I0327 01:58:29.189434 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0327 01:58:29.189564 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0327 01:58:29.189625 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0327 01:58:29.196048 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0327 01:58:29.196827 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0327 01:58:29.196880 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0327 01:58:29.197093 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0327 01:58:29.199907 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0327 01:58:29.213285 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0327 01:58:29.217725 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0327 01:58:29.220459 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0327 01:58:29.225854 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0327 01:58:29.228506 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0327 01:58:29.230405 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0327 01:58:29.232283 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0327 01:58:29.233952 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0327 01:58:29.235764 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0327 01:58:29.238401 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0327 01:58:29.238477 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0327 01:58:29.238644 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0327 01:58:29.245186 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0327 01:58:29.247384 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0327 01:58:29.247406 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0327 01:58:29.247409 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0327 01:58:29.247415 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0327 01:58:29.249824 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0327 01:58:29.251471 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0327 01:58:29.253083 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0327 01:58:29.254773 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0327 01:58:29.256569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0327 01:58:29.258114 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0327 01:58:29.258298 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0327 01:58:29.264368 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0327 01:58:29.267305 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:29.267469 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:29.268065 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:29.268739 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:29.284306 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:29.302869 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:29.314614 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:29.330361 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:29.349506 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:29.367608 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0327 01:58:40.279007 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-27 01:58:40.278994583 +0000 UTC m=+11.127346325 I0327 01:58:40.978729 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-27 01:58:40.978715297 +0000 UTC m=+11.827067059 I0327 01:58:40.978888 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 01:58:40.979006 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-27 01:58:40.978993285 +0000 UTC m=+11.827345057 E0327 01:58:41.000126 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0327 01:58:41.000201 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-27 01:58:41.000194016 +0000 UTC m=+11.848545758 E0327 01:58:41.000228 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0327 01:58:41.002857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:58:41.002975 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 01:58:41.003010 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-27 01:58:41.002998433 +0000 UTC m=+11.851350225 E0327 01:58:41.012336 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0327 01:58:41.012443 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 01:58:41.012477 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 01:58:41.012518 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0327 01:58:41.035979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:58:41.040919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jvv9h" condition "Approved" to 2026-03-27 01:58:41.040909153 +0000 UTC m=+11.889260895 I0327 01:58:41.054328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jvv9h" condition "Ready" to 2026-03-27 01:58:41.054314371 +0000 UTC m=+11.902666113 I0327 01:58:41.078414 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:58:41.078400842 +0000 UTC m=+11.926752604 I0327 01:58:41.096792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:58:41.097338 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:58:41.097327221 +0000 UTC m=+11.945678983 I0327 01:58:41.103541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:58:41.112785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:58:41.112979 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:58:41.11297201 +0000 UTC m=+11.961323752 I0327 01:58:46.013722 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:58:46.01370476 +0000 UTC m=+16.862056532 I0327 01:59:08.983626 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 01:59:08.983681 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-27 01:59:08.983670141 +0000 UTC m=+39.832021913 I0327 01:59:08.984169 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-27 01:59:08.984160985 +0000 UTC m=+39.832512747 I0327 01:59:08.995065 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-27 01:59:08.995049827 +0000 UTC m=+39.843401569 I0327 01:59:09.004128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:59:09.005209 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 01:59:09.005289 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-27 01:59:09.00525252 +0000 UTC m=+39.853604262 I0327 01:59:09.140245 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:59:09.151727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wtpsq" condition "Approved" to 2026-03-27 01:59:09.151713356 +0000 UTC m=+40.000065128 I0327 01:59:09.183697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wtpsq" condition "Ready" to 2026-03-27 01:59:09.183681763 +0000 UTC m=+40.032033525 I0327 01:59:09.212297 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:59:09.212282277 +0000 UTC m=+40.060634049 I0327 01:59:09.236882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:59:09.237295 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:59:09.237287041 +0000 UTC m=+40.085638783 I0327 01:59:09.258452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0327 01:59:09.259712 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 01:59:09.259703713 +0000 UTC m=+40.108055465 I0327 02:00:56.539867 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:00:56.539910 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-27 02:00:56.539899685 +0000 UTC m=+147.388251447 I0327 02:00:56.540438 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-27 02:00:56.540412289 +0000 UTC m=+147.388764071 E0327 02:00:56.553240 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0327 02:00:56.553497 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-27 02:00:56.553484419 +0000 UTC m=+147.401836181 I0327 02:00:56.553582 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0327 02:00:56.556301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:00:56.556387 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-27 02:00:56.556379408 +0000 UTC m=+147.404731140 E0327 02:00:56.563788 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0327 02:00:56.563897 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0327 02:00:56.563938 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0327 02:00:56.563980 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0327 02:00:56.564651 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:00:56.564693 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-27 02:00:56.564682047 +0000 UTC m=+147.413033809 I0327 02:00:56.564687 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-27 02:00:56.564668867 +0000 UTC m=+147.413020699 I0327 02:00:56.580103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:00:56.580178 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:00:56.580203 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-27 02:00:56.580196874 +0000 UTC m=+147.428548616 I0327 02:00:56.694885 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:00:56.728691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-22n52" condition "Approved" to 2026-03-27 02:00:56.728675413 +0000 UTC m=+147.577027185 I0327 02:00:56.755795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-22n52" condition "Ready" to 2026-03-27 02:00:56.755785119 +0000 UTC m=+147.604136861 I0327 02:00:56.782379 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:00:56.782361141 +0000 UTC m=+147.630712913 I0327 02:00:56.803043 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:00:56.803717 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:00:56.803707299 +0000 UTC m=+147.652059071 I0327 02:00:56.821314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:00:56.828581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:00:56.953878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-9dpvr" condition "Approved" to 2026-03-27 02:00:56.953862244 +0000 UTC m=+147.802214006 I0327 02:00:56.972907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-9dpvr" condition "Ready" to 2026-03-27 02:00:56.972894018 +0000 UTC m=+147.821245760 I0327 02:01:01.564957 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:01.564935581 +0000 UTC m=+152.413287353 I0327 02:01:01.585430 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-9dpvr" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:01.585411115 +0000 UTC m=+152.433762877 I0327 02:01:01.612349 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:01.612334736 +0000 UTC m=+152.460686498 I0327 02:01:01.632335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:01.632760 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:01.632751458 +0000 UTC m=+152.481103210 I0327 02:01:01.655335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:01:01.655611 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:01:01.655603407 +0000 UTC m=+152.503955139 I0327 02:03:32.285899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:03:32.285955 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Issuing" to 2026-03-27 02:03:32.285948856 +0000 UTC m=+303.134300598 I0327 02:03:32.286069 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready" to 2026-03-27 02:03:32.286059029 +0000 UTC m=+303.134410751 I0327 02:03:32.302227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:03:32.302277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-162.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:03:32.302290 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Issuing" to 2026-03-27 02:03:32.302284277 +0000 UTC m=+303.150636019 I0327 02:03:32.536434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:03:32.546947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-9p26q" condition "Approved" to 2026-03-27 02:03:32.546938526 +0000 UTC m=+303.395290288 I0327 02:03:32.564345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-162.nip.io-tls-9p26q" condition "Ready" to 2026-03-27 02:03:32.564336606 +0000 UTC m=+303.412688348 I0327 02:03:32.591815 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:03:32.591804124 +0000 UTC m=+303.440155866 I0327 02:03:32.619470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:03:32.619803 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-162.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:03:32.619797106 +0000 UTC m=+303.468148858 I0327 02:03:32.636380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-162.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-162.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:04:43.234354 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:04:43.234394 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-27 02:04:43.234384744 +0000 UTC m=+374.082736496 I0327 02:04:43.234519 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-27 02:04:43.234500147 +0000 UTC m=+374.082851930 E0327 02:04:43.247529 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0327 02:04:43.247569 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-27 02:04:43.247561498 +0000 UTC m=+374.095913240 E0327 02:04:43.247615 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0327 02:04:43.250611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:04:43.250695 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-27 02:04:43.250685884 +0000 UTC m=+374.099037656 E0327 02:04:43.265654 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0327 02:04:43.265894 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 02:04:43.265965 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0327 02:04:43.266050 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0327 02:04:43.269084 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:04:43.291759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5fdxc" condition "Approved" to 2026-03-27 02:04:43.291748078 +0000 UTC m=+374.140099850 I0327 02:04:43.308026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-5fdxc" condition "Ready" to 2026-03-27 02:04:43.308013637 +0000 UTC m=+374.156365379 I0327 02:04:43.331076 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:04:43.331053463 +0000 UTC m=+374.179405235 I0327 02:04:43.346720 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:04:43.347036 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:04:43.347025143 +0000 UTC m=+374.195376885 I0327 02:04:43.364733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:04:48.266227 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:04:48.266213846 +0000 UTC m=+379.114565618 I0327 02:05:25.453753 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-27 02:05:25.453739716 +0000 UTC m=+416.302091448 I0327 02:05:25.457804 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:25.457838 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-27 02:05:25.45783263 +0000 UTC m=+416.306184362 I0327 02:05:25.467869 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:25.467899 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-27 02:05:25.467893772 +0000 UTC m=+416.316245504 I0327 02:05:25.468239 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-27 02:05:25.468235212 +0000 UTC m=+416.316586944 I0327 02:05:25.468573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:25.468636 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-27 02:05:25.468600862 +0000 UTC m=+416.316952624 I0327 02:05:25.468767 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-27 02:05:25.468763677 +0000 UTC m=+416.317115409 I0327 02:05:25.529839 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:25.529856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:25.529897 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-27 02:05:25.529891071 +0000 UTC m=+416.378242803 I0327 02:05:25.529915 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-27 02:05:25.529906101 +0000 UTC m=+416.378257833 I0327 02:05:25.537249 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:25.537318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:25.537356 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-27 02:05:25.53734309 +0000 UTC m=+416.385694822 I0327 02:05:25.648254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:25.663211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:25.688999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-svp6m" condition "Approved" to 2026-03-27 02:05:25.688985692 +0000 UTC m=+416.537337454 I0327 02:05:25.714540 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mjdh4" condition "Approved" to 2026-03-27 02:05:25.714519558 +0000 UTC m=+416.562871330 I0327 02:05:25.726029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-svp6m" condition "Ready" to 2026-03-27 02:05:25.726020451 +0000 UTC m=+416.574372183 I0327 02:05:25.738514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mjdh4" condition "Ready" to 2026-03-27 02:05:25.738496401 +0000 UTC m=+416.586848173 I0327 02:05:25.763291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2cx6g" condition "Approved" to 2026-03-27 02:05:25.763272455 +0000 UTC m=+416.611624197 I0327 02:05:25.770053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:25.770097 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-27 02:05:25.770089236 +0000 UTC m=+416.618440968 I0327 02:05:25.786060 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:25.786050544 +0000 UTC m=+416.634402276 I0327 02:05:25.786088 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:25.786071934 +0000 UTC m=+416.634423676 I0327 02:05:25.799089 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-2cx6g" condition "Ready" to 2026-03-27 02:05:25.799069969 +0000 UTC m=+416.647421701 I0327 02:05:26.297645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:26.298034 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:26.298025061 +0000 UTC m=+417.146376823 I0327 02:05:26.344604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:26.344857 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:26.344850314 +0000 UTC m=+417.193202046 I0327 02:05:26.706783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tnwkc" condition "Approved" to 2026-03-27 02:05:26.706750582 +0000 UTC m=+417.555102344 I0327 02:05:26.755209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:26.939056 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:26.939043156 +0000 UTC m=+417.787394898 I0327 02:05:26.947966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:26.948195 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:26.948184322 +0000 UTC m=+417.796536054 I0327 02:05:27.282582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tnwkc" condition "Ready" to 2026-03-27 02:05:27.282570639 +0000 UTC m=+418.130922371 I0327 02:05:27.396794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:27.547449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:27.547814 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:27.547806596 +0000 UTC m=+418.396158338 E0327 02:05:27.793621 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-9ljl6\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0327 02:05:28.134498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:28.158800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:28.395325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:34.494708 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:34.494759 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls" condition "Issuing" to 2026-03-27 02:05:34.494747819 +0000 UTC m=+425.343099591 I0327 02:05:34.494748 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls" condition "Ready" to 2026-03-27 02:05:34.494728429 +0000 UTC m=+425.343080191 I0327 02:05:34.515339 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:34.515446 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls" condition "Ready" to 2026-03-27 02:05:34.515435729 +0000 UTC m=+425.363787491 I0327 02:05:34.575238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:34.604978 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wtx2g-p8524" condition "Approved" to 2026-03-27 02:05:34.604956888 +0000 UTC m=+425.453308680 I0327 02:05:34.627983 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wtx2g-p8524" condition "Ready" to 2026-03-27 02:05:34.627971734 +0000 UTC m=+425.476323476 I0327 02:05:34.654819 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:34.654806826 +0000 UTC m=+425.503158568 I0327 02:05:34.675754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:34.676212 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:34.676205267 +0000 UTC m=+425.524556999 I0327 02:05:34.702086 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:34.702646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wtx2g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:58.968562 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-27 02:05:58.96854768 +0000 UTC m=+449.816899422 I0327 02:05:58.968592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:05:58.968625 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-27 02:05:58.968614891 +0000 UTC m=+449.816966663 I0327 02:05:58.987250 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:58.987313 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-27 02:05:58.987307246 +0000 UTC m=+449.835658978 I0327 02:05:59.073562 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:59.220708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5gc7g" condition "Approved" to 2026-03-27 02:05:59.2206965 +0000 UTC m=+450.069048222 I0327 02:05:59.241433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5gc7g" condition "Ready" to 2026-03-27 02:05:59.241419571 +0000 UTC m=+450.089771343 I0327 02:05:59.276013 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:59.275997221 +0000 UTC m=+450.124348993 I0327 02:05:59.296099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:59.296423 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:59.296416443 +0000 UTC m=+450.144768185 I0327 02:05:59.315851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:05:59.316123 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:05:59.316114356 +0000 UTC m=+450.164466098 I0327 02:09:32.699058 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-27 02:09:32.69904294 +0000 UTC m=+663.547394712 I0327 02:09:32.699153 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:09:32.699311 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-27 02:09:32.699300787 +0000 UTC m=+663.547652549 I0327 02:09:32.719292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:09:32.719555 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:09:32.719607 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-27 02:09:32.719593584 +0000 UTC m=+663.567945356 I0327 02:09:33.035431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:09:33.049239 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5t9sg" condition "Approved" to 2026-03-27 02:09:33.049223427 +0000 UTC m=+663.897575169 I0327 02:09:33.067666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5t9sg" condition "Ready" to 2026-03-27 02:09:33.067647593 +0000 UTC m=+663.915999335 I0327 02:09:33.093358 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:09:33.093349718 +0000 UTC m=+663.941701450 I0327 02:09:33.123651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:09:33.124109 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:09:33.124096872 +0000 UTC m=+663.972448644 I0327 02:09:33.138948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:09:33.139362 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:09:33.13935355 +0000 UTC m=+663.987705312 I0327 02:11:59.933130 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-27 02:11:59.933110347 +0000 UTC m=+810.781462119 I0327 02:11:59.933222 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:11:59.933319 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-27 02:11:59.933308853 +0000 UTC m=+810.781660615 I0327 02:11:59.959873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:11:59.959926 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:11:59.959952 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-27 02:11:59.959938639 +0000 UTC m=+810.808290371 I0327 02:12:00.198295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:00.206442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jjlcn" condition "Approved" to 2026-03-27 02:12:00.206425536 +0000 UTC m=+811.054777308 I0327 02:12:00.224260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jjlcn" condition "Ready" to 2026-03-27 02:12:00.224248812 +0000 UTC m=+811.072600554 I0327 02:12:00.262941 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:12:00.262927258 +0000 UTC m=+811.111279020 I0327 02:12:00.281199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:12:00.281595 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:12:00.281587377 +0000 UTC m=+811.129939119 I0327 02:12:00.305053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:13:19.574121 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:13:19.574277 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-27 02:13:19.574262406 +0000 UTC m=+890.422614178 I0327 02:13:19.574568 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-27 02:13:19.574552254 +0000 UTC m=+890.422903996 I0327 02:13:19.590620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:13:19.590803 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-27 02:13:19.590691686 +0000 UTC m=+890.439043458 I0327 02:13:19.888087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:13:19.928271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9bsjq" condition "Approved" to 2026-03-27 02:13:19.928249524 +0000 UTC m=+890.776601326 I0327 02:13:19.948253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-9bsjq" condition "Ready" to 2026-03-27 02:13:19.948239931 +0000 UTC m=+890.796591673 I0327 02:13:19.983630 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:13:19.98360684 +0000 UTC m=+890.831958582 I0327 02:13:20.004515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:13:20.004855 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:13:20.004845042 +0000 UTC m=+890.853196774 I0327 02:13:20.027962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:13:20.030033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:16:28.006084 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-27 02:16:28.006069063 +0000 UTC m=+1078.854420805 I0327 02:16:28.006364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0327 02:16:28.006432 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-27 02:16:28.006424023 +0000 UTC m=+1078.854775785 I0327 02:16:28.025864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:16:28.025985 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-27 02:16:28.025974909 +0000 UTC m=+1078.874326671 I0327 02:16:28.408416 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:16:28.440381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-dl2ct" condition "Approved" to 2026-03-27 02:16:28.440371354 +0000 UTC m=+1079.288723087 I0327 02:16:28.458270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-dl2ct" condition "Ready" to 2026-03-27 02:16:28.458260223 +0000 UTC m=+1079.306611965 I0327 02:16:28.493115 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:16:28.493100943 +0000 UTC m=+1079.341452705 I0327 02:16:28.518704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:16:28.519150 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-27 02:16:28.519143353 +0000 UTC m=+1079.367495095 I0327 02:16:28.543519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0327 02:16:28.554310 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"