I0313 09:56:16.722843 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0313 09:56:16.723009 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0313 09:56:16.723161 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0313 09:56:16.728215 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0313 09:56:16.728721 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0313 09:56:16.728897 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0313 09:56:16.728908 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0313 09:56:16.732261 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0313 09:56:16.749243 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0313 09:56:16.749539 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0313 09:56:16.749594 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0313 09:56:16.754420 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0313 09:56:16.760811 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0313 09:56:16.763960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0313 09:56:16.766552 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0313 09:56:16.768838 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0313 09:56:16.770953 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0313 09:56:16.772824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0313 09:56:16.774459 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0313 09:56:16.774547 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0313 09:56:16.780270 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0313 09:56:16.784118 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0313 09:56:16.784326 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0313 09:56:16.785899 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0313 09:56:16.785966 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0313 09:56:16.787927 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0313 09:56:16.789716 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0313 09:56:16.791648 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0313 09:56:16.793471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0313 09:56:16.795343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0313 09:56:16.801372 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0313 09:56:16.801440 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0313 09:56:16.805146 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0313 09:56:16.808601 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:56:16.808620 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:56:16.809207 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:56:16.809798 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:56:16.829553 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:56:16.844157 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:56:16.850330 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:56:16.871691 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:56:16.889325 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:56:16.917130 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0313 09:56:27.070144 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-13 09:56:27.07009025 +0000 UTC m=+10.383348960 I0313 09:56:27.834119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 09:56:27.834168 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-13 09:56:27.834156071 +0000 UTC m=+11.147414771 I0313 09:56:27.834280 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-13 09:56:27.834262614 +0000 UTC m=+11.147521324 E0313 09:56:27.853279 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 09:56:27.853370 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-13 09:56:27.853348845 +0000 UTC m=+11.166607535 E0313 09:56:27.853405 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 09:56:27.854731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:27.854785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 09:56:27.854801 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-13 09:56:27.854796075 +0000 UTC m=+11.168054755 E0313 09:56:27.864047 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0313 09:56:27.864200 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 09:56:27.864242 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 09:56:27.864282 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0313 09:56:27.893599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:27.893989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7jv2v" condition "Approved" to 2026-03-13 09:56:27.893969775 +0000 UTC m=+11.207228475 I0313 09:56:27.906429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-7jv2v" condition "Ready" to 2026-03-13 09:56:27.906415281 +0000 UTC m=+11.219673961 I0313 09:56:27.931963 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:56:27.931952001 +0000 UTC m=+11.245210661 I0313 09:56:27.952057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:27.952555 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:56:27.952545804 +0000 UTC m=+11.265804504 I0313 09:56:27.971158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:27.971543 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:56:27.971530722 +0000 UTC m=+11.284789432 I0313 09:56:32.864521 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:56:32.864501464 +0000 UTC m=+16.177760164 I0313 09:56:54.466149 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-13 09:56:54.466128206 +0000 UTC m=+37.779386886 I0313 09:56:54.467391 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 09:56:54.467460 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-13 09:56:54.467451401 +0000 UTC m=+37.780710081 I0313 09:56:54.477374 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-13 09:56:54.477283308 +0000 UTC m=+37.790541988 I0313 09:56:54.491254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:54.491452 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 09:56:54.491533 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-13 09:56:54.491522435 +0000 UTC m=+37.804781115 I0313 09:56:54.594903 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:54.598966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-q4j9l" condition "Approved" to 2026-03-13 09:56:54.598948332 +0000 UTC m=+37.912207002 I0313 09:56:54.635067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-q4j9l" condition "Ready" to 2026-03-13 09:56:54.635039192 +0000 UTC m=+37.948297872 I0313 09:56:54.674494 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:56:54.674473943 +0000 UTC m=+37.987732623 I0313 09:56:54.699455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:54.699870 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:56:54.699859542 +0000 UTC m=+38.013118252 I0313 09:56:54.710822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:54.719525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:54.719998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:56:54.720005 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:56:54.719990099 +0000 UTC m=+38.033248789 I0313 09:58:28.223381 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-13 09:58:28.223352974 +0000 UTC m=+131.536611684 I0313 09:58:28.223500 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 09:58:28.223581 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-13 09:58:28.2235654 +0000 UTC m=+131.536824110 E0313 09:58:28.237970 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0313 09:58:28.238024 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-13 09:58:28.238015039 +0000 UTC m=+131.551273739 I0313 09:58:28.238098 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0313 09:58:28.239603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:58:28.239754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 09:58:28.239782 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-13 09:58:28.239774406 +0000 UTC m=+131.553033086 E0313 09:58:28.250611 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0313 09:58:28.250705 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" E0313 09:58:28.250760 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0313 09:58:28.250771 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-13 09:58:28.250748811 +0000 UTC m=+131.564007481 I0313 09:58:28.250798 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-13 09:58:28.250752062 +0000 UTC m=+131.564010752 I0313 09:58:28.250804 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0313 09:58:28.251028 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0313 09:58:28.273298 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:58:28.273455 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-13 09:58:28.273445352 +0000 UTC m=+131.586704012 I0313 09:58:28.403137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:58:28.410549 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-rr2zh" condition "Approved" to 2026-03-13 09:58:28.410536812 +0000 UTC m=+131.723795492 I0313 09:58:28.419313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:58:28.441956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-rr2zh" condition "Ready" to 2026-03-13 09:58:28.441943448 +0000 UTC m=+131.755202118 I0313 09:58:28.463335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-vsbn9" condition "Approved" to 2026-03-13 09:58:28.463320973 +0000 UTC m=+131.776579653 I0313 09:58:28.490767 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:58:28.490744901 +0000 UTC m=+131.804003571 I0313 09:58:28.509308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-vsbn9" condition "Ready" to 2026-03-13 09:58:28.509295421 +0000 UTC m=+131.822554091 I0313 09:58:28.512816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:58:28.513208 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:58:28.513199806 +0000 UTC m=+131.826458486 I0313 09:58:28.528180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:58:28.530713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:58:33.251825 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:58:33.251809538 +0000 UTC m=+136.565068238 I0313 09:58:33.266154 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-vsbn9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:58:33.266141435 +0000 UTC m=+136.579400105 I0313 09:58:33.301182 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:58:33.301163447 +0000 UTC m=+136.614422147 I0313 09:58:33.320468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:58:33.320858 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 09:58:33.320850417 +0000 UTC m=+136.634109127 I0313 09:58:33.328998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 09:58:33.341370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:10.093019 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:01:10.093096 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready" to 2026-03-13 10:01:10.093078638 +0000 UTC m=+293.406337308 I0313 10:01:10.093135 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Issuing" to 2026-03-13 10:01:10.093120209 +0000 UTC m=+293.406378909 I0313 10:01:10.111116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:10.111200 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-57.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:01:10.111225 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Issuing" to 2026-03-13 10:01:10.111215548 +0000 UTC m=+293.424474218 I0313 10:01:10.333522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-zkpzb" condition "Approved" to 2026-03-13 10:01:10.333498936 +0000 UTC m=+293.646757616 I0313 10:01:10.350785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-57.nip.io-tls-zkpzb" condition "Ready" to 2026-03-13 10:01:10.350769914 +0000 UTC m=+293.664028594 I0313 10:01:10.380096 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:01:10.38008192 +0000 UTC m=+293.693340600 I0313 10:01:10.399310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:10.399753 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-57.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:01:10.399742601 +0000 UTC m=+293.713001301 I0313 10:01:10.418743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:01:10.424037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-57.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-57.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:02:22.656235 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:02:22.656286 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-13 10:02:22.656275525 +0000 UTC m=+365.969534195 I0313 10:02:22.656509 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-13 10:02:22.65648196 +0000 UTC m=+365.969740660 E0313 10:02:22.669388 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 10:02:22.669463 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-13 10:02:22.669451922 +0000 UTC m=+365.982710602 E0313 10:02:22.669523 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0313 10:02:22.672978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:02:22.673313 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-13 10:02:22.673294593 +0000 UTC m=+365.986553303 E0313 10:02:22.682467 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0313 10:02:22.682649 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 10:02:22.682741 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0313 10:02:22.682828 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0313 10:02:22.689009 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:02:22.689123 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-13 10:02:22.68911173 +0000 UTC m=+366.002370420 I0313 10:02:22.695516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:02:22.695996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xdgqb" condition "Approved" to 2026-03-13 10:02:22.69597761 +0000 UTC m=+366.009236300 I0313 10:02:22.701634 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-13 10:02:22.701618919 +0000 UTC m=+366.014877599 I0313 10:02:22.713514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:02:22.714844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xdgqb" condition "Ready" to 2026-03-13 10:02:22.714825047 +0000 UTC m=+366.028083727 I0313 10:02:22.739710 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:02:22.739692692 +0000 UTC m=+366.052951372 I0313 10:02:22.757330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:02:27.683293 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:02:27.683277144 +0000 UTC m=+370.996535854 I0313 10:03:06.333511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:03:06.333560 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-13 10:03:06.333548119 +0000 UTC m=+409.646806809 I0313 10:03:06.334031 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-13 10:03:06.334023892 +0000 UTC m=+409.647282572 I0313 10:03:06.334586 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:03:06.334652 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-13 10:03:06.334645499 +0000 UTC m=+409.647904179 I0313 10:03:06.334809 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-13 10:03:06.334786633 +0000 UTC m=+409.648045303 I0313 10:03:06.337615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:03:06.337658 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-13 10:03:06.337651879 +0000 UTC m=+409.650910549 I0313 10:03:06.337258 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-13 10:03:06.337233008 +0000 UTC m=+409.650491688 I0313 10:03:06.375594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:06.375819 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:03:06.375862 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-13 10:03:06.375852874 +0000 UTC m=+409.689111564 I0313 10:03:06.378572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:06.378689 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-13 10:03:06.378677529 +0000 UTC m=+409.691936199 I0313 10:03:06.382631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:06.382730 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-13 10:03:06.382716978 +0000 UTC m=+409.695975658 I0313 10:03:06.538007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:06.557531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8dfbv" condition "Approved" to 2026-03-13 10:03:06.557504265 +0000 UTC m=+409.870762935 I0313 10:03:06.577738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:06.583509 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8dfbv" condition "Ready" to 2026-03-13 10:03:06.583495821 +0000 UTC m=+409.896754531 I0313 10:03:06.631236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jbpg6" condition "Approved" to 2026-03-13 10:03:06.631221181 +0000 UTC m=+409.944479861 I0313 10:03:06.673248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:03:06.673286 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-13 10:03:06.673277739 +0000 UTC m=+409.986536419 I0313 10:03:06.675180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-jbpg6" condition "Ready" to 2026-03-13 10:03:06.675159569 +0000 UTC m=+409.988418269 I0313 10:03:06.675302 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:03:06.675288933 +0000 UTC m=+409.988547603 I0313 10:03:06.708999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:06.717201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:06.722297 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:03:06.722283473 +0000 UTC m=+410.035542153 I0313 10:03:06.777736 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:06.930421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:07.232500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-w6txp" condition "Approved" to 2026-03-13 10:03:07.232472684 +0000 UTC m=+410.545731384 I0313 10:03:07.537902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-w6txp" condition "Ready" to 2026-03-13 10:03:07.537882903 +0000 UTC m=+410.851141573 I0313 10:03:07.675281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:07.877749 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:03:07.877723496 +0000 UTC m=+411.190982196 I0313 10:03:07.975331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:07.975742 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:03:07.975734044 +0000 UTC m=+411.288992734 I0313 10:03:08.176864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:14.943957 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls" condition "Ready" to 2026-03-13 10:03:14.94393846 +0000 UTC m=+418.257197140 I0313 10:03:14.944166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:03:14.944272 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls" condition "Issuing" to 2026-03-13 10:03:14.944258679 +0000 UTC m=+418.257517379 I0313 10:03:14.960372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:14.960478 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:03:14.960503 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls" condition "Issuing" to 2026-03-13 10:03:14.960492024 +0000 UTC m=+418.273750734 I0313 10:03:15.108870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:15.121679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vlxwr-dlw2k" condition "Approved" to 2026-03-13 10:03:15.121664816 +0000 UTC m=+418.434923486 I0313 10:03:15.149333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vlxwr-dlw2k" condition "Ready" to 2026-03-13 10:03:15.149317107 +0000 UTC m=+418.462575787 I0313 10:03:15.192069 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:03:15.192042523 +0000 UTC m=+418.505301193 I0313 10:03:15.218033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:15.218888 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:03:15.218861392 +0000 UTC m=+418.532120082 I0313 10:03:15.240521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vlxwr-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:40.261656 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-13 10:03:40.261626004 +0000 UTC m=+443.574884714 I0313 10:03:40.261787 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:03:40.261836 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-13 10:03:40.261823469 +0000 UTC m=+443.575082149 I0313 10:03:40.283943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:40.284033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:03:40.284056 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-13 10:03:40.284050845 +0000 UTC m=+443.597309515 I0313 10:03:40.441467 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qpr5r" condition "Approved" to 2026-03-13 10:03:40.441454256 +0000 UTC m=+443.754712926 I0313 10:03:40.467159 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qpr5r" condition "Ready" to 2026-03-13 10:03:40.467136984 +0000 UTC m=+443.780395694 I0313 10:03:40.507225 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:03:40.507203249 +0000 UTC m=+443.820461959 I0313 10:03:40.532767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:40.534402 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:03:40.534374846 +0000 UTC m=+443.847633526 I0313 10:03:40.554439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:03:40.555030 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:03:40.55501573 +0000 UTC m=+443.868274410 I0313 10:03:40.556193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:07:12.070375 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-13 10:07:12.070348872 +0000 UTC m=+655.383607552 I0313 10:07:12.070395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:07:12.070598 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-13 10:07:12.070579608 +0000 UTC m=+655.383838308 I0313 10:07:12.086446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:07:12.086522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:07:12.086541 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-13 10:07:12.086533171 +0000 UTC m=+655.399791851 I0313 10:07:12.217072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:07:12.226620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-r6tb6" condition "Approved" to 2026-03-13 10:07:12.226604488 +0000 UTC m=+655.539863158 I0313 10:07:12.253308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-r6tb6" condition "Ready" to 2026-03-13 10:07:12.253290531 +0000 UTC m=+655.566549241 I0313 10:07:12.285231 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:07:12.285206676 +0000 UTC m=+655.598465356 I0313 10:07:12.306851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:07:12.307325 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:07:12.307316526 +0000 UTC m=+655.620575206 I0313 10:07:12.327793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:07:12.329313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:07:12.329715 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:07:12.329703742 +0000 UTC m=+655.642962422 I0313 10:09:42.297461 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:09:42.297537 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-13 10:09:42.297527414 +0000 UTC m=+805.610786094 I0313 10:09:42.298203 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-13 10:09:42.298196803 +0000 UTC m=+805.611455483 I0313 10:09:42.318353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:09:42.318486 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-13 10:09:42.318472602 +0000 UTC m=+805.631731312 I0313 10:09:42.460793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:09:42.493968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jtdn5" condition "Approved" to 2026-03-13 10:09:42.493951723 +0000 UTC m=+805.807210403 I0313 10:09:42.518020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jtdn5" condition "Ready" to 2026-03-13 10:09:42.518007202 +0000 UTC m=+805.831265872 I0313 10:09:42.547740 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:09:42.547722674 +0000 UTC m=+805.860981344 I0313 10:09:42.567589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:09:42.623225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:10:52.895075 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:10:52.895148 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-13 10:10:52.895139898 +0000 UTC m=+876.208398568 I0313 10:10:52.895674 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-13 10:10:52.895669392 +0000 UTC m=+876.208928062 I0313 10:10:52.915014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:10:52.915112 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:10:52.915154 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-13 10:10:52.915143246 +0000 UTC m=+876.228401956 I0313 10:10:53.183990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bwfmb" condition "Approved" to 2026-03-13 10:10:53.183971069 +0000 UTC m=+876.497229769 I0313 10:10:53.205073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bwfmb" condition "Ready" to 2026-03-13 10:10:53.205057647 +0000 UTC m=+876.518316327 I0313 10:10:53.234859 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:10:53.234842329 +0000 UTC m=+876.548100999 I0313 10:10:53.257755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:10:53.258331 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:10:53.258319302 +0000 UTC m=+876.571578012 I0313 10:10:53.280124 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:14:02.933898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:14:02.934020 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-13 10:14:02.934011137 +0000 UTC m=+1066.247269807 I0313 10:14:02.934092 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-13 10:14:02.934039678 +0000 UTC m=+1066.247298388 I0313 10:14:02.949790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:14:02.949856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0313 10:14:02.949891 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-13 10:14:02.949883053 +0000 UTC m=+1066.263141723 I0313 10:14:03.085828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-285hc" condition "Approved" to 2026-03-13 10:14:03.085810171 +0000 UTC m=+1066.399068841 I0313 10:14:03.105926 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-285hc" condition "Ready" to 2026-03-13 10:14:03.10590999 +0000 UTC m=+1066.419168670 I0313 10:14:03.140946 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:14:03.14093023 +0000 UTC m=+1066.454188900 I0313 10:14:03.164077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:14:03.164672 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:14:03.164660277 +0000 UTC m=+1066.477918997 I0313 10:14:03.182465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0313 10:14:03.183113 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-13 10:14:03.183096351 +0000 UTC m=+1066.496355031