I0407 15:19:23.335868 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0407 15:19:23.336002 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0407 15:19:23.336100 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0407 15:19:23.340778 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0407 15:19:23.341138 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0407 15:19:23.341242 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0407 15:19:23.341252 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0407 15:19:23.343598 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0407 15:19:23.360081 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0407 15:19:23.367525 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0407 15:19:23.371563 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0407 15:19:23.375505 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0407 15:19:23.377490 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0407 15:19:23.377624 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0407 15:19:23.379358 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0407 15:19:23.381281 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0407 15:19:23.386720 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0407 15:19:23.390557 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0407 15:19:23.390602 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0407 15:19:23.390662 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0407 15:19:23.393381 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0407 15:19:23.395255 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0407 15:19:23.396979 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0407 15:19:23.399021 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0407 15:19:23.400893 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0407 15:19:23.402842 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0407 15:19:23.406995 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0407 15:19:23.407024 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0407 15:19:23.407032 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0407 15:19:23.407053 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0407 15:19:23.409073 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0407 15:19:23.410991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0407 15:19:23.413146 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0407 15:19:23.415109 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:23.415776 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:23.416355 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:23.416773 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:23.434326 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:23.452654 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:23.466698 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:23.482258 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:23.498519 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:23.504857 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0407 15:19:33.867518 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-07 15:19:33.867476191 +0000 UTC m=+10.567368907 I0407 15:19:34.575456 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:19:34.575523 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-07 15:19:34.575513282 +0000 UTC m=+11.275405998 I0407 15:19:34.575622 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 15:19:34.575614865 +0000 UTC m=+11.275507561 E0407 15:19:34.596832 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:19:34.596936 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-07 15:19:34.596925901 +0000 UTC m=+11.296818617 E0407 15:19:34.596970 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:19:34.599194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:34.599282 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 15:19:34.599268265 +0000 UTC m=+11.299160961 E0407 15:19:34.611941 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0407 15:19:34.612092 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:19:34.612172 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:19:34.612248 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0407 15:19:34.614332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:34.614378 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-07 15:19:34.614370293 +0000 UTC m=+11.314262979 I0407 15:19:34.615155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:34.616033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-524g6" condition "Approved" to 2026-04-07 15:19:34.616022008 +0000 UTC m=+11.315914694 I0407 15:19:34.626430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-524g6" condition "Ready" to 2026-04-07 15:19:34.626417509 +0000 UTC m=+11.326310195 I0407 15:19:34.677797 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:34.677780799 +0000 UTC m=+11.377673515 I0407 15:19:34.696463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:34.696827 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:34.696820314 +0000 UTC m=+11.396713000 I0407 15:19:34.713069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:34.713473 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:34.713460155 +0000 UTC m=+11.413352871 I0407 15:19:39.612876 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:39.612866899 +0000 UTC m=+16.312759565 I0407 15:19:57.164581 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:19:57.164665 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 15:19:57.164654067 +0000 UTC m=+33.864546753 I0407 15:19:57.165039 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-07 15:19:57.165015696 +0000 UTC m=+33.864908382 I0407 15:19:57.175562 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-07 15:19:57.175535391 +0000 UTC m=+33.875428077 I0407 15:19:57.183263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:57.183387 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:19:57.183428 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-07 15:19:57.183418327 +0000 UTC m=+33.883311013 I0407 15:19:57.629800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:57.634518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-glxcb" condition "Approved" to 2026-04-07 15:19:57.634508746 +0000 UTC m=+34.334401432 I0407 15:19:57.668246 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-glxcb" condition "Ready" to 2026-04-07 15:19:57.668228068 +0000 UTC m=+34.368120784 I0407 15:19:57.703808 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:57.703791379 +0000 UTC m=+34.403684095 I0407 15:19:57.722133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:57.722486 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:57.722478037 +0000 UTC m=+34.422370723 I0407 15:19:57.732136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:57.742441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:19:57.742741 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:19:57.742732867 +0000 UTC m=+34.442625553 I0407 15:24:13.828779 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-141.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:24:13.828811 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Issuing" to 2026-04-07 15:24:13.828802835 +0000 UTC m=+290.528695531 I0407 15:24:13.828805 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready" to 2026-04-07 15:24:13.828227769 +0000 UTC m=+290.528120485 I0407 15:24:13.845130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:13.845203 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-141.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:24:13.845327 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Issuing" to 2026-04-07 15:24:13.845317254 +0000 UTC m=+290.545209970 I0407 15:24:13.952031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:13.958636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-141.nip.io-tls-8tldv" condition "Approved" to 2026-04-07 15:24:13.958621473 +0000 UTC m=+290.658514189 I0407 15:24:13.985506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-141.nip.io-tls-8tldv" condition "Ready" to 2026-04-07 15:24:13.985491944 +0000 UTC m=+290.685384640 I0407 15:24:14.011659 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:24:14.011644695 +0000 UTC m=+290.711537391 I0407 15:24:14.030489 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:14.030809 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:24:14.030802715 +0000 UTC m=+290.730695401 I0407 15:24:14.043106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:14.046376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-141.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-141.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:24:14.046620 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-141.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:24:14.046612545 +0000 UTC m=+290.746505231 I0407 15:25:18.411826 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:25:18.411878 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 15:25:18.411865958 +0000 UTC m=+355.111758694 I0407 15:25:18.411962 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-07 15:25:18.411930529 +0000 UTC m=+355.111823235 E0407 15:25:18.424066 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:25:18.424110 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-07 15:25:18.424101019 +0000 UTC m=+355.123993705 E0407 15:25:18.424157 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0407 15:25:18.427446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:25:18.427516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:25:18.427535 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-07 15:25:18.427525581 +0000 UTC m=+355.127418267 E0407 15:25:18.435296 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0407 15:25:18.435475 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:25:18.435555 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0407 15:25:18.435606 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0407 15:25:18.463176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:25:18.466980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ckzrb" condition "Approved" to 2026-04-07 15:25:18.466963998 +0000 UTC m=+355.166856684 I0407 15:25:18.479633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ckzrb" condition "Ready" to 2026-04-07 15:25:18.479623381 +0000 UTC m=+355.179516087 I0407 15:25:18.502131 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:25:18.502118069 +0000 UTC m=+355.202010755 I0407 15:25:18.523580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:25:18.569571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:25:23.436243 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:25:23.436225834 +0000 UTC m=+360.136118550 I0407 15:25:59.866498 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:25:59.866531 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-07 15:25:59.866524105 +0000 UTC m=+396.566416781 I0407 15:25:59.866858 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 15:25:59.866850804 +0000 UTC m=+396.566743490 I0407 15:25:59.867093 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 15:25:59.86706576 +0000 UTC m=+396.566958446 I0407 15:25:59.867212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:25:59.867244 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-07 15:25:59.867239645 +0000 UTC m=+396.567132331 I0407 15:25:59.867345 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:25:59.867366 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-07 15:25:59.867362048 +0000 UTC m=+396.567254734 I0407 15:25:59.867743 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 15:25:59.867736268 +0000 UTC m=+396.567628954 I0407 15:25:59.895682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:25:59.895831 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-07 15:25:59.895819368 +0000 UTC m=+396.595712054 I0407 15:25:59.898160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:25:59.898350 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-07 15:25:59.898337936 +0000 UTC m=+396.598230642 I0407 15:25:59.900477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:25:59.900521 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-07 15:25:59.900517595 +0000 UTC m=+396.600410271 I0407 15:26:00.027956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:00.042915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:00.058686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rs25r" condition "Approved" to 2026-04-07 15:26:00.058668674 +0000 UTC m=+396.758561390 I0407 15:26:00.071310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rwj9k" condition "Approved" to 2026-04-07 15:26:00.071295646 +0000 UTC m=+396.771188332 I0407 15:26:00.079214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rs25r" condition "Ready" to 2026-04-07 15:26:00.079207899 +0000 UTC m=+396.779100575 I0407 15:26:00.086692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-rwj9k" condition "Ready" to 2026-04-07 15:26:00.086676731 +0000 UTC m=+396.786569437 I0407 15:26:00.106698 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:00.106688373 +0000 UTC m=+396.806581049 I0407 15:26:00.122419 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:00.122409698 +0000 UTC m=+396.822302374 I0407 15:26:00.130223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:00.130732 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:00.130719743 +0000 UTC m=+396.830612449 I0407 15:26:00.150068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:00.150497 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:00.150483298 +0000 UTC m=+396.850375984 I0407 15:26:00.254367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:00.503970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:00.653053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:00.759287 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8fg9n" condition "Approved" to 2026-04-07 15:26:00.759275507 +0000 UTC m=+397.459168193 I0407 15:26:00.912505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8fg9n" condition "Ready" to 2026-04-07 15:26:00.912486312 +0000 UTC m=+397.612379028 I0407 15:26:01.353607 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:01.353587245 +0000 UTC m=+398.053479961 I0407 15:26:01.455763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:01.456210 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:01.456201841 +0000 UTC m=+398.156094557 I0407 15:26:01.706667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:01.764747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:23.586151 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" condition "Ready" to 2026-04-07 15:26:23.586135809 +0000 UTC m=+420.286028505 I0407 15:26:23.586255 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:26:23.586303 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" condition "Issuing" to 2026-04-07 15:26:23.586299133 +0000 UTC m=+420.286191829 I0407 15:26:23.601497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4scwb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:23.601615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:26:23.601650 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" condition "Issuing" to 2026-04-07 15:26:23.601641506 +0000 UTC m=+420.301534212 I0407 15:26:23.771389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4scwb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:23.787191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4scwb-2zhqz" condition "Approved" to 2026-04-07 15:26:23.787173553 +0000 UTC m=+420.487066239 I0407 15:26:23.807469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-4scwb-2zhqz" condition "Ready" to 2026-04-07 15:26:23.807458669 +0000 UTC m=+420.507351355 I0407 15:26:23.831875 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:23.831859206 +0000 UTC m=+420.531751892 I0407 15:26:23.854681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4scwb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:23.855090 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:23.855084782 +0000 UTC m=+420.554977458 I0407 15:26:23.861311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4scwb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:23.872584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4scwb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:23.872874 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:23.872866931 +0000 UTC m=+420.572759607 I0407 15:26:23.873045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-4scwb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-4scwb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:51.731984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:26:51.732007 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-07 15:26:51.732002342 +0000 UTC m=+448.431895018 I0407 15:26:51.732312 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 15:26:51.731895619 +0000 UTC m=+448.431788295 I0407 15:26:51.750483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:51.750575 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-07 15:26:51.750565382 +0000 UTC m=+448.450458048 I0407 15:26:51.863755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:51.891558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kqz94" condition "Approved" to 2026-04-07 15:26:51.891538108 +0000 UTC m=+448.591430824 I0407 15:26:51.914312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-kqz94" condition "Ready" to 2026-04-07 15:26:51.914297802 +0000 UTC m=+448.614190488 I0407 15:26:51.940553 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:51.940538478 +0000 UTC m=+448.640431164 I0407 15:26:51.960056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:51.960390 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:51.960381613 +0000 UTC m=+448.660274299 I0407 15:26:51.981508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:26:51.982049 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:26:51.982033615 +0000 UTC m=+448.681926331 I0407 15:26:51.987956 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:30:01.948854 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 15:30:01.948834228 +0000 UTC m=+638.648726904 I0407 15:30:01.949003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:30:01.949048 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-07 15:30:01.949039094 +0000 UTC m=+638.648931780 I0407 15:30:01.966553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:30:01.966645 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-07 15:30:01.966635368 +0000 UTC m=+638.666528074 I0407 15:30:02.182361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:30:02.212753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jtzmf" condition "Approved" to 2026-04-07 15:30:02.212734367 +0000 UTC m=+638.912627043 I0407 15:30:02.228675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-jtzmf" condition "Ready" to 2026-04-07 15:30:02.228661136 +0000 UTC m=+638.928553812 I0407 15:30:02.251699 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:30:02.251674566 +0000 UTC m=+638.951567272 I0407 15:30:02.274692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:29.342929 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:32:29.343044 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 15:32:29.343033492 +0000 UTC m=+786.042926208 I0407 15:32:29.342944 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-07 15:32:29.342926709 +0000 UTC m=+786.042819395 I0407 15:32:29.361874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:29.361983 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:32:29.362016 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-07 15:32:29.362007059 +0000 UTC m=+786.061899735 I0407 15:32:29.630104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:29.636803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qfbr2" condition "Approved" to 2026-04-07 15:32:29.636788977 +0000 UTC m=+786.336681683 I0407 15:32:29.656535 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qfbr2" condition "Ready" to 2026-04-07 15:32:29.656523224 +0000 UTC m=+786.356415910 I0407 15:32:29.686525 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:32:29.686503204 +0000 UTC m=+786.386395920 I0407 15:32:29.705147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:32:29.751724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:33:38.791411 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 15:33:38.791379906 +0000 UTC m=+855.491272592 I0407 15:33:38.791629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:33:38.791693 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-07 15:33:38.791684855 +0000 UTC m=+855.491577541 I0407 15:33:38.808059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:33:38.808289 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-07 15:33:38.808254124 +0000 UTC m=+855.508146850 I0407 15:33:39.209468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:33:39.249676 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-mjj8z" condition "Approved" to 2026-04-07 15:33:39.249666016 +0000 UTC m=+855.949558692 I0407 15:33:39.271968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-mjj8z" condition "Ready" to 2026-04-07 15:33:39.271952187 +0000 UTC m=+855.971844903 I0407 15:33:39.301160 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:33:39.301147831 +0000 UTC m=+856.001040517 I0407 15:33:39.335914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:33:39.336302 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:33:39.336255412 +0000 UTC m=+856.036148098 I0407 15:33:39.336713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:33:39.359906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:33:39.360152 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:33:39.360144955 +0000 UTC m=+856.060037641 I0407 15:36:30.386117 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 15:36:30.386102609 +0000 UTC m=+1027.085995315 I0407 15:36:30.386187 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0407 15:36:30.386239 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-07 15:36:30.386233343 +0000 UTC m=+1027.086126019 I0407 15:36:30.401155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:36:30.401239 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-07 15:36:30.401231279 +0000 UTC m=+1027.101123965 I0407 15:36:30.751998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:36:30.781391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8fndv" condition "Approved" to 2026-04-07 15:36:30.781376521 +0000 UTC m=+1027.481269207 I0407 15:36:30.797260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8fndv" condition "Ready" to 2026-04-07 15:36:30.797248101 +0000 UTC m=+1027.497140787 I0407 15:36:30.824885 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:36:30.824873561 +0000 UTC m=+1027.524766247 I0407 15:36:30.842624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:36:30.843024 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:36:30.843017581 +0000 UTC m=+1027.542910267 I0407 15:36:30.865047 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:36:30.866954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0407 15:36:30.867307 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-07 15:36:30.867299273 +0000 UTC m=+1027.567191959