I0908 15:46:47.403376 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0908 15:46:47.403673 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0908 15:46:47.409399 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0908 15:46:47.409437 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0908 15:46:47.409454 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0908 15:46:47.410085 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0908 15:46:47.410080 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0908 15:46:47.410098 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0908 15:46:47.414206 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0908 15:46:47.429365 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0908 15:46:47.429641 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0908 15:46:47.429679 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0908 15:46:47.438026 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0908 15:46:47.438317 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0908 15:46:47.441082 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0908 15:46:47.443549 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0908 15:46:47.445926 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0908 15:46:47.450164 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0908 15:46:47.452623 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0908 15:46:47.458126 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0908 15:46:47.461973 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0908 15:46:47.462155 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0908 15:46:47.465966 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0908 15:46:47.469905 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0908 15:46:47.473843 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0908 15:46:47.478215 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0908 15:46:47.482594 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0908 15:46:47.486435 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0908 15:46:47.494357 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0908 15:46:47.500321 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0908 15:46:47.506011 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0908 15:46:47.506044 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0908 15:46:47.506102 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0908 15:46:47.510915 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0908 15:46:47.513405 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 15:46:47.514601 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 15:46:47.516928 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 15:46:47.517088 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 15:46:47.517525 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 15:46:47.543930 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 15:46:47.563205 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 15:46:47.589133 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 15:46:47.615665 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 15:46:47.634999 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 15:46:47.655354 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0908 15:47:00.259990 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-08 15:47:00.25996903 +0000 UTC m=+12.900710469 I0908 15:47:00.979043 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:47:00.979038 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-08 15:47:00.979026009 +0000 UTC m=+13.619767448 I0908 15:47:00.979145 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-08 15:47:00.979137962 +0000 UTC m=+13.619879401 I0908 15:47:00.992605 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:47:00.992706 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:47:00.992736 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-08 15:47:00.992727364 +0000 UTC m=+13.633468803 E0908 15:47:00.992887 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0908 15:47:00.993022 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-08 15:47:00.993007972 +0000 UTC m=+13.633749421 E0908 15:47:00.993072 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 15:47:01.003669 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0908 15:47:01.004093 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 15:47:01.004176 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 15:47:01.004206 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0908 15:47:01.044973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-08 15:47:01.044960363 +0000 UTC m=+13.685701812 I0908 15:47:01.073109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-08 15:47:01.073097673 +0000 UTC m=+13.713839082 I0908 15:47:01.097193 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:47:01.09715618 +0000 UTC m=+13.737897619 I0908 15:47:01.117025 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:47:01.158057 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:47:06.004840 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:47:06.004827264 +0000 UTC m=+18.645568733 I0908 15:47:27.398483 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-08 15:47:27.398396228 +0000 UTC m=+40.039137667 I0908 15:47:27.398584 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:47:27.398675 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-08 15:47:27.398664975 +0000 UTC m=+40.039406394 I0908 15:47:27.410809 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-08 15:47:27.41079282 +0000 UTC m=+40.051534269 I0908 15:47:27.415935 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:47:27.416090 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:47:27.416559 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-08 15:47:27.416541926 +0000 UTC m=+40.057283435 I0908 15:47:27.667863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-08 15:47:27.667846749 +0000 UTC m=+40.308588198 I0908 15:47:27.699140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-08 15:47:27.699126218 +0000 UTC m=+40.339867657 I0908 15:47:27.728944 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:47:27.72892591 +0000 UTC m=+40.369667359 I0908 15:47:27.747637 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:47:27.802689 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:49:10.381159 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:49:10.381216 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-08 15:49:10.381193472 +0000 UTC m=+143.021934921 I0908 15:49:10.381208 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-08 15:49:10.381169152 +0000 UTC m=+143.021910561 I0908 15:49:10.391605 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:49:10.391772 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-08 15:49:10.391756649 +0000 UTC m=+143.032498098 E0908 15:49:10.393530 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0908 15:49:10.393618 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-08 15:49:10.393608146 +0000 UTC m=+143.034349595 I0908 15:49:10.393645 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0908 15:49:10.405601 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" E0908 15:49:10.405710 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0908 15:49:10.405741 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0908 15:49:10.405777 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" I0908 15:49:10.406744 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-08 15:49:10.406731108 +0000 UTC m=+143.047472547 I0908 15:49:10.407050 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:49:10.407091 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-08 15:49:10.407080607 +0000 UTC m=+143.047822036 I0908 15:49:10.422301 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:49:10.422446 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-08 15:49:10.422433486 +0000 UTC m=+143.063174925 I0908 15:49:10.523502 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:49:10.563967 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-09-08 15:49:10.563956858 +0000 UTC m=+143.204698267 I0908 15:49:10.575009 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:49:10.584637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-09-08 15:49:10.58462184 +0000 UTC m=+143.225363279 I0908 15:49:10.603989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-09-08 15:49:10.60397111 +0000 UTC m=+143.244712609 I0908 15:49:10.610794 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:49:10.610778553 +0000 UTC m=+143.251519992 I0908 15:49:10.619443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-09-08 15:49:10.619431542 +0000 UTC m=+143.260172951 I0908 15:49:10.628249 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:49:10.629099 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:49:10.629089376 +0000 UTC m=+143.269830845 I0908 15:49:10.634174 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:49:10.644146 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:49:10.644910 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:49:10.644900476 +0000 UTC m=+143.285641915 I0908 15:49:10.645451 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:49:15.406602 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:49:15.406589417 +0000 UTC m=+148.047330856 I0908 15:49:15.422156 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:49:15.422143021 +0000 UTC m=+148.062884460 I0908 15:49:15.447393 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:49:15.44738094 +0000 UTC m=+148.088122359 I0908 15:49:15.460381 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:49:15.461266 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:49:15.461253681 +0000 UTC m=+148.101995130 I0908 15:49:15.476892 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:49:15.477865 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:49:15.477854581 +0000 UTC m=+148.118596030 I0908 15:52:26.900950 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-129.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:52:26.901069 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-129.nip.io-tls" condition "Issuing" to 2026-09-08 15:52:26.901007761 +0000 UTC m=+339.541749200 I0908 15:52:26.901139 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-129.nip.io-tls" condition "Ready" to 2026-09-08 15:52:26.901122944 +0000 UTC m=+339.541864383 I0908 15:52:26.912882 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:52:26.912966 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-129.nip.io-tls" condition "Ready" to 2026-09-08 15:52:26.912959433 +0000 UTC m=+339.553700882 I0908 15:52:27.177544 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:52:27.210927 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-129.nip.io-tls-1" condition "Approved" to 2026-09-08 15:52:27.21091561 +0000 UTC m=+339.851657029 I0908 15:52:27.226820 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-129.nip.io-tls-1" condition "Ready" to 2026-09-08 15:52:27.226803962 +0000 UTC m=+339.867545401 I0908 15:52:27.251776 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:52:27.251749054 +0000 UTC m=+339.892490493 I0908 15:52:27.268287 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:52:27.269053 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-129.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:52:27.269044802 +0000 UTC m=+339.909786251 I0908 15:52:27.291740 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-129.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-129.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:41.188151 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:53:41.188195 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-08 15:53:41.188186017 +0000 UTC m=+413.828927466 I0908 15:53:41.188601 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-08 15:53:41.188584526 +0000 UTC m=+413.829325935 I0908 15:53:41.200190 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:41.200319 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:53:41.200357 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-08 15:53:41.200348145 +0000 UTC m=+413.841089584 E0908 15:53:41.200698 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0908 15:53:41.201023 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-08 15:53:41.201004662 +0000 UTC m=+413.841746101 E0908 15:53:41.201152 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 15:53:41.213361 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0908 15:53:41.213938 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 15:53:41.214019 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0908 15:53:41.214060 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0908 15:53:41.238130 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:41.243945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-08 15:53:41.243931459 +0000 UTC m=+413.884672868 I0908 15:53:41.260708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-08 15:53:41.260691374 +0000 UTC m=+413.901432843 I0908 15:53:41.286328 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:53:41.286305783 +0000 UTC m=+413.927047222 I0908 15:53:41.304633 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:41.305061 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:53:41.305031187 +0000 UTC m=+413.945772626 I0908 15:53:41.327822 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:53:46.214536 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:53:46.214521279 +0000 UTC m=+418.855262718 I0908 15:54:26.463863 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-08 15:54:26.463802092 +0000 UTC m=+459.104543531 I0908 15:54:26.463946 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:54:26.463988 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-08 15:54:26.463977686 +0000 UTC m=+459.104719135 I0908 15:54:26.464106 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:54:26.464139 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-08 15:54:26.464133871 +0000 UTC m=+459.104875300 I0908 15:54:26.463985 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-08 15:54:26.463966276 +0000 UTC m=+459.104707715 I0908 15:54:26.464676 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:54:26.464788 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-08 15:54:26.464718385 +0000 UTC m=+459.105459834 I0908 15:54:26.466229 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-08 15:54:26.466221484 +0000 UTC m=+459.106962903 I0908 15:54:26.493918 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:26.493997 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-08 15:54:26.493989247 +0000 UTC m=+459.134730676 I0908 15:54:26.494493 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:26.495768 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:54:26.495794 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-08 15:54:26.495788542 +0000 UTC m=+459.136529961 I0908 15:54:26.500790 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:26.500886 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-08 15:54:26.500875282 +0000 UTC m=+459.141616701 I0908 15:54:26.718284 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:26.752082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-08 15:54:26.752051816 +0000 UTC m=+459.392793225 I0908 15:54:26.767678 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:26.785178 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-08 15:54:26.785158854 +0000 UTC m=+459.425900303 I0908 15:54:26.809778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-08 15:54:26.809766608 +0000 UTC m=+459.450508027 I0908 15:54:26.823857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-08 15:54:26.823840635 +0000 UTC m=+459.464582044 I0908 15:54:26.827493 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:54:26.827475557 +0000 UTC m=+459.468216996 I0908 15:54:26.842437 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:26.842927 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:54:26.842920108 +0000 UTC m=+459.483661527 I0908 15:54:26.846948 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:54:26.8469328 +0000 UTC m=+459.487674219 I0908 15:54:26.849408 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:26.886119 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:26.938089 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:26.938503 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:54:26.93849728 +0000 UTC m=+459.579238679 I0908 15:54:27.286292 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:27.334956 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:27.545052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-08 15:54:27.545034267 +0000 UTC m=+460.185775716 I0908 15:54:27.648065 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-08 15:54:27.648042828 +0000 UTC m=+460.288784267 I0908 15:54:28.103065 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:54:28.103044226 +0000 UTC m=+460.743785675 I0908 15:54:28.187560 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:28.188372 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:54:28.188358127 +0000 UTC m=+460.829099566 I0908 15:54:28.388562 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:38.529315 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:54:38.529391 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls" condition "Ready" to 2026-09-08 15:54:38.529375866 +0000 UTC m=+471.170117305 I0908 15:54:38.529401 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls" condition "Issuing" to 2026-09-08 15:54:38.529393176 +0000 UTC m=+471.170134655 I0908 15:54:38.544051 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:38.544171 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls" condition "Ready" to 2026-09-08 15:54:38.54416161 +0000 UTC m=+471.184903029 I0908 15:54:38.730671 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:38.759508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls-1" condition "Approved" to 2026-09-08 15:54:38.759494778 +0000 UTC m=+471.400236197 I0908 15:54:38.774409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls-1" condition "Ready" to 2026-09-08 15:54:38.774397395 +0000 UTC m=+471.415138814 I0908 15:54:38.801969 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:54:38.801951642 +0000 UTC m=+471.442693061 I0908 15:54:38.815243 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:54:38.854362 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vqtpp-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:55:06.877241 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-08 15:55:06.877223069 +0000 UTC m=+499.517964488 I0908 15:55:06.877675 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:55:06.877701 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-08 15:55:06.877695961 +0000 UTC m=+499.518437380 I0908 15:55:06.889062 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:55:06.889138 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:55:06.889163 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-08 15:55:06.889154491 +0000 UTC m=+499.529895910 I0908 15:55:07.289290 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:55:07.303585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-08 15:55:07.303545444 +0000 UTC m=+499.944286893 I0908 15:55:07.323293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-08 15:55:07.323279343 +0000 UTC m=+499.964020792 I0908 15:55:07.357713 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:55:07.357692674 +0000 UTC m=+499.998434123 I0908 15:55:07.379074 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:55:07.380364 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:55:07.380344607 +0000 UTC m=+500.021086016 I0908 15:55:07.396633 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:55:07.399220 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:58:25.870485 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 15:58:25.870558 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-08 15:58:25.87048262 +0000 UTC m=+698.511224059 I0908 15:58:25.870669 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-08 15:58:25.870658194 +0000 UTC m=+698.511399643 I0908 15:58:25.884523 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:58:25.884672 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-08 15:58:25.884657549 +0000 UTC m=+698.525398998 I0908 15:58:26.092706 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:58:26.138941 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-08 15:58:26.13891908 +0000 UTC m=+698.779660539 I0908 15:58:26.162882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-08 15:58:26.162869347 +0000 UTC m=+698.803610766 I0908 15:58:26.197523 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:58:26.197503684 +0000 UTC m=+698.838245103 I0908 15:58:26.215532 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 15:58:26.216669 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 15:58:26.21665846 +0000 UTC m=+698.857399899 I0908 15:58:26.234922 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:01:08.411313 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:01:08.411386 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-08 16:01:08.41137483 +0000 UTC m=+861.052116269 I0908 16:01:08.412320 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-08 16:01:08.412285143 +0000 UTC m=+861.053026612 I0908 16:01:08.426610 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:01:08.426937 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-08 16:01:08.426705537 +0000 UTC m=+861.067446976 I0908 16:01:08.735691 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:01:08.778546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Approved" to 2026-09-08 16:01:08.778523485 +0000 UTC m=+861.419264934 I0908 16:01:08.800049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Ready" to 2026-09-08 16:01:08.800032948 +0000 UTC m=+861.440774367 I0908 16:01:08.830669 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:01:08.830653403 +0000 UTC m=+861.471394852 I0908 16:01:08.850455 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:01:08.851416 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:01:08.851403788 +0000 UTC m=+861.492145227 I0908 16:01:08.872354 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:02:26.777591 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-08 16:02:26.777574614 +0000 UTC m=+939.418316053 I0908 16:02:26.778072 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:02:26.778153 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-08 16:02:26.778139809 +0000 UTC m=+939.418881248 I0908 16:02:26.792658 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:02:26.792760 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:02:26.792797 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-08 16:02:26.792785589 +0000 UTC m=+939.433527008 I0908 16:02:26.990891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Approved" to 2026-09-08 16:02:26.990813716 +0000 UTC m=+939.631555165 I0908 16:02:27.013079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Ready" to 2026-09-08 16:02:27.013061098 +0000 UTC m=+939.653802547 I0908 16:02:27.046301 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:02:27.046283317 +0000 UTC m=+939.687024736 I0908 16:02:27.064896 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:02:27.065663 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:02:27.065652737 +0000 UTC m=+939.706394176 I0908 16:02:27.071587 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:02:27.085946 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:05:47.286383 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:05:47.286459 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-08 16:05:47.286425707 +0000 UTC m=+1139.927167146 I0908 16:05:47.286723 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-08 16:05:47.286696573 +0000 UTC m=+1139.927438062 I0908 16:05:47.309353 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:05:47.309448 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:05:47.309480 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-08 16:05:47.30946975 +0000 UTC m=+1139.950211189 I0908 16:05:47.583079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Approved" to 2026-09-08 16:05:47.58306122 +0000 UTC m=+1140.223802669 I0908 16:05:47.607066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Ready" to 2026-09-08 16:05:47.607048916 +0000 UTC m=+1140.247790335 I0908 16:05:47.642424 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:05:47.64240712 +0000 UTC m=+1140.283148569 I0908 16:05:47.661238 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:13:43.792490 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:13:43.792630 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-08 16:13:43.792557599 +0000 UTC m=+1616.433299048 I0908 16:13:43.792777 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-08 16:13:43.792755534 +0000 UTC m=+1616.433497013 I0908 16:13:43.809552 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:13:43.809980 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:13:43.810032 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-08 16:13:43.810024914 +0000 UTC m=+1616.450766323 I0908 16:13:43.999507 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:13:44.018043 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Approved" to 2026-09-08 16:13:44.018028669 +0000 UTC m=+1616.658770108 I0908 16:13:44.035959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Ready" to 2026-09-08 16:13:44.035941127 +0000 UTC m=+1616.676682566 I0908 16:13:44.060908 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:13:44.060888099 +0000 UTC m=+1616.701629548 I0908 16:13:44.074972 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:13:44.076197 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:13:44.076182899 +0000 UTC m=+1616.716924348 I0908 16:13:44.096505 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:13:44.097480 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:13:44.097468684 +0000 UTC m=+1616.738210133 I0908 16:15:30.114807 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:15:30.114904 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-08 16:15:30.114889637 +0000 UTC m=+1722.755631146 I0908 16:15:30.114880 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-08 16:15:30.114869446 +0000 UTC m=+1722.755610885 I0908 16:15:30.130077 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:15:30.130284 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:15:30.130399 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-08 16:15:30.13035714 +0000 UTC m=+1722.771098589 I0908 16:15:30.372315 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:15:30.393623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-09-08 16:15:30.393603653 +0000 UTC m=+1723.034345072 I0908 16:15:30.411081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-09-08 16:15:30.411060125 +0000 UTC m=+1723.051801564 I0908 16:15:30.441999 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:15:30.441975339 +0000 UTC m=+1723.082716798 I0908 16:15:30.458390 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:15:30.458847 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:15:30.458817275 +0000 UTC m=+1723.099558694 I0908 16:15:30.478222 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:16:30.474675 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:16:30.475112 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-08 16:16:30.474440618 +0000 UTC m=+1783.115182037 I0908 16:16:30.475185 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-08 16:16:30.474758577 +0000 UTC m=+1783.115500016 I0908 16:16:30.487842 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:16:30.488138 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:16:30.488310 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-08 16:16:30.48829556 +0000 UTC m=+1783.129037019 I0908 16:16:30.529048 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:16:30.541096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-09-08 16:16:30.541079339 +0000 UTC m=+1783.181820798 I0908 16:16:30.559708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-09-08 16:16:30.559694 +0000 UTC m=+1783.200435449 I0908 16:16:30.582749 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:16:30.582734284 +0000 UTC m=+1783.223475693 I0908 16:16:30.596467 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:16:31.114671 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:16:31.114728 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-08 16:16:31.1147116 +0000 UTC m=+1783.755453049 I0908 16:16:31.114794 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-08 16:16:31.114774001 +0000 UTC m=+1783.755515450 I0908 16:16:31.133674 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:16:31.133832 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-08 16:16:31.133821045 +0000 UTC m=+1783.774562494 I0908 16:16:31.158921 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:16:31.187449 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-09-08 16:16:31.187434273 +0000 UTC m=+1783.828175712 I0908 16:16:31.204958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-09-08 16:16:31.204946568 +0000 UTC m=+1783.845688007 I0908 16:16:31.254551 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:16:31.254531615 +0000 UTC m=+1783.895273054 I0908 16:16:31.283238 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:16:31.283606 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:16:31.283597291 +0000 UTC m=+1783.924338700 I0908 16:16:31.298235 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:16:31.911631 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-08 16:16:31.911616382 +0000 UTC m=+1784.552357831 I0908 16:16:32.551891 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-08 16:16:32.551876732 +0000 UTC m=+1785.192618201 I0908 16:17:21.057689 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:17:21.057692 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-08 16:17:21.057611656 +0000 UTC m=+1833.698353085 I0908 16:17:21.057743 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-08 16:17:21.057732089 +0000 UTC m=+1833.698473528 I0908 16:17:21.081638 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:17:21.081742 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:17:21.081777 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-08 16:17:21.08176299 +0000 UTC m=+1833.722504399 I0908 16:17:21.619884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Approved" to 2026-09-08 16:17:21.619872579 +0000 UTC m=+1834.260613988 I0908 16:17:21.641294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Ready" to 2026-09-08 16:17:21.641283144 +0000 UTC m=+1834.282024563 I0908 16:17:21.669243 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:17:21.669227156 +0000 UTC m=+1834.309968565 I0908 16:17:21.682818 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:17:21.683847 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:17:21.683840757 +0000 UTC m=+1834.324582186 I0908 16:17:21.700988 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:20:14.496610 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:20:14.496700 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-08 16:20:14.496689799 +0000 UTC m=+2007.137431238 I0908 16:20:14.496701 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-08 16:20:14.496655259 +0000 UTC m=+2007.137396708 I0908 16:20:14.510513 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:20:14.510609 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:20:14.510637 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-08 16:20:14.510629044 +0000 UTC m=+2007.151370493 I0908 16:20:14.792128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Approved" to 2026-09-08 16:20:14.79211176 +0000 UTC m=+2007.432853199 I0908 16:20:14.813506 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Ready" to 2026-09-08 16:20:14.813493064 +0000 UTC m=+2007.454234473 I0908 16:20:14.852816 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:20:14.852793005 +0000 UTC m=+2007.493534414 I0908 16:20:14.870966 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:20:16.072898 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:20:16.072945 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-08 16:20:16.072930616 +0000 UTC m=+2008.713672055 I0908 16:20:16.072978 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-08 16:20:16.072961357 +0000 UTC m=+2008.713702796 I0908 16:20:16.084550 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:20:16.084696 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-08 16:20:16.084688026 +0000 UTC m=+2008.725429435 I0908 16:20:16.445921 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:20:16.476089 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Approved" to 2026-09-08 16:20:16.47607991 +0000 UTC m=+2009.116821319 I0908 16:20:16.491778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Ready" to 2026-09-08 16:20:16.491769979 +0000 UTC m=+2009.132511378 I0908 16:20:16.518379 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:20:16.518369586 +0000 UTC m=+2009.159110995 I0908 16:20:16.535055 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:20:16.535407 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:20:16.53540082 +0000 UTC m=+2009.176142219 I0908 16:20:16.562451 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:23:45.947210 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-08 16:23:45.947146311 +0000 UTC m=+2218.587887730 I0908 16:23:45.947696 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:23:45.947786 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-08 16:23:45.947780136 +0000 UTC m=+2218.588521555 I0908 16:23:45.965418 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:23:45.965533 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:23:45.965559 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-08 16:23:45.965553278 +0000 UTC m=+2218.606294687 I0908 16:23:46.110161 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:23:46.132790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Approved" to 2026-09-08 16:23:46.13276461 +0000 UTC m=+2218.773506049 I0908 16:23:46.155847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Ready" to 2026-09-08 16:23:46.155836206 +0000 UTC m=+2218.796577615 I0908 16:23:46.184473 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:23:46.184459885 +0000 UTC m=+2218.825201304 I0908 16:23:46.202803 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:23:46.203237 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:23:46.203230882 +0000 UTC m=+2218.843972291 I0908 16:23:46.219295 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:23:46.220941 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:24:37.809377 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-2f5v2-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:24:37.809440 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2f5v2-api" condition "Issuing" to 2026-09-08 16:24:37.809431238 +0000 UTC m=+2270.450172687 I0908 16:24:37.810141 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2f5v2-api" condition "Ready" to 2026-09-08 16:24:37.810131656 +0000 UTC m=+2270.450873105 I0908 16:24:37.812947 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2f5v2-vnc" condition "Ready" to 2026-09-08 16:24:37.812939248 +0000 UTC m=+2270.453680697 I0908 16:24:37.813282 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-2f5v2-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:24:37.813308 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2f5v2-vnc" condition "Issuing" to 2026-09-08 16:24:37.813302817 +0000 UTC m=+2270.454044256 I0908 16:24:37.835395 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-2f5v2-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2f5v2-api\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:24:37.835490 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-2f5v2-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2f5v2-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:24:37.835564 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-2f5v2-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:24:37.835586 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2f5v2-vnc" condition "Issuing" to 2026-09-08 16:24:37.835578683 +0000 UTC m=+2270.476320122 I0908 16:24:37.836404 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-2f5v2-api" condition "Ready" to 2026-09-08 16:24:37.836393044 +0000 UTC m=+2270.477134463 I0908 16:24:37.967283 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-2f5v2-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2f5v2-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:24:37.973284 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-2f5v2-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2f5v2-api\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:24:37.984725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-2f5v2-vnc-1" condition "Approved" to 2026-09-08 16:24:37.984716135 +0000 UTC m=+2270.625457544 I0908 16:24:38.001837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-2f5v2-vnc-1" condition "Ready" to 2026-09-08 16:24:38.00182494 +0000 UTC m=+2270.642566359 I0908 16:24:38.004342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-2f5v2-api-1" condition "Approved" to 2026-09-08 16:24:38.004333614 +0000 UTC m=+2270.645075023 I0908 16:24:38.023555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-2f5v2-api-1" condition "Ready" to 2026-09-08 16:24:38.023540172 +0000 UTC m=+2270.664281611 I0908 16:24:38.032847 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-2f5v2-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:24:38.032835418 +0000 UTC m=+2270.673576827 I0908 16:24:38.044990 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-2f5v2-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2f5v2-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:24:38.045638 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-2f5v2-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:24:38.045628734 +0000 UTC m=+2270.686370163 I0908 16:24:38.053320 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-2f5v2-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:24:38.053312389 +0000 UTC m=+2270.694053798 I0908 16:24:38.065657 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-2f5v2-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2f5v2-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:24:38.065851 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-2f5v2-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2f5v2-api\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:24:38.066604 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-2f5v2-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:24:38.066596236 +0000 UTC m=+2270.707337685 I0908 16:24:38.086212 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-2f5v2-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-2f5v2-api\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:29:12.060430 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:29:12.060560 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-08 16:29:12.060524961 +0000 UTC m=+2544.701266420 I0908 16:29:12.060568 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-08 16:29:12.060551941 +0000 UTC m=+2544.701293390 I0908 16:29:12.131182 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:29:12.131351 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:29:12.131392 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-08 16:29:12.131381685 +0000 UTC m=+2544.772123134 I0908 16:29:12.539895 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:29:12.657466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Approved" to 2026-09-08 16:29:12.657455353 +0000 UTC m=+2545.298196762 I0908 16:29:12.829590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Ready" to 2026-09-08 16:29:12.829574589 +0000 UTC m=+2545.470316038 I0908 16:29:13.760784 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:29:13.760768906 +0000 UTC m=+2546.401510355 I0908 16:29:13.961472 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:29:13.962289 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:29:13.962279313 +0000 UTC m=+2546.603020752 I0908 16:29:14.179442 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:29:14.271829 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:29:14.271891 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-08 16:29:14.271877555 +0000 UTC m=+2546.912619004 I0908 16:29:14.272106 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-08 16:29:14.27208156 +0000 UTC m=+2546.912823039 I0908 16:29:14.335127 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:29:14.335432 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:29:14.335484 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-08 16:29:14.335471987 +0000 UTC m=+2546.976213426 I0908 16:29:14.994412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Approved" to 2026-09-08 16:29:14.994398282 +0000 UTC m=+2547.635139691 I0908 16:29:15.172553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Ready" to 2026-09-08 16:29:15.172538261 +0000 UTC m=+2547.813279710 I0908 16:29:15.614071 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:29:15.614053717 +0000 UTC m=+2548.254795156 I0908 16:29:15.755942 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:29:15.764551 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:29:15.764534219 +0000 UTC m=+2548.405275658 I0908 16:29:15.881775 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:29:15.887412 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:42.266107 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:31:42.266149 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-08 16:31:42.266091142 +0000 UTC m=+2694.906832581 I0908 16:31:42.266216 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-08 16:31:42.266202694 +0000 UTC m=+2694.906944143 E0908 16:31:42.275875 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0908 16:31:42.275956 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-08 16:31:42.275947161 +0000 UTC m=+2694.916688600 I0908 16:31:42.275985 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0908 16:31:42.281815 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:42.281930 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:31:42.281959 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-08 16:31:42.281951794 +0000 UTC m=+2694.922693233 E0908 16:31:42.290586 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" E0908 16:31:42.290697 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0908 16:31:42.290733 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0908 16:31:42.290794 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" I0908 16:31:42.349394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Approved" to 2026-09-08 16:31:42.349376163 +0000 UTC m=+2694.990117592 I0908 16:31:42.369128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Ready" to 2026-09-08 16:31:42.369117524 +0000 UTC m=+2695.009858943 I0908 16:31:42.398495 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:31:42.398479439 +0000 UTC m=+2695.039220878 I0908 16:31:42.414148 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:42.454091 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:43.003004 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-08 16:31:43.002983846 +0000 UTC m=+2695.643725285 I0908 16:31:43.003643 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:31:43.003682 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-08 16:31:43.003673834 +0000 UTC m=+2695.644415273 E0908 16:31:43.019265 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0908 16:31:43.019406 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-08 16:31:43.019393733 +0000 UTC m=+2695.660135182 I0908 16:31:43.019446 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0908 16:31:43.020373 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:43.020557 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:31:43.020600 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-08 16:31:43.020589563 +0000 UTC m=+2695.661331012 E0908 16:31:43.030360 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" E0908 16:31:43.030632 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0908 16:31:43.030939 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0908 16:31:43.031118 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" I0908 16:31:43.077394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Approved" to 2026-09-08 16:31:43.077379933 +0000 UTC m=+2695.718121352 I0908 16:31:43.094162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Ready" to 2026-09-08 16:31:43.094148429 +0000 UTC m=+2695.734889878 I0908 16:31:43.133347 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:31:43.133333902 +0000 UTC m=+2695.774075341 I0908 16:31:43.147192 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:43.149727 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:31:43.149709657 +0000 UTC m=+2695.790451106 I0908 16:31:43.162703 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:43.163716 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:43.725316 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-08 16:31:43.725292102 +0000 UTC m=+2696.366033521 I0908 16:31:43.725387 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:31:43.725415 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-08 16:31:43.725406525 +0000 UTC m=+2696.366147974 I0908 16:31:43.739547 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:43.739728 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:31:43.739773 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-08 16:31:43.739760238 +0000 UTC m=+2696.380501677 I0908 16:31:43.783711 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:43.793180 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Approved" to 2026-09-08 16:31:43.793163633 +0000 UTC m=+2696.433905062 I0908 16:31:43.815226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Ready" to 2026-09-08 16:31:43.815208852 +0000 UTC m=+2696.455950291 I0908 16:31:47.291230 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:31:47.291208661 +0000 UTC m=+2699.931950110 I0908 16:31:47.310036 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:31:47.310022709 +0000 UTC m=+2699.950764158 I0908 16:31:47.341137 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:31:47.341119247 +0000 UTC m=+2699.981860686 I0908 16:31:47.359005 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:47.359479 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:31:47.359466563 +0000 UTC m=+2700.000208012 I0908 16:31:47.368530 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:47.380763 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:31:47.381178 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:31:47.381166953 +0000 UTC m=+2700.021908392 I0908 16:31:48.031056 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:31:48.031043831 +0000 UTC m=+2700.671785250 I0908 16:34:25.156812 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-08 16:34:25.156794788 +0000 UTC m=+2857.797536237 I0908 16:34:25.157384 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:34:25.157496 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-08 16:34:25.157488815 +0000 UTC m=+2857.798230254 I0908 16:34:25.174679 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:34:25.174810 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:34:25.174886 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-08 16:34:25.174875475 +0000 UTC m=+2857.815616944 I0908 16:34:25.837251 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:34:25.870201 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Approved" to 2026-09-08 16:34:25.870169043 +0000 UTC m=+2858.510910452 I0908 16:34:25.896102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Ready" to 2026-09-08 16:34:25.896086478 +0000 UTC m=+2858.536827917 I0908 16:34:25.930566 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:34:25.930555249 +0000 UTC m=+2858.571296658 I0908 16:34:25.944890 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:34:25.945485 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:34:25.945478096 +0000 UTC m=+2858.586219515 I0908 16:34:25.959571 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:34:25.959605 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:13.028237 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-08 16:35:13.028224281 +0000 UTC m=+2905.668965730 I0908 16:35:13.050914 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:35:13.050968 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-08 16:35:13.050960907 +0000 UTC m=+2905.691702326 I0908 16:35:13.051163 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-08 16:35:13.051147692 +0000 UTC m=+2905.691889131 I0908 16:35:13.066536 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:13.066647 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-08 16:35:13.066636182 +0000 UTC m=+2905.707377621 E0908 16:35:13.090616 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller" I0908 16:35:13.142753 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-08 16:35:13.142725177 +0000 UTC m=+2905.783466616 I0908 16:35:13.160324 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:35:13.160389 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-08 16:35:13.160379963 +0000 UTC m=+2905.801121402 I0908 16:35:13.160503 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-08 16:35:13.160481495 +0000 UTC m=+2905.801222934 I0908 16:35:13.179536 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:13.179634 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:35:13.179671 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-08 16:35:13.17965949 +0000 UTC m=+2905.820400939 E0908 16:35:13.266150 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" I0908 16:35:13.361035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-09-08 16:35:13.361015045 +0000 UTC m=+2906.001756474 I0908 16:35:13.382348 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-09-08 16:35:13.382333945 +0000 UTC m=+2906.023075394 I0908 16:35:13.436536 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:35:13.436524225 +0000 UTC m=+2906.077265634 I0908 16:35:13.484634 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:13.485004 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:35:13.484997689 +0000 UTC m=+2906.125739098 I0908 16:35:13.504449 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:13.504848 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:35:13.504841312 +0000 UTC m=+2906.145582721 I0908 16:35:14.006458 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-08 16:35:14.006442793 +0000 UTC m=+2906.647184202 I0908 16:35:14.026123 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-08 16:35:14.02610919 +0000 UTC m=+2906.666850589 I0908 16:35:14.026405 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:35:14.026549 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-08 16:35:14.026470208 +0000 UTC m=+2906.667211637 I0908 16:35:14.038629 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:14.038698 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:35:14.038723 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-08 16:35:14.038716639 +0000 UTC m=+2906.679458048 I0908 16:35:14.376258 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:14.388623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-09-08 16:35:14.388608774 +0000 UTC m=+2907.029350183 I0908 16:35:14.428433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-09-08 16:35:14.42840425 +0000 UTC m=+2907.069145659 I0908 16:35:14.472883 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-08 16:35:14.472869155 +0000 UTC m=+2907.113610564 I0908 16:35:14.474648 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:35:14.4746375 +0000 UTC m=+2907.115378909 I0908 16:35:14.490721 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:14.491134 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:35:14.491127896 +0000 UTC m=+2907.131869305 I0908 16:35:14.492515 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-08 16:35:14.492500961 +0000 UTC m=+2907.133242400 I0908 16:35:14.492834 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:35:14.492853 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-08 16:35:14.49284929 +0000 UTC m=+2907.133590699 I0908 16:35:14.498678 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:14.509485 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:14.509645 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-08 16:35:14.509633434 +0000 UTC m=+2907.150374873 I0908 16:35:14.510317 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:14.631875 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:14.654893 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-09-08 16:35:14.654877906 +0000 UTC m=+2907.295619325 I0908 16:35:14.665987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-09-08 16:35:14.665977926 +0000 UTC m=+2907.306719335 I0908 16:35:14.741199 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:35:14.741187608 +0000 UTC m=+2907.381929017 I0908 16:35:14.841536 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:14.842071 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:35:14.842051088 +0000 UTC m=+2907.482792497 I0908 16:35:14.946863 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-08 16:35:14.946849837 +0000 UTC m=+2907.587591246 I0908 16:35:14.964083 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-08 16:35:14.964071953 +0000 UTC m=+2907.604813362 I0908 16:35:14.964323 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:35:14.964376 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-08 16:35:14.96437202 +0000 UTC m=+2907.605113429 I0908 16:35:15.035646 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:15.182229 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:15.182344 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0908 16:35:15.182407 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-08 16:35:15.182382912 +0000 UTC m=+2907.823124321 I0908 16:35:15.538181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-09-08 16:35:15.538167667 +0000 UTC m=+2908.178909106 I0908 16:35:15.646219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-09-08 16:35:15.646207308 +0000 UTC m=+2908.286948727 I0908 16:35:16.092887 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:35:16.092870781 +0000 UTC m=+2908.733612230 I0908 16:35:16.234812 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0908 16:35:16.235473 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-08 16:35:16.235448446 +0000 UTC m=+2908.876189855 I0908 16:35:16.434005 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"