+438.482748400 I0422 06:12:59.846322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-btghb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-btghb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:25.762305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:13:25.762361 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-22 06:13:25.76234303 +0000 UTC m=+464.401894608 I0422 06:13:25.762797 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-22 06:13:25.762786381 +0000 UTC m=+464.402337969 I0422 06:13:25.789696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:25.789842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:13:25.789875 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-22 06:13:25.789865327 +0000 UTC m=+464.429416885 I0422 06:13:26.175451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:26.186154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kwctw" condition "Approved" to 2026-04-22 06:13:26.186129299 +0000 UTC m=+464.825680857 I0422 06:13:26.206716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kwctw" condition "Ready" to 2026-04-22 06:13:26.2067003 +0000 UTC m=+464.846251868 I0422 06:13:26.242652 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:13:26.24263941 +0000 UTC m=+464.882190958 I0422 06:13:26.268964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:13:26.322108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:16:43.779840 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:16:43.779983 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-22 06:16:43.779937399 +0000 UTC m=+662.419488977 I0422 06:16:43.780207 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-22 06:16:43.779912569 +0000 UTC m=+662.419464127 I0422 06:16:43.798356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:16:43.798538 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-22 06:16:43.798525541 +0000 UTC m=+662.438077119 I0422 06:16:43.962724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:16:43.997692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-446hd" condition "Approved" to 2026-04-22 06:16:43.997675899 +0000 UTC m=+662.637227457 I0422 06:16:44.020489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-446hd" condition "Ready" to 2026-04-22 06:16:44.020473327 +0000 UTC m=+662.660024885 I0422 06:16:44.054861 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:16:44.054845408 +0000 UTC m=+662.694396966 I0422 06:16:44.098447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:16:44.098472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:16:44.098841 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:16:44.098831973 +0000 UTC m=+662.738383531 I0422 06:16:44.114033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:16:44.114273 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:16:44.114266404 +0000 UTC m=+662.753817962 I0422 06:19:12.121889 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-22 06:19:12.121838978 +0000 UTC m=+810.761390556 I0422 06:19:12.121913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:19:12.121995 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-22 06:19:12.121982811 +0000 UTC m=+810.761534389 I0422 06:19:12.141456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:19:12.141584 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-22 06:19:12.141569078 +0000 UTC m=+810.781120656 I0422 06:19:12.371276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:19:12.415491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-gdbqd" condition "Approved" to 2026-04-22 06:19:12.415470799 +0000 UTC m=+811.055022387 I0422 06:19:12.437712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-gdbqd" condition "Ready" to 2026-04-22 06:19:12.437695812 +0000 UTC m=+811.077247400 I0422 06:19:12.467327 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:19:12.467312513 +0000 UTC m=+811.106864071 I0422 06:19:12.491199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:19:12.491586 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:19:12.491578617 +0000 UTC m=+811.131130175 I0422 06:19:12.510162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:19:12.517898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:20:14.293755 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-22 06:20:14.293739066 +0000 UTC m=+872.933290604 I0422 06:20:14.294028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:20:14.294093 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-22 06:20:14.294085115 +0000 UTC m=+872.933636673 I0422 06:20:14.317532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:20:14.317613 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:20:14.317634 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-22 06:20:14.317626781 +0000 UTC m=+872.957178329 I0422 06:20:14.660212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-lgmgk" condition "Approved" to 2026-04-22 06:20:14.660196572 +0000 UTC m=+873.299748130 I0422 06:20:14.683954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-lgmgk" condition "Ready" to 2026-04-22 06:20:14.683940344 +0000 UTC m=+873.323491902 I0422 06:20:14.719833 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:20:14.719724141 +0000 UTC m=+873.359275699 I0422 06:20:14.756716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:20:14.757170 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:20:14.75716134 +0000 UTC m=+873.396712888 I0422 06:20:14.764740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:20:14.779574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:20:14.779849 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:20:14.779839365 +0000 UTC m=+873.419390913 I0422 06:23:14.631587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:23:14.631614 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-22 06:23:14.63156367 +0000 UTC m=+1053.271115278 I0422 06:23:14.631690 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-22 06:23:14.631669542 +0000 UTC m=+1053.271221100 I0422 06:23:14.650441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:23:14.650529 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0422 06:23:14.650585 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-22 06:23:14.650574988 +0000 UTC m=+1053.290126546 I0422 06:23:15.096727 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0422 06:23:15.107922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-t5rfr" condition "Approved" to 2026-04-22 06:23:15.107905322 +0000 UTC m=+1053.747456890 I0422 06:23:15.125611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-t5rfr" condition "Ready" to 2026-04-22 06:23:15.125595226 +0000 UTC m=+1053.765146784 I0422 06:23:15.157086 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-22 06:23:15.157065129 +0000 UTC m=+1053.796616687 I0422 06:23:15.181973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"