I0410 13:47:15.912481 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0410 13:47:15.912646 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0410 13:47:15.912757 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0410 13:47:15.918390 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0410 13:47:15.918936 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0410 13:47:15.919086 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0410 13:47:15.919106 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0410 13:47:15.921679 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0410 13:47:15.938605 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0410 13:47:15.946520 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0410 13:47:15.950984 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0410 13:47:15.953704 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0410 13:47:15.956102 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0410 13:47:15.958709 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0410 13:47:15.960971 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0410 13:47:15.961069 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0410 13:47:15.962801 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0410 13:47:15.967375 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0410 13:47:15.967482 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0410 13:47:15.971239 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0410 13:47:15.974949 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0410 13:47:15.977020 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0410 13:47:15.978765 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0410 13:47:15.980537 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0410 13:47:15.982064 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0410 13:47:15.982173 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0410 13:47:15.984139 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0410 13:47:15.986163 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0410 13:47:15.990986 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0410 13:47:15.991011 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0410 13:47:15.991176 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0410 13:47:15.992962 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0410 13:47:15.992995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0410 13:47:15.996498 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:47:15.997071 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:47:15.998226 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:47:15.998241 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:47:16.016442 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:47:16.064531 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:47:16.080371 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:47:16.082008 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:47:16.100443 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:47:16.116194 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0410 13:47:26.806689 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-10 13:47:26.806668509 +0000 UTC m=+10.929923950 I0410 13:47:27.579290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:47:27.579290 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-10 13:47:27.579267624 +0000 UTC m=+11.702523065 I0410 13:47:27.579342 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-10 13:47:27.579331006 +0000 UTC m=+11.702586437 E0410 13:47:27.590439 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 13:47:27.590475 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-10 13:47:27.590468453 +0000 UTC m=+11.713723864 E0410 13:47:27.590508 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 13:47:27.592606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:47:27.592668 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:47:27.592684 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-10 13:47:27.592679432 +0000 UTC m=+11.715934833 E0410 13:47:27.598177 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0410 13:47:27.598441 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 13:47:27.598468 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 13:47:27.598497 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0410 13:47:27.635487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ln7pl" condition "Approved" to 2026-04-10 13:47:27.635465554 +0000 UTC m=+11.758720975 I0410 13:47:27.649318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-ln7pl" condition "Ready" to 2026-04-10 13:47:27.649296003 +0000 UTC m=+11.772551444 I0410 13:47:27.673703 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:47:27.673685754 +0000 UTC m=+11.796941185 I0410 13:47:27.692075 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:47:27.692352 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:47:27.692346082 +0000 UTC m=+11.815601493 I0410 13:47:27.709832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:47:27.716572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:47:32.599712 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:47:32.599695273 +0000 UTC m=+16.722950704 I0410 13:47:52.954400 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:47:52.954436 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-10 13:47:52.954427121 +0000 UTC m=+37.077682532 I0410 13:47:52.954487 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-10 13:47:52.954459862 +0000 UTC m=+37.077715313 I0410 13:47:52.978595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:47:52.978672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:47:52.978700 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-10 13:47:52.978691268 +0000 UTC m=+37.101946679 I0410 13:47:52.978917 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-10 13:47:52.978895704 +0000 UTC m=+37.102151135 I0410 13:47:53.302935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-b6mll" condition "Approved" to 2026-04-10 13:47:53.3029204 +0000 UTC m=+37.426175811 I0410 13:47:53.331246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-b6mll" condition "Ready" to 2026-04-10 13:47:53.331232885 +0000 UTC m=+37.454488286 I0410 13:47:53.362322 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:47:53.362307174 +0000 UTC m=+37.485562585 I0410 13:47:53.387702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:38.142296 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:49:38.142756 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-10 13:49:38.142080315 +0000 UTC m=+142.265335746 I0410 13:49:38.143276 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-10 13:49:38.142356872 +0000 UTC m=+142.265612303 E0410 13:49:38.157960 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0410 13:49:38.158064 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-10 13:49:38.158055229 +0000 UTC m=+142.281310640 I0410 13:49:38.158134 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0410 13:49:38.160847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:38.161004 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:49:38.161069 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-10 13:49:38.161058718 +0000 UTC m=+142.284314139 E0410 13:49:38.168519 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0410 13:49:38.168630 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0410 13:49:38.168930 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0410 13:49:38.168995 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0410 13:49:38.170248 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-10 13:49:38.170225201 +0000 UTC m=+142.293480642 I0410 13:49:38.170298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:49:38.170326 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-10 13:49:38.170318744 +0000 UTC m=+142.293574145 I0410 13:49:38.187910 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:38.187991 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-10 13:49:38.187980362 +0000 UTC m=+142.311235763 I0410 13:49:38.397633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:38.428008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-xf7th" condition "Approved" to 2026-04-10 13:49:38.427986866 +0000 UTC m=+142.551242307 I0410 13:49:38.450667 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-xf7th" condition "Ready" to 2026-04-10 13:49:38.450642496 +0000 UTC m=+142.573897927 I0410 13:49:38.743938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:38.752086 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-27mrd" condition "Approved" to 2026-04-10 13:49:38.752068748 +0000 UTC m=+142.875324179 I0410 13:49:38.783527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-27mrd" condition "Ready" to 2026-04-10 13:49:38.783508772 +0000 UTC m=+142.906764193 I0410 13:49:38.814712 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:49:38.814697969 +0000 UTC m=+142.937953380 I0410 13:49:38.840878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:38.841391 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:49:38.841380617 +0000 UTC m=+142.964636048 I0410 13:49:38.846400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:38.859484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:38.859952 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:49:38.859937649 +0000 UTC m=+142.983193080 I0410 13:49:38.861343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:43.169945 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:49:43.169932906 +0000 UTC m=+147.293188317 I0410 13:49:43.184592 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-xf7th" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:49:43.184576664 +0000 UTC m=+147.307832075 I0410 13:49:43.212386 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:49:43.212362301 +0000 UTC m=+147.335617732 I0410 13:49:43.233353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:43.233608 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:49:43.233600294 +0000 UTC m=+147.356855705 I0410 13:49:43.252156 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:43.252704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:49:43.252941 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:49:43.252936677 +0000 UTC m=+147.376192088 I0410 13:52:16.294126 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready" to 2026-04-10 13:52:16.294072066 +0000 UTC m=+300.417327477 I0410 13:52:16.294234 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-250.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:52:16.294371 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Issuing" to 2026-04-10 13:52:16.294359864 +0000 UTC m=+300.417615295 I0410 13:52:16.316419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:52:16.316585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-250.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:52:16.316669 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Issuing" to 2026-04-10 13:52:16.316658008 +0000 UTC m=+300.439913419 I0410 13:52:16.502392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-250.nip.io-tls-qxddn" condition "Approved" to 2026-04-10 13:52:16.502372381 +0000 UTC m=+300.625627822 I0410 13:52:16.521839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-250.nip.io-tls-qxddn" condition "Ready" to 2026-04-10 13:52:16.521825375 +0000 UTC m=+300.645080806 I0410 13:52:16.553024 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:52:16.552994366 +0000 UTC m=+300.676249807 I0410 13:52:16.573687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:52:16.575265 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:52:16.575254539 +0000 UTC m=+300.698509950 I0410 13:52:16.585641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:52:16.595768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-250.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-250.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:52:16.596029 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-250.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:52:16.59602154 +0000 UTC m=+300.719276941 I0410 13:53:28.174645 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 13:53:28.174598604 +0000 UTC m=+372.297854045 I0410 13:53:28.174740 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:53:28.174784 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-10 13:53:28.174773749 +0000 UTC m=+372.298029150 E0410 13:53:28.188567 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 13:53:28.188614 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-10 13:53:28.188607688 +0000 UTC m=+372.311863099 E0410 13:53:28.188673 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0410 13:53:28.190393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:53:28.190736 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-10 13:53:28.190722965 +0000 UTC m=+372.313978386 E0410 13:53:28.202578 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0410 13:53:28.202707 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 13:53:28.202744 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0410 13:53:28.202777 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0410 13:53:28.207401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:53:28.231269 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-k4spc" condition "Approved" to 2026-04-10 13:53:28.231248806 +0000 UTC m=+372.354504217 I0410 13:53:28.243034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-k4spc" condition "Ready" to 2026-04-10 13:53:28.243015391 +0000 UTC m=+372.366270822 I0410 13:53:28.267692 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:53:28.267674079 +0000 UTC m=+372.390929490 I0410 13:53:28.289412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:53:28.289831 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:53:28.28981664 +0000 UTC m=+372.413072081 I0410 13:53:28.297982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:53:28.310011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:53:28.310540 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:53:28.310527012 +0000 UTC m=+372.433782443 I0410 13:53:33.203477 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:53:33.203458671 +0000 UTC m=+377.326714112 I0410 13:54:12.132049 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-10 13:54:12.132034596 +0000 UTC m=+416.255290017 I0410 13:54:12.132424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:54:12.132467 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-10 13:54:12.132459797 +0000 UTC m=+416.255715198 I0410 13:54:12.133200 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-10 13:54:12.133196037 +0000 UTC m=+416.256451438 I0410 13:54:12.133397 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:54:12.133412 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-10 13:54:12.133409222 +0000 UTC m=+416.256664623 I0410 13:54:12.142042 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-10 13:54:12.142036082 +0000 UTC m=+416.265291483 I0410 13:54:12.142267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:54:12.142281 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-10 13:54:12.142278628 +0000 UTC m=+416.265534029 I0410 13:54:12.164688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:12.164782 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:54:12.164810 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-10 13:54:12.164802487 +0000 UTC m=+416.288057908 I0410 13:54:12.184489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:12.184567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:54:12.184567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:12.184591 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-10 13:54:12.184583502 +0000 UTC m=+416.307838913 I0410 13:54:12.184624 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-10 13:54:12.184616903 +0000 UTC m=+416.307872344 I0410 13:54:12.464728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:12.535627 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4ndd2" condition "Approved" to 2026-04-10 13:54:12.535607079 +0000 UTC m=+416.658862480 I0410 13:54:12.558830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-4ndd2" condition "Ready" to 2026-04-10 13:54:12.558820986 +0000 UTC m=+416.682076387 I0410 13:54:12.588367 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:54:12.58833264 +0000 UTC m=+416.711588051 I0410 13:54:12.614983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:12.615297 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:54:12.615291026 +0000 UTC m=+416.738546427 E0410 13:54:12.637811 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-xjcrj\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0410 13:54:12.651972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:12.710886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hqwjp" condition "Approved" to 2026-04-10 13:54:12.710871105 +0000 UTC m=+416.834126536 I0410 13:54:12.729481 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hqwjp" condition "Ready" to 2026-04-10 13:54:12.7294572 +0000 UTC m=+416.852712631 I0410 13:54:12.758934 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:54:12.758918092 +0000 UTC m=+416.882173503 I0410 13:54:12.787122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:12.787498 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:54:12.787488861 +0000 UTC m=+416.910744302 I0410 13:54:12.878013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:13.027013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:13.286303 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xj9dp" condition "Approved" to 2026-04-10 13:54:13.286275174 +0000 UTC m=+417.409530605 I0410 13:54:13.436707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-xj9dp" condition "Ready" to 2026-04-10 13:54:13.43667164 +0000 UTC m=+417.559927071 I0410 13:54:13.847939 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-xj9dp" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-ckp97" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" E0410 13:54:14.021047 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-ckp97\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0410 13:54:14.079276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lrtvj" condition "Approved" to 2026-04-10 13:54:14.079263502 +0000 UTC m=+418.202518913 I0410 13:54:14.186371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lrtvj" condition "Ready" to 2026-04-10 13:54:14.186348598 +0000 UTC m=+418.309604039 I0410 13:54:14.623536 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:54:14.62340407 +0000 UTC m=+418.746659491 I0410 13:54:14.725012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:14.725287 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:54:14.725281686 +0000 UTC m=+418.848537087 I0410 13:54:14.970629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:15.032824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:20.101962 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:54:20.101968 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls" condition "Ready" to 2026-04-10 13:54:20.101946371 +0000 UTC m=+424.225201772 I0410 13:54:20.102011 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls" condition "Issuing" to 2026-04-10 13:54:20.101997232 +0000 UTC m=+424.225252643 I0410 13:54:20.119014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:20.119128 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls" condition "Ready" to 2026-04-10 13:54:20.119116137 +0000 UTC m=+424.242371548 I0410 13:54:20.214232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:20.248356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7f2zv-hbbpn" condition "Approved" to 2026-04-10 13:54:20.248343581 +0000 UTC m=+424.371598992 I0410 13:54:20.277071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7f2zv-hbbpn" condition "Ready" to 2026-04-10 13:54:20.277057284 +0000 UTC m=+424.400312725 I0410 13:54:20.308657 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:54:20.308644873 +0000 UTC m=+424.431900284 I0410 13:54:20.331911 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:20.388576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7f2zv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:41.320705 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-10 13:54:41.320657196 +0000 UTC m=+445.443912607 I0410 13:54:41.320865 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:54:41.320935 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-10 13:54:41.320923113 +0000 UTC m=+445.444178524 I0410 13:54:41.338257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:41.338354 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:54:41.338374 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-10 13:54:41.338370107 +0000 UTC m=+445.461625508 I0410 13:54:41.718117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h8lgv" condition "Approved" to 2026-04-10 13:54:41.718093946 +0000 UTC m=+445.841349377 I0410 13:54:41.737482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-h8lgv" condition "Ready" to 2026-04-10 13:54:41.73746265 +0000 UTC m=+445.860718071 I0410 13:54:41.767732 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:54:41.767712944 +0000 UTC m=+445.890968345 I0410 13:54:41.786642 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:41.787040 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:54:41.787027387 +0000 UTC m=+445.910282798 I0410 13:54:41.805432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:54:41.805831 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:54:41.805824607 +0000 UTC m=+445.929080008 I0410 13:54:41.805895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:58:05.630454 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:58:05.630573 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-10 13:58:05.630530674 +0000 UTC m=+649.753786105 I0410 13:58:05.630746 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-10 13:58:05.630720109 +0000 UTC m=+649.753975540 I0410 13:58:05.649221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:58:05.649362 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 13:58:05.649472 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-10 13:58:05.64945867 +0000 UTC m=+649.772714111 I0410 13:58:06.030864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:58:06.043676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mpnd2" condition "Approved" to 2026-04-10 13:58:06.043658004 +0000 UTC m=+650.166913435 I0410 13:58:06.066383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-mpnd2" condition "Ready" to 2026-04-10 13:58:06.066368192 +0000 UTC m=+650.189623623 I0410 13:58:06.098441 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:58:06.098416979 +0000 UTC m=+650.221672420 I0410 13:58:06.119626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:58:06.119915 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 13:58:06.119907564 +0000 UTC m=+650.243162965 I0410 13:58:06.141994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 13:58:06.145706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:00:40.967747 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-10 14:00:40.967690192 +0000 UTC m=+805.090945603 I0410 14:00:40.967848 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 14:00:40.967949 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-10 14:00:40.967938759 +0000 UTC m=+805.091194190 I0410 14:00:40.986517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:00:40.986637 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 14:00:40.986677 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-10 14:00:40.986660339 +0000 UTC m=+805.109915770 I0410 14:00:41.192405 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-fzb52" condition "Approved" to 2026-04-10 14:00:41.19238922 +0000 UTC m=+805.315644631 I0410 14:00:41.212613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-fzb52" condition "Ready" to 2026-04-10 14:00:41.21259465 +0000 UTC m=+805.335850091 I0410 14:00:41.251325 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:00:41.251301703 +0000 UTC m=+805.374557134 I0410 14:00:41.274304 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:00:41.274607 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:00:41.274598445 +0000 UTC m=+805.397853856 I0410 14:00:41.277285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:00:41.294980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:00:41.295167 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:00:41.295162074 +0000 UTC m=+805.418417475 I0410 14:01:49.921426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 14:01:49.921502 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-10 14:01:49.921497987 +0000 UTC m=+874.044753398 I0410 14:01:49.921416 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-10 14:01:49.921373074 +0000 UTC m=+874.044628475 I0410 14:01:49.940803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:01:49.940958 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-10 14:01:49.94094504 +0000 UTC m=+874.064200451 I0410 14:01:50.152121 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:01:50.183697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7pvr9" condition "Approved" to 2026-04-10 14:01:50.183674234 +0000 UTC m=+874.306929645 I0410 14:01:50.204730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7pvr9" condition "Ready" to 2026-04-10 14:01:50.204713179 +0000 UTC m=+874.327968620 I0410 14:01:50.234912 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:01:50.234895191 +0000 UTC m=+874.358150602 I0410 14:01:50.260257 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:01:50.260526 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:01:50.260517699 +0000 UTC m=+874.383773110 I0410 14:01:50.289568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:05:00.868106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0410 14:05:00.868541 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-10 14:05:00.86819342 +0000 UTC m=+1064.991448831 I0410 14:05:00.868563 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-10 14:05:00.867966604 +0000 UTC m=+1064.991222035 I0410 14:05:00.888521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:05:00.888667 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-10 14:05:00.888653418 +0000 UTC m=+1065.011908849 I0410 14:05:01.077595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:05:01.116968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2tdsj" condition "Approved" to 2026-04-10 14:05:01.116952156 +0000 UTC m=+1065.240207567 I0410 14:05:01.133808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-2tdsj" condition "Ready" to 2026-04-10 14:05:01.133795027 +0000 UTC m=+1065.257050438 I0410 14:05:01.170521 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:05:01.170505039 +0000 UTC m=+1065.293760450 I0410 14:05:01.189588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:05:01.190067 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-10 14:05:01.190056322 +0000 UTC m=+1065.313311763 I0410 14:05:01.220701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0410 14:05:01.221633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"