I0418 09:12:18.265938 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0418 09:12:18.266129 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0418 09:12:18.266307 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0418 09:12:18.272906 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0418 09:12:18.273455 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0418 09:12:18.273556 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0418 09:12:18.273647 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0418 09:12:18.276803 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0418 09:12:18.294271 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0418 09:12:18.298768 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0418 09:12:18.303288 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0418 09:12:18.307399 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0418 09:12:18.310143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0418 09:12:18.312848 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0418 09:12:18.314786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0418 09:12:18.316750 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0418 09:12:18.318699 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0418 09:12:18.323333 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0418 09:12:18.323393 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0418 09:12:18.325445 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0418 09:12:18.327278 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0418 09:12:18.327295 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0418 09:12:18.327346 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0418 09:12:18.329170 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0418 09:12:18.329186 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0418 09:12:18.329302 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0418 09:12:18.331153 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0418 09:12:18.333162 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0418 09:12:18.335512 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0418 09:12:18.338248 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0418 09:12:18.339881 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0418 09:12:18.339939 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0418 09:12:18.345329 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0418 09:12:18.347565 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:12:18.347948 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:12:18.348987 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:12:18.350061 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:12:18.363556 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:12:18.379943 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:12:18.404016 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:12:18.419094 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:12:18.441160 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:12:18.445920 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0418 09:12:29.679387 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-18 09:12:29.679359505 +0000 UTC m=+11.450986019 I0418 09:12:30.425581 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 09:12:30.425561774 +0000 UTC m=+12.197188288 I0418 09:12:30.425711 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:12:30.425821 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-18 09:12:30.425809138 +0000 UTC m=+12.197435662 I0418 09:12:30.444340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:30.444507 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-18 09:12:30.444470522 +0000 UTC m=+12.216097016 E0418 09:12:30.446617 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:12:30.446744 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-18 09:12:30.446737074 +0000 UTC m=+12.218363568 E0418 09:12:30.446866 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:12:30.464694 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0418 09:12:30.464808 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:12:30.464842 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:12:30.464865 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0418 09:12:30.467082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:30.492288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5gtbt" condition "Approved" to 2026-04-18 09:12:30.492277326 +0000 UTC m=+12.263903820 I0418 09:12:30.507329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-5gtbt" condition "Ready" to 2026-04-18 09:12:30.507300709 +0000 UTC m=+12.278927223 I0418 09:12:30.534247 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:12:30.534237649 +0000 UTC m=+12.305864163 I0418 09:12:30.553610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:30.554001 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:12:30.553992093 +0000 UTC m=+12.325618587 I0418 09:12:30.557439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:30.570964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:30.571604 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:12:30.571590625 +0000 UTC m=+12.343217139 I0418 09:12:35.466077 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:12:35.466045511 +0000 UTC m=+17.237672035 I0418 09:12:55.407821 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-18 09:12:55.407795172 +0000 UTC m=+37.179421686 I0418 09:12:55.408314 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:12:55.408353 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 09:12:55.408346712 +0000 UTC m=+37.179973226 I0418 09:12:55.450136 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-18 09:12:55.450115162 +0000 UTC m=+37.221741676 I0418 09:12:55.455836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:55.456022 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:12:55.456053 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-18 09:12:55.456047984 +0000 UTC m=+37.227674478 I0418 09:12:55.791069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:55.792711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jr9nw" condition "Approved" to 2026-04-18 09:12:55.792680839 +0000 UTC m=+37.564307353 I0418 09:12:55.904851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jr9nw" condition "Ready" to 2026-04-18 09:12:55.90483405 +0000 UTC m=+37.676460544 I0418 09:12:56.071320 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:12:56.071306248 +0000 UTC m=+37.842932732 I0418 09:12:56.093315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:56.093623 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:12:56.09361818 +0000 UTC m=+37.865244664 I0418 09:12:56.099754 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:56.117380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:56.117424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:12:56.117782 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:12:56.117771906 +0000 UTC m=+37.889398400 I0418 09:14:44.361539 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-18 09:14:44.361490646 +0000 UTC m=+146.133117160 I0418 09:14:44.361682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:14:44.361757 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-18 09:14:44.361743051 +0000 UTC m=+146.133369575 E0418 09:14:44.382955 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 09:14:44.383042 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-18 09:14:44.383029464 +0000 UTC m=+146.154655988 I0418 09:14:44.383106 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 09:14:44.384078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:44.384275 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:14:44.384363 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-18 09:14:44.384352209 +0000 UTC m=+146.155978733 E0418 09:14:44.395806 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0418 09:14:44.396005 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0418 09:14:44.396062 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0418 09:14:44.396211 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0418 09:14:44.396669 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:14:44.396683 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-18 09:14:44.396667212 +0000 UTC m=+146.168293716 I0418 09:14:44.396705 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-18 09:14:44.396698413 +0000 UTC m=+146.168324907 I0418 09:14:44.413484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:44.413672 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-18 09:14:44.413662543 +0000 UTC m=+146.185289037 I0418 09:14:44.614460 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:44.634448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-6pwqh" condition "Approved" to 2026-04-18 09:14:44.634429479 +0000 UTC m=+146.406055993 I0418 09:14:44.644800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:44.661477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-6pwqh" condition "Ready" to 2026-04-18 09:14:44.661464681 +0000 UTC m=+146.433091175 I0418 09:14:44.678074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-r5hc2" condition "Approved" to 2026-04-18 09:14:44.678058865 +0000 UTC m=+146.449685399 I0418 09:14:44.689109 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:44.689094243 +0000 UTC m=+146.460720737 I0418 09:14:44.696591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-r5hc2" condition "Ready" to 2026-04-18 09:14:44.696555785 +0000 UTC m=+146.468182279 I0418 09:14:44.709724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:44.710010 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:44.710002128 +0000 UTC m=+146.481628622 I0418 09:14:44.720883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:44.723666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:44.724098 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:44.724087125 +0000 UTC m=+146.495713629 I0418 09:14:44.724638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:49.397080 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:49.39706742 +0000 UTC m=+151.168693934 I0418 09:14:49.413912 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-r5hc2" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:49.413903789 +0000 UTC m=+151.185530263 I0418 09:14:49.438142 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:49.438130687 +0000 UTC m=+151.209757181 I0418 09:14:49.460286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:49.460628 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:49.460617482 +0000 UTC m=+151.232243986 I0418 09:14:49.478253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:14:49.478554 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:14:49.478544691 +0000 UTC m=+151.250171185 I0418 09:14:49.481184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:17:32.396921 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready" to 2026-04-18 09:17:32.396880353 +0000 UTC m=+314.168506847 I0418 09:17:32.397493 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:17:32.397516 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Issuing" to 2026-04-18 09:17:32.397511595 +0000 UTC m=+314.169138089 I0418 09:17:32.415169 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:17:32.415252 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-153.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:17:32.415271 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Issuing" to 2026-04-18 09:17:32.41526439 +0000 UTC m=+314.186890874 I0418 09:17:32.638784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-5q7p8" condition "Approved" to 2026-04-18 09:17:32.638770332 +0000 UTC m=+314.410396856 I0418 09:17:32.661177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-153.nip.io-tls-5q7p8" condition "Ready" to 2026-04-18 09:17:32.661162545 +0000 UTC m=+314.432789059 I0418 09:17:32.687410 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:17:32.687393451 +0000 UTC m=+314.459019955 I0418 09:17:32.711425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:17:32.711831 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:17:32.711822872 +0000 UTC m=+314.483449366 I0418 09:17:32.733076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:17:32.734957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-153.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-153.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:17:32.735459 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-153.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:17:32.735447468 +0000 UTC m=+314.507073992 I0418 09:18:43.990855 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 09:18:43.990841616 +0000 UTC m=+385.762468110 I0418 09:18:43.991310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:18:43.991330 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-18 09:18:43.991326705 +0000 UTC m=+385.762953199 E0418 09:18:44.006253 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:18:44.006436 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-18 09:18:44.006338538 +0000 UTC m=+385.777965052 E0418 09:18:44.006526 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0418 09:18:44.008617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:44.008668 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-18 09:18:44.008664333 +0000 UTC m=+385.780290827 E0418 09:18:44.017333 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0418 09:18:44.017443 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:18:44.017484 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0418 09:18:44.017527 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0418 09:18:44.023159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:44.044595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wjs4d" condition "Approved" to 2026-04-18 09:18:44.04457973 +0000 UTC m=+385.816206224 I0418 09:18:44.056942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-wjs4d" condition "Ready" to 2026-04-18 09:18:44.056930783 +0000 UTC m=+385.828557277 I0418 09:18:44.079324 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:18:44.079310006 +0000 UTC m=+385.850936500 I0418 09:18:44.105337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:44.156202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:18:49.017860 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:18:49.017845465 +0000 UTC m=+390.789471989 I0418 09:19:28.101540 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:19:28.101585 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 09:19:28.101572665 +0000 UTC m=+429.873199179 I0418 09:19:28.102696 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-18 09:19:28.102679855 +0000 UTC m=+429.874306349 I0418 09:19:28.103983 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-18 09:19:28.10397654 +0000 UTC m=+429.875603034 I0418 09:19:28.104192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:19:28.104237 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 09:19:28.104227745 +0000 UTC m=+429.875854239 I0418 09:19:28.104252 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 09:19:28.104247696 +0000 UTC m=+429.875874200 I0418 09:19:28.104479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:19:28.104500 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-18 09:19:28.10449655 +0000 UTC m=+429.876123054 I0418 09:19:28.133730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:28.133811 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:19:28.133829 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-18 09:19:28.133824344 +0000 UTC m=+429.905450818 I0418 09:19:28.134846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:28.134896 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-18 09:19:28.134893283 +0000 UTC m=+429.906519767 I0418 09:19:28.135920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:28.136001 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:19:28.136026 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 09:19:28.136019845 +0000 UTC m=+429.907646339 I0418 09:19:28.350083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fbv67" condition "Approved" to 2026-04-18 09:19:28.350065975 +0000 UTC m=+430.121692499 I0418 09:19:28.369590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fbv67" condition "Ready" to 2026-04-18 09:19:28.369580843 +0000 UTC m=+430.141207327 I0418 09:19:28.426075 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:19:28.426103 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-18 09:19:28.42609783 +0000 UTC m=+430.197724314 I0418 09:19:28.428279 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:19:28.428268791 +0000 UTC m=+430.199895275 I0418 09:19:28.445487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:28.446024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:28.446443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:28.446698 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:19:28.446691539 +0000 UTC m=+430.218318023 I0418 09:19:28.480541 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jkkxr" condition "Approved" to 2026-04-18 09:19:28.480526717 +0000 UTC m=+430.252153201 I0418 09:19:28.482848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9s6kn" condition "Approved" to 2026-04-18 09:19:28.482829411 +0000 UTC m=+430.254455925 I0418 09:19:28.497737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-jkkxr" condition "Ready" to 2026-04-18 09:19:28.497725523 +0000 UTC m=+430.269352017 I0418 09:19:28.500070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-9s6kn" condition "Ready" to 2026-04-18 09:19:28.500058186 +0000 UTC m=+430.271684710 I0418 09:19:29.298552 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:19:29.298535299 +0000 UTC m=+431.070161823 I0418 09:19:29.447902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:29.448308 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:19:29.448301566 +0000 UTC m=+431.219928060 I0418 09:19:29.499069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:29.574923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xlqwn" condition "Approved" to 2026-04-18 09:19:29.574909595 +0000 UTC m=+431.346536109 I0418 09:19:30.167543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-xlqwn" condition "Ready" to 2026-04-18 09:19:30.167532911 +0000 UTC m=+431.939159405 I0418 09:19:30.293676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:30.344080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:30.601060 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:19:30.601049795 +0000 UTC m=+432.372676279 I0418 09:19:30.691803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:30.993753 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:41.529990 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:19:41.530024 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls" condition "Issuing" to 2026-04-18 09:19:41.530016615 +0000 UTC m=+443.301643109 I0418 09:19:41.530534 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls" condition "Ready" to 2026-04-18 09:19:41.530528076 +0000 UTC m=+443.302154570 I0418 09:19:41.552930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:41.553042 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls" condition "Ready" to 2026-04-18 09:19:41.5530342 +0000 UTC m=+443.324660704 I0418 09:19:41.665280 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:42.323043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8vn7v-ghcl7" condition "Approved" to 2026-04-18 09:19:42.322999417 +0000 UTC m=+444.094625941 I0418 09:19:42.350170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8vn7v-ghcl7" condition "Ready" to 2026-04-18 09:19:42.350148949 +0000 UTC m=+444.121775473 I0418 09:19:42.389345 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:19:42.389327789 +0000 UTC m=+444.160954303 I0418 09:19:42.413235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:42.413529 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:19:42.413523756 +0000 UTC m=+444.185150230 I0418 09:19:42.429215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:42.435347 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:19:42.435600 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8vn7v-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:19:42.435593922 +0000 UTC m=+444.207220406 I0418 09:20:23.611425 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-18 09:20:23.611399928 +0000 UTC m=+485.383026452 I0418 09:20:23.611815 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:20:23.611898 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 09:20:23.611854477 +0000 UTC m=+485.383480991 I0418 09:20:23.630077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:23.630331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:20:23.630374 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-18 09:20:23.630364056 +0000 UTC m=+485.401990590 I0418 09:20:24.110752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zbmgt" condition "Approved" to 2026-04-18 09:20:24.110733825 +0000 UTC m=+485.882360319 I0418 09:20:24.126274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zbmgt" condition "Ready" to 2026-04-18 09:20:24.126260868 +0000 UTC m=+485.897887372 I0418 09:20:24.157775 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:20:24.157753763 +0000 UTC m=+485.929380247 I0418 09:20:24.208777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:20:24.209070 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:20:24.209064872 +0000 UTC m=+485.980691356 I0418 09:20:24.234632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:23:42.392811 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 09:23:42.392766525 +0000 UTC m=+684.164393039 I0418 09:23:42.392859 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:23:42.392894 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-18 09:23:42.392885608 +0000 UTC m=+684.164512102 I0418 09:23:42.408237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:23:42.408391 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-18 09:23:42.40838039 +0000 UTC m=+684.180006904 I0418 09:23:42.474792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:23:42.504889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-glmjh" condition "Approved" to 2026-04-18 09:23:42.504877412 +0000 UTC m=+684.276503906 I0418 09:23:42.525947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-glmjh" condition "Ready" to 2026-04-18 09:23:42.525935809 +0000 UTC m=+684.297562293 I0418 09:23:42.552566 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:23:42.552556282 +0000 UTC m=+684.324182776 I0418 09:23:42.575308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:23:42.575675 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:23:42.575667119 +0000 UTC m=+684.347293613 I0418 09:23:42.594783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:23:42.595064 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:23:42.595056795 +0000 UTC m=+684.366683289 I0418 09:26:07.768657 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:26:07.768710 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-18 09:26:07.768672338 +0000 UTC m=+829.540298832 I0418 09:26:07.768767 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-18 09:26:07.76875919 +0000 UTC m=+829.540385684 I0418 09:26:07.784974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:26:07.785096 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-18 09:26:07.785085648 +0000 UTC m=+829.556712162 I0418 09:26:07.989158 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:26:08.020389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-xl9fg" condition "Approved" to 2026-04-18 09:26:08.020368283 +0000 UTC m=+829.791994807 I0418 09:26:08.036641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-xl9fg" condition "Ready" to 2026-04-18 09:26:08.03662491 +0000 UTC m=+829.808251394 I0418 09:26:08.064417 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:26:08.064404155 +0000 UTC m=+829.836030649 I0418 09:26:08.093763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:27:24.455314 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:27:24.455373 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-18 09:27:24.455363238 +0000 UTC m=+906.226989752 I0418 09:27:24.455710 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-18 09:27:24.455693034 +0000 UTC m=+906.227319528 I0418 09:27:24.474728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:27:24.474882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:27:24.474920 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-18 09:27:24.474908796 +0000 UTC m=+906.246535310 I0418 09:27:24.674115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-q25sc" condition "Approved" to 2026-04-18 09:27:24.674103506 +0000 UTC m=+906.445729990 I0418 09:27:24.694124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-q25sc" condition "Ready" to 2026-04-18 09:27:24.694109474 +0000 UTC m=+906.465735968 I0418 09:27:24.722902 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:27:24.722886065 +0000 UTC m=+906.494512549 I0418 09:27:24.741925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:27:24.742240 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:27:24.742231929 +0000 UTC m=+906.513858423 I0418 09:27:24.762294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:27:24.763558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:30:23.227034 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0418 09:30:23.227139 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-18 09:30:23.22712678 +0000 UTC m=+1084.998753304 I0418 09:30:23.227101 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-18 09:30:23.226933277 +0000 UTC m=+1084.998559791 I0418 09:30:23.243783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:30:23.243907 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-18 09:30:23.243895106 +0000 UTC m=+1085.015521620 I0418 09:30:23.439302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0418 09:30:23.477200 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-kzzn2" condition "Approved" to 2026-04-18 09:30:23.477180959 +0000 UTC m=+1085.248807453 I0418 09:30:23.493603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-kzzn2" condition "Ready" to 2026-04-18 09:30:23.493586737 +0000 UTC m=+1085.265213241 I0418 09:30:23.519345 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-18 09:30:23.519331612 +0000 UTC m=+1085.290958106 I0418 09:30:23.550580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"