I0403 02:26:30.922873 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0403 02:26:30.923105 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0403 02:26:30.923293 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0403 02:26:30.928854 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0403 02:26:30.929425 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0403 02:26:30.929531 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0403 02:26:30.929671 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0403 02:26:30.933484 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0403 02:26:30.949480 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0403 02:26:30.953561 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0403 02:26:30.953598 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0403 02:26:30.953609 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0403 02:26:30.953624 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0403 02:26:30.953699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0403 02:26:30.959870 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0403 02:26:30.962188 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0403 02:26:30.964111 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0403 02:26:30.965868 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0403 02:26:30.967573 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0403 02:26:30.969412 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0403 02:26:30.973266 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0403 02:26:30.977878 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0403 02:26:30.981757 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0403 02:26:30.984319 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0403 02:26:30.986289 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0403 02:26:30.987910 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0403 02:26:30.987944 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0403 02:26:30.988052 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0403 02:26:30.989814 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0403 02:26:30.991621 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0403 02:26:30.993304 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0403 02:26:30.996858 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0403 02:26:31.002459 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0403 02:26:31.005229 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:31.005898 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:31.006577 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:31.021879 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:31.042188 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:31.057148 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:31.074706 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:31.093173 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:31.093802 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:31.109005 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0403 02:26:44.532241 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-03 02:26:44.532222872 +0000 UTC m=+13.642445604 I0403 02:26:45.281541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:26:45.281586 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-03 02:26:45.281577801 +0000 UTC m=+14.391800513 I0403 02:26:45.281692 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-03 02:26:45.281671223 +0000 UTC m=+14.391893965 E0403 02:26:45.295410 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 02:26:45.295515 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-03 02:26:45.295503067 +0000 UTC m=+14.405725809 E0403 02:26:45.295549 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 02:26:45.296868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:26:45.297012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:26:45.297043 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-03 02:26:45.297033039 +0000 UTC m=+14.407255751 E0403 02:26:45.307443 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0403 02:26:45.308120 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 02:26:45.308238 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 02:26:45.308283 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0403 02:26:45.340536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:26:45.340996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2dvj9" condition "Approved" to 2026-04-03 02:26:45.340987097 +0000 UTC m=+14.451209799 I0403 02:26:45.352516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-2dvj9" condition "Ready" to 2026-04-03 02:26:45.352500326 +0000 UTC m=+14.462723048 I0403 02:26:45.375054 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:26:45.375043171 +0000 UTC m=+14.485265883 I0403 02:26:45.395437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:26:45.395811 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:26:45.395803847 +0000 UTC m=+14.506026549 I0403 02:26:45.415276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:26:50.307925 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:26:50.307886975 +0000 UTC m=+19.418109717 I0403 02:27:12.393006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:27:12.393068 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-03 02:27:12.393053115 +0000 UTC m=+41.503275827 I0403 02:27:12.393593 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-03 02:27:12.39287654 +0000 UTC m=+41.503099272 I0403 02:27:12.404389 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-03 02:27:12.404375639 +0000 UTC m=+41.514598361 I0403 02:27:12.420491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:27:12.420594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:27:12.420629 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-03 02:27:12.420621408 +0000 UTC m=+41.530844140 I0403 02:27:12.672805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:27:12.683515 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cq58c" condition "Approved" to 2026-04-03 02:27:12.683495694 +0000 UTC m=+41.793718426 I0403 02:27:12.713681 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cq58c" condition "Ready" to 2026-04-03 02:27:12.71366872 +0000 UTC m=+41.823891412 I0403 02:27:12.743173 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:27:12.743153906 +0000 UTC m=+41.853376648 I0403 02:27:12.766639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:27:12.766966 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:27:12.766958224 +0000 UTC m=+41.877180936 I0403 02:27:12.791111 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:31:44.876434 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:31:44.876586 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-04-03 02:31:44.876545723 +0000 UTC m=+313.986768445 I0403 02:31:44.876799 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-04-03 02:31:44.876779939 +0000 UTC m=+313.987002671 I0403 02:31:44.892806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:31:44.892877 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:31:44.892897 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-04-03 02:31:44.892890103 +0000 UTC m=+314.003112815 I0403 02:31:45.015479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:31:45.023771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-5mtfj" condition "Approved" to 2026-04-03 02:31:45.023742372 +0000 UTC m=+314.133965114 I0403 02:31:45.048720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-5mtfj" condition "Ready" to 2026-04-03 02:31:45.04870034 +0000 UTC m=+314.158923082 I0403 02:31:45.077080 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:31:45.077068973 +0000 UTC m=+314.187291685 I0403 02:31:45.096657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:31:45.096965 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:31:45.096958381 +0000 UTC m=+314.207181093 I0403 02:31:45.113815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:32:54.134818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:32:54.135165 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-03 02:32:54.134542635 +0000 UTC m=+383.244765377 I0403 02:32:54.135154 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-03 02:32:54.134858694 +0000 UTC m=+383.245081426 I0403 02:32:54.149459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:32:54.149569 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:32:54.149600 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-03 02:32:54.149592411 +0000 UTC m=+383.259815153 E0403 02:32:54.149816 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0403 02:32:54.149890 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-03 02:32:54.149876089 +0000 UTC m=+383.260098821 E0403 02:32:54.149977 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 02:32:54.161882 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0403 02:32:54.162078 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 02:32:54.162160 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0403 02:32:54.162254 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0403 02:32:54.190721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hcpz6" condition "Approved" to 2026-04-03 02:32:54.190697307 +0000 UTC m=+383.300920049 I0403 02:32:54.208628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hcpz6" condition "Ready" to 2026-04-03 02:32:54.208601161 +0000 UTC m=+383.318823903 I0403 02:32:54.231526 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:32:54.231500054 +0000 UTC m=+383.341722806 I0403 02:32:54.250907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:32:54.251224 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:32:54.251215098 +0000 UTC m=+383.361437800 I0403 02:32:54.266433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:32:54.266432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:32:54.266892 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:32:54.26682795 +0000 UTC m=+383.377050662 I0403 02:32:59.162480 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:32:59.162464745 +0000 UTC m=+388.272687477 I0403 02:33:41.104847 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-03 02:33:41.104836712 +0000 UTC m=+430.215059414 I0403 02:33:41.104897 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:33:41.104978 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-03 02:33:41.104970226 +0000 UTC m=+430.215192928 I0403 02:33:41.112999 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-03 02:33:41.112983758 +0000 UTC m=+430.223206460 I0403 02:33:41.113079 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:33:41.113114 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-03 02:33:41.113106432 +0000 UTC m=+430.223329144 I0403 02:33:41.113174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:33:41.113229 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-03 02:33:41.113224285 +0000 UTC m=+430.223446997 I0403 02:33:41.113161 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-03 02:33:41.113129342 +0000 UTC m=+430.223352054 I0403 02:33:41.128524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:41.128634 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-03 02:33:41.128624851 +0000 UTC m=+430.238847563 I0403 02:33:41.164275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:41.164369 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-03 02:33:41.164361699 +0000 UTC m=+430.274584401 I0403 02:33:41.166435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:41.166582 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:33:41.166666 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-03 02:33:41.166659163 +0000 UTC m=+430.276881865 I0403 02:33:41.344106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:41.383516 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dhxkg" condition "Approved" to 2026-04-03 02:33:41.383503813 +0000 UTC m=+430.493726535 I0403 02:33:41.407447 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-dhxkg" condition "Ready" to 2026-04-03 02:33:41.407432665 +0000 UTC m=+430.517655397 I0403 02:33:41.441547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:41.473067 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:33:41.473102 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-03 02:33:41.473093723 +0000 UTC m=+430.583316435 I0403 02:33:41.474207 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:33:41.474202273 +0000 UTC m=+430.584424985 I0403 02:33:41.504928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jr69z" condition "Approved" to 2026-04-03 02:33:41.504911903 +0000 UTC m=+430.615134625 I0403 02:33:41.513539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:41.514783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:41.515426 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:33:41.515408043 +0000 UTC m=+430.625630785 I0403 02:33:41.527892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jr69z" condition "Ready" to 2026-04-03 02:33:41.527865788 +0000 UTC m=+430.638088520 I0403 02:33:41.562082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gm5lf" condition "Approved" to 2026-04-03 02:33:41.562066295 +0000 UTC m=+430.672288997 I0403 02:33:41.807125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-gm5lf" condition "Ready" to 2026-04-03 02:33:41.807113676 +0000 UTC m=+430.917336378 E0403 02:33:42.049928 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-vt89q\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0403 02:33:42.129200 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:33:42.129187668 +0000 UTC m=+431.239410370 I0403 02:33:42.402478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:42.801791 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lb8c6" condition "Approved" to 2026-04-03 02:33:42.801771291 +0000 UTC m=+431.911994033 I0403 02:33:43.160661 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-lb8c6" condition "Ready" to 2026-04-03 02:33:43.16064391 +0000 UTC m=+432.270866632 E0403 02:33:43.663824 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-zqttf\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0403 02:33:44.135567 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-lb8c6" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-h5nbr" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0403 02:33:44.161678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zm95f" condition "Approved" to 2026-04-03 02:33:44.161650743 +0000 UTC m=+433.271873475 I0403 02:33:44.321450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-zm95f" condition "Ready" to 2026-04-03 02:33:44.321437255 +0000 UTC m=+433.431659967 I0403 02:33:44.499725 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:33:44.499712278 +0000 UTC m=+433.609934990 I0403 02:33:47.913972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:47.915628 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:33:47.915605746 +0000 UTC m=+437.025828448 I0403 02:33:47.952637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:54.928104 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls" condition "Ready" to 2026-04-03 02:33:54.92808022 +0000 UTC m=+444.038302952 I0403 02:33:54.928575 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:33:54.928631 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls" condition "Issuing" to 2026-04-03 02:33:54.928620455 +0000 UTC m=+444.038843167 I0403 02:33:54.942052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:54.942316 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:33:54.942441 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls" condition "Issuing" to 2026-04-03 02:33:54.942406716 +0000 UTC m=+444.052629428 I0403 02:33:55.144772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jq5q6-8mq5k" condition "Approved" to 2026-04-03 02:33:55.144750436 +0000 UTC m=+444.254973138 I0403 02:33:55.297803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-jq5q6-8mq5k" condition "Ready" to 2026-04-03 02:33:55.297790231 +0000 UTC m=+444.408012943 I0403 02:33:56.086722 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:33:56.086695331 +0000 UTC m=+445.196918053 I0403 02:33:56.732033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:33:56.732325 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:33:56.732315468 +0000 UTC m=+445.842538180 I0403 02:33:57.203371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-jq5q6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:30.876334 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:34:30.876533 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-03 02:34:30.87637008 +0000 UTC m=+479.986592792 I0403 02:34:30.877269 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-03 02:34:30.877249774 +0000 UTC m=+479.987472506 I0403 02:34:30.896687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:30.896774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:34:30.896802 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-03 02:34:30.896792304 +0000 UTC m=+480.007015016 I0403 02:34:31.095240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mnxjm" condition "Approved" to 2026-04-03 02:34:31.092173071 +0000 UTC m=+480.202395783 I0403 02:34:31.117479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-mnxjm" condition "Ready" to 2026-04-03 02:34:31.11743172 +0000 UTC m=+480.227654452 I0403 02:34:31.146977 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:34:31.146954387 +0000 UTC m=+480.257177129 I0403 02:34:31.168362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:34:31.168821 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:34:31.168814082 +0000 UTC m=+480.279036784 I0403 02:34:31.188916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:37:53.712087 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-03 02:37:53.712032813 +0000 UTC m=+682.822255545 I0403 02:37:53.712393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:37:53.712477 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-03 02:37:53.712466575 +0000 UTC m=+682.822689317 I0403 02:37:53.731370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:37:53.731460 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:37:53.731681 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-03 02:37:53.73147393 +0000 UTC m=+682.841696632 I0403 02:37:53.880091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-f2nlm" condition "Approved" to 2026-04-03 02:37:53.880077516 +0000 UTC m=+682.990300228 I0403 02:37:53.898746 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-f2nlm" condition "Ready" to 2026-04-03 02:37:53.89872913 +0000 UTC m=+683.008951832 I0403 02:37:53.924121 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:37:53.924108649 +0000 UTC m=+683.034331361 I0403 02:37:53.945844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:40:34.769836 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:40:34.769915 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-03 02:40:34.769887476 +0000 UTC m=+843.880110178 I0403 02:40:34.770016 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-03 02:40:34.769992939 +0000 UTC m=+843.880215681 I0403 02:40:34.834854 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:40:34.834930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:40:34.834947 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-03 02:40:34.834941238 +0000 UTC m=+843.945163950 I0403 02:40:35.642451 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-wmxgr" condition "Approved" to 2026-04-03 02:40:35.642421529 +0000 UTC m=+844.752644271 I0403 02:40:35.682585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-wmxgr" condition "Ready" to 2026-04-03 02:40:35.682571815 +0000 UTC m=+844.792794527 I0403 02:40:35.746958 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:40:35.746939678 +0000 UTC m=+844.857162390 I0403 02:40:35.844358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:40:35.844770 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:40:35.844761422 +0000 UTC m=+844.954984134 I0403 02:40:35.934986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:41:45.429249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:41:45.429284 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-03 02:41:45.429276914 +0000 UTC m=+914.539499626 I0403 02:41:45.429667 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-03 02:41:45.429661085 +0000 UTC m=+914.539883797 I0403 02:41:45.446078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:41:45.446135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:41:45.446151 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-03 02:41:45.446144028 +0000 UTC m=+914.556366740 I0403 02:41:45.724656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:41:45.727821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-sjq49" condition "Approved" to 2026-04-03 02:41:45.727806934 +0000 UTC m=+914.838029646 I0403 02:41:45.747691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-sjq49" condition "Ready" to 2026-04-03 02:41:45.74766936 +0000 UTC m=+914.857892102 I0403 02:41:45.776074 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:41:45.776064211 +0000 UTC m=+914.886286913 I0403 02:41:45.797108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:41:45.797491 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:41:45.79748353 +0000 UTC m=+914.907706242 I0403 02:41:45.818504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:45:10.160415 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:45:10.160530 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-03 02:45:10.160509062 +0000 UTC m=+1119.270731794 I0403 02:45:10.160530 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-03 02:45:10.16045186 +0000 UTC m=+1119.270674612 I0403 02:45:10.179679 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:45:10.179755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0403 02:45:10.179778 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-03 02:45:10.179770991 +0000 UTC m=+1119.289993703 I0403 02:45:10.339324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:45:10.347763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-svf55" condition "Approved" to 2026-04-03 02:45:10.347748704 +0000 UTC m=+1119.457971416 I0403 02:45:10.370359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-svf55" condition "Ready" to 2026-04-03 02:45:10.370346195 +0000 UTC m=+1119.480568897 I0403 02:45:10.400423 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:45:10.400408721 +0000 UTC m=+1119.510631433 I0403 02:45:10.424856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0403 02:45:10.425178 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-03 02:45:10.425169451 +0000 UTC m=+1119.535392163 I0403 02:45:10.444464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"