I0329 01:56:27.036874 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0329 01:56:27.037003 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0329 01:56:27.037115 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0329 01:56:27.044211 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0329 01:56:27.044794 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0329 01:56:27.045022 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0329 01:56:27.045055 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0329 01:56:27.048500 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0329 01:56:27.063511 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0329 01:56:27.069534 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0329 01:56:27.073082 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0329 01:56:27.073157 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0329 01:56:27.073166 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0329 01:56:27.073176 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0329 01:56:27.078036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0329 01:56:27.080772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0329 01:56:27.082762 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0329 01:56:27.084732 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0329 01:56:27.086869 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0329 01:56:27.088724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0329 01:56:27.090469 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0329 01:56:27.090565 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0329 01:56:27.093136 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0329 01:56:27.093280 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0329 01:56:27.099371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0329 01:56:27.103500 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0329 01:56:27.107452 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0329 01:56:27.109501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0329 01:56:27.111414 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0329 01:56:27.113331 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0329 01:56:27.115176 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0329 01:56:27.115253 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0329 01:56:27.117081 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0329 01:56:27.122070 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:27.122326 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:27.124990 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:27.125901 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:27.125945 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:27.126118 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:27.126327 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:27.126365 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:27.126524 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:27.220436 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0329 01:56:37.145568 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-03-29 01:56:37.145551187 +0000 UTC m=+10.141336288 I0329 01:56:37.883780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:56:37.883815 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-03-29 01:56:37.883807817 +0000 UTC m=+10.879592888 I0329 01:56:37.883877 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-29 01:56:37.883866838 +0000 UTC m=+10.879651939 E0329 01:56:37.898105 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0329 01:56:37.898156 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-03-29 01:56:37.898148346 +0000 UTC m=+10.893933417 E0329 01:56:37.898203 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0329 01:56:37.900167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:56:37.900227 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-03-29 01:56:37.90021974 +0000 UTC m=+10.896004811 E0329 01:56:37.910889 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0329 01:56:37.911061 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 01:56:37.911123 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 01:56:37.911190 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0329 01:56:37.920940 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:56:37.946163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g78mk" condition "Approved" to 2026-03-29 01:56:37.946150159 +0000 UTC m=+10.941935260 I0329 01:56:37.961202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-g78mk" condition "Ready" to 2026-03-29 01:56:37.961177073 +0000 UTC m=+10.956962174 I0329 01:56:37.981082 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:56:37.98106867 +0000 UTC m=+10.976853741 I0329 01:56:37.997561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:56:37.998050 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:56:37.998039094 +0000 UTC m=+10.993824195 I0329 01:56:38.013993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:56:38.014788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:56:42.912208 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:56:42.912193391 +0000 UTC m=+15.907978482 I0329 01:57:03.838741 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:57:03.838811 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-29 01:57:03.838803159 +0000 UTC m=+36.834588230 I0329 01:57:03.839176 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-03-29 01:57:03.839168937 +0000 UTC m=+36.834954018 I0329 01:57:03.852579 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-03-29 01:57:03.852561347 +0000 UTC m=+36.848346418 I0329 01:57:03.868293 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:57:03.868399 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:57:03.868445 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-03-29 01:57:03.86843468 +0000 UTC m=+36.864219771 I0329 01:57:04.161993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:57:04.171283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sjrp2" condition "Approved" to 2026-03-29 01:57:04.171275545 +0000 UTC m=+37.167060616 I0329 01:57:04.201247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-sjrp2" condition "Ready" to 2026-03-29 01:57:04.201230671 +0000 UTC m=+37.197015742 I0329 01:57:04.233030 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:57:04.233016537 +0000 UTC m=+37.228801608 I0329 01:57:04.255499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:57:04.255877 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:57:04.255865275 +0000 UTC m=+37.251650346 I0329 01:57:04.265952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:57:04.276152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:38.098308 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-03-29 01:58:38.098260019 +0000 UTC m=+131.094045110 I0329 01:58:38.098568 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:58:38.098647 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-29 01:58:38.098630877 +0000 UTC m=+131.094415968 E0329 01:58:38.114452 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0329 01:58:38.114518 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-03-29 01:58:38.1145062 +0000 UTC m=+131.110291261 I0329 01:58:38.114565 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0329 01:58:38.118641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:38.119012 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:58:38.119035 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-03-29 01:58:38.119027825 +0000 UTC m=+131.114812896 E0329 01:58:38.128324 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0329 01:58:38.128849 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-03-29 01:58:38.128773831 +0000 UTC m=+131.124558932 I0329 01:58:38.128948 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" E0329 01:58:38.128961 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0329 01:58:38.129002 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-29 01:58:38.128992836 +0000 UTC m=+131.124777927 I0329 01:58:38.129037 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0329 01:58:38.129125 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0329 01:58:38.146308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:38.146408 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 01:58:38.146442 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-03-29 01:58:38.146433932 +0000 UTC m=+131.142219003 I0329 01:58:38.224915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:38.231824 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gh2wr" condition "Approved" to 2026-03-29 01:58:38.231807369 +0000 UTC m=+131.227592440 I0329 01:58:38.269962 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gh2wr" condition "Ready" to 2026-03-29 01:58:38.269939522 +0000 UTC m=+131.265724623 I0329 01:58:38.301709 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:58:38.30168937 +0000 UTC m=+131.297474471 I0329 01:58:38.317798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:38.318200 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:58:38.318189147 +0000 UTC m=+131.313974218 I0329 01:58:38.331117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-5bvjg" condition "Approved" to 2026-03-29 01:58:38.331085829 +0000 UTC m=+131.326870900 I0329 01:58:38.337014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:38.352580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-5bvjg" condition "Ready" to 2026-03-29 01:58:38.352563581 +0000 UTC m=+131.348348682 I0329 01:58:43.129762 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:58:43.129747715 +0000 UTC m=+136.125532816 I0329 01:58:43.145825 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-5bvjg" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:58:43.145810883 +0000 UTC m=+136.141595974 I0329 01:58:43.176998 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:58:43.17698401 +0000 UTC m=+136.172769081 I0329 01:58:43.195320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:43.195709 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:58:43.195702503 +0000 UTC m=+136.191487594 I0329 01:58:43.211649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:43.212481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0329 01:58:43.212755 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 01:58:43.212747282 +0000 UTC m=+136.208532353 I0329 02:01:16.029822 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-246.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:01:16.029859 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Issuing" to 2026-03-29 02:01:16.0298525 +0000 UTC m=+289.025637571 I0329 02:01:16.029901 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-03-29 02:01:16.02987237 +0000 UTC m=+289.025657471 I0329 02:01:16.045847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:01:16.045921 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready" to 2026-03-29 02:01:16.045913359 +0000 UTC m=+289.041698460 I0329 02:01:16.329528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:01:16.358274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-rlq82" condition "Approved" to 2026-03-29 02:01:16.358255414 +0000 UTC m=+289.354040525 I0329 02:01:16.376064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-246.nip.io-tls-rlq82" condition "Ready" to 2026-03-29 02:01:16.37605296 +0000 UTC m=+289.371838031 I0329 02:01:16.431217 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-246.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:01:16.431201981 +0000 UTC m=+289.426987042 I0329 02:01:16.449583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-246.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-246.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:02:26.599611 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:02:26.599660 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-29 02:02:26.599650883 +0000 UTC m=+359.595435944 I0329 02:02:26.599676 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-03-29 02:02:26.599669803 +0000 UTC m=+359.595454864 E0329 02:02:26.613815 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0329 02:02:26.613897 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-03-29 02:02:26.613881703 +0000 UTC m=+359.609666804 E0329 02:02:26.613981 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0329 02:02:26.616822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:02:26.616895 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:02:26.616919 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-03-29 02:02:26.616911137 +0000 UTC m=+359.612696208 E0329 02:02:26.624015 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0329 02:02:26.624200 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 02:02:26.624256 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0329 02:02:26.624311 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0329 02:02:26.655783 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xp4f6" condition "Approved" to 2026-03-29 02:02:26.655755644 +0000 UTC m=+359.651540745 I0329 02:02:26.670337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xp4f6" condition "Ready" to 2026-03-29 02:02:26.670321141 +0000 UTC m=+359.666106212 I0329 02:02:26.690983 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:02:26.690963406 +0000 UTC m=+359.686748497 I0329 02:02:26.708248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:02:26.748529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:02:31.624458 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:02:31.624440541 +0000 UTC m=+364.620225642 I0329 02:03:09.352024 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:09.352119 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-03-29 02:03:09.352107711 +0000 UTC m=+402.347892772 I0329 02:03:09.352568 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-29 02:03:09.352562801 +0000 UTC m=+402.348347852 I0329 02:03:09.358867 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-29 02:03:09.358850303 +0000 UTC m=+402.354635364 I0329 02:03:09.359274 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:09.359316 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-03-29 02:03:09.359313342 +0000 UTC m=+402.355098403 I0329 02:03:09.360455 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-29 02:03:09.360441697 +0000 UTC m=+402.356226758 I0329 02:03:09.361774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:09.361829 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-03-29 02:03:09.361818485 +0000 UTC m=+402.357603546 I0329 02:03:09.385236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:09.385394 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-03-29 02:03:09.385372402 +0000 UTC m=+402.381157463 I0329 02:03:09.396317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:09.396427 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-03-29 02:03:09.396416843 +0000 UTC m=+402.392201904 I0329 02:03:09.408934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:09.409006 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-03-29 02:03:09.408998589 +0000 UTC m=+402.404783660 I0329 02:03:09.514902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:09.548539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6tn4h" condition "Approved" to 2026-03-29 02:03:09.548515546 +0000 UTC m=+402.544300637 I0329 02:03:09.567111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6tn4h" condition "Ready" to 2026-03-29 02:03:09.567096427 +0000 UTC m=+402.562881488 I0329 02:03:09.567441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:09.612058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bctrk" condition "Approved" to 2026-03-29 02:03:09.612039873 +0000 UTC m=+402.607824944 I0329 02:03:09.616033 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:09.616015127 +0000 UTC m=+402.611800218 I0329 02:03:09.616571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:09.631285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bctrk" condition "Ready" to 2026-03-29 02:03:09.631270438 +0000 UTC m=+402.627055509 I0329 02:03:09.643805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:09.649637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hgczz" condition "Approved" to 2026-03-29 02:03:09.649609284 +0000 UTC m=+402.645394365 I0329 02:03:09.992428 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-hgczz" condition "Ready" to 2026-03-29 02:03:09.992416201 +0000 UTC m=+402.988201252 I0329 02:03:10.105765 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:10.105745318 +0000 UTC m=+403.101530419 I0329 02:03:10.385920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:10.386388 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:10.386376986 +0000 UTC m=+403.382162077 I0329 02:03:10.535789 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:10.535771481 +0000 UTC m=+403.531556572 I0329 02:03:10.886851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:10.887549 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:10.887539047 +0000 UTC m=+403.883324148 I0329 02:03:10.934555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:10.983227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:11.284230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:11.332979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:17.313805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:17.313838 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls" condition "Issuing" to 2026-03-29 02:03:17.313831664 +0000 UTC m=+410.309616715 I0329 02:03:17.314177 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls" condition "Ready" to 2026-03-29 02:03:17.31414801 +0000 UTC m=+410.309933081 I0329 02:03:17.332755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:17.332861 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls" condition "Ready" to 2026-03-29 02:03:17.332848928 +0000 UTC m=+410.328634019 I0329 02:03:17.461707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:17.496711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pk6jh-8nkrx" condition "Approved" to 2026-03-29 02:03:17.496692779 +0000 UTC m=+410.492477850 I0329 02:03:17.517065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-pk6jh-8nkrx" condition "Ready" to 2026-03-29 02:03:17.517049972 +0000 UTC m=+410.512835063 I0329 02:03:17.551044 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:17.551006953 +0000 UTC m=+410.546792054 I0329 02:03:17.571508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:17.572024 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:17.57200714 +0000 UTC m=+410.567792241 I0329 02:03:17.595732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:17.596618 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-pk6jh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:17.596604023 +0000 UTC m=+410.592389114 I0329 02:03:45.578427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:45.578459 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-29 02:03:45.578451674 +0000 UTC m=+438.574236745 I0329 02:03:45.578660 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-03-29 02:03:45.578625078 +0000 UTC m=+438.574410149 I0329 02:03:45.613793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:45.613872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:03:45.613892 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-03-29 02:03:45.613884867 +0000 UTC m=+438.609669928 I0329 02:03:45.733211 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:45.742542 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5x7lj" condition "Approved" to 2026-03-29 02:03:45.742521651 +0000 UTC m=+438.738306722 I0329 02:03:45.761526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5x7lj" condition "Ready" to 2026-03-29 02:03:45.761514625 +0000 UTC m=+438.757299686 I0329 02:03:45.794842 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:45.794819273 +0000 UTC m=+438.790604354 I0329 02:03:45.815602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:03:45.816138 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:03:45.816130655 +0000 UTC m=+438.811915736 I0329 02:03:45.834801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:02.817629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:07:02.817659 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-29 02:07:02.817632063 +0000 UTC m=+635.813417164 I0329 02:07:02.817682 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-03-29 02:07:02.817670644 +0000 UTC m=+635.813455715 I0329 02:07:02.836393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:02.836567 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-03-29 02:07:02.836554552 +0000 UTC m=+635.832339643 I0329 02:07:03.462398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:03.494691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zxf5j" condition "Approved" to 2026-03-29 02:07:03.494671988 +0000 UTC m=+636.490457049 I0329 02:07:03.517689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-zxf5j" condition "Ready" to 2026-03-29 02:07:03.517671872 +0000 UTC m=+636.513456943 I0329 02:07:03.549774 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:07:03.549751388 +0000 UTC m=+636.545536449 I0329 02:07:03.570436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:03.570987 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:07:03.570976575 +0000 UTC m=+636.566761646 I0329 02:07:03.585035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:07:03.596782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:35.182791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:09:35.182812 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-03-29 02:09:35.182789513 +0000 UTC m=+788.178574604 I0329 02:09:35.182877 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-29 02:09:35.182866065 +0000 UTC m=+788.178651166 I0329 02:09:35.201938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:09:35.202810 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:09:35.202899 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-03-29 02:09:35.202884756 +0000 UTC m=+788.198669857 I0329 02:09:35.348040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-48tlc" condition "Approved" to 2026-03-29 02:09:35.348018814 +0000 UTC m=+788.343803895 I0329 02:09:35.371794 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-48tlc" condition "Ready" to 2026-03-29 02:09:35.371778634 +0000 UTC m=+788.367563705 I0329 02:09:35.406511 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:09:35.406488666 +0000 UTC m=+788.402273767 I0329 02:09:35.429554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:10:39.774981 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-29 02:10:39.774960054 +0000 UTC m=+852.770745155 I0329 02:10:39.775097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:10:39.775159 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-03-29 02:10:39.775145098 +0000 UTC m=+852.770930189 I0329 02:10:39.802517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:10:39.802626 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-03-29 02:10:39.802596566 +0000 UTC m=+852.798381637 I0329 02:10:40.069933 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:10:40.106380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-2g8dk" condition "Approved" to 2026-03-29 02:10:40.106366215 +0000 UTC m=+853.102151286 I0329 02:10:40.127356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-2g8dk" condition "Ready" to 2026-03-29 02:10:40.127343906 +0000 UTC m=+853.123128977 I0329 02:10:40.161108 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:10:40.161086416 +0000 UTC m=+853.156871517 I0329 02:10:40.187329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:13:43.875140 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:13:43.875185 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-03-29 02:13:43.875160553 +0000 UTC m=+1036.870945644 I0329 02:13:43.875273 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-29 02:13:43.875259505 +0000 UTC m=+1036.871044596 I0329 02:13:43.897528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:13:43.897703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0329 02:13:43.897749 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-03-29 02:13:43.897737868 +0000 UTC m=+1036.893522969 I0329 02:13:44.088581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0329 02:13:44.097611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-84bg8" condition "Approved" to 2026-03-29 02:13:44.09759459 +0000 UTC m=+1037.093379661 I0329 02:13:44.119363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-84bg8" condition "Ready" to 2026-03-29 02:13:44.119235436 +0000 UTC m=+1037.115020507 I0329 02:13:44.147858 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-03-29 02:13:44.147842229 +0000 UTC m=+1037.143627300 I0329 02:13:44.175775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"