I0910 11:08:41.826942 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0910 11:08:41.827115 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0910 11:08:41.827215 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0910 11:08:41.835379 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0910 11:08:41.836045 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0910 11:08:41.836192 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0910 11:08:41.836255 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0910 11:08:41.840618 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0910 11:08:41.860781 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0910 11:08:41.868121 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0910 11:08:41.872130 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0910 11:08:41.879765 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0910 11:08:41.884347 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0910 11:08:41.888799 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0910 11:08:41.893166 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0910 11:08:41.897286 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0910 11:08:41.901326 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0910 11:08:41.904292 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0910 11:08:41.910988 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0910 11:08:41.915458 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0910 11:08:41.915571 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0910 11:08:41.915613 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0910 11:08:41.919127 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0910 11:08:41.921991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0910 11:08:41.924684 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0910 11:08:41.927336 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0910 11:08:41.927373 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0910 11:08:41.927382 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0910 11:08:41.927499 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0910 11:08:41.930184 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0910 11:08:41.932763 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0910 11:08:41.932861 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0910 11:08:41.938502 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0910 11:08:41.942017 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:08:41.942037 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:08:41.942784 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:08:41.942912 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:08:41.972876 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:08:42.027577 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:08:42.050090 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:08:42.054047 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:08:42.073065 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:08:42.091562 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:08:53.625348 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-10 11:08:53.625324297 +0000 UTC m=+11.836190000 I0910 11:08:54.483473 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 11:08:54.483455343 +0000 UTC m=+12.694321056 I0910 11:08:54.483538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:54.483621 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 11:08:54.483610106 +0000 UTC m=+12.694475819 E0910 11:08:54.526920 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:08:54.527025 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-10 11:08:54.527016313 +0000 UTC m=+12.737882006 E0910 11:08:54.527063 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:08:54.541453 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:54.541599 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 11:08:54.541587367 +0000 UTC m=+12.752453050 E0910 11:08:54.556017 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0910 11:08:54.556838 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:08:54.556993 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:08:54.557084 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0910 11:08:54.564726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:54.564818 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 11:08:54.564810178 +0000 UTC m=+12.775675841 I0910 11:08:54.570954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8qqz8" condition "Approved" to 2026-09-10 11:08:54.570943441 +0000 UTC m=+12.781809114 I0910 11:08:54.571426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:54.592536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8qqz8" condition "Ready" to 2026-09-10 11:08:54.592509176 +0000 UTC m=+12.803374869 I0910 11:08:54.623536 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:54.623520155 +0000 UTC m=+12.834385878 I0910 11:08:54.644285 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:59.557550 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:59.55753006 +0000 UTC m=+17.768395773 I0910 11:09:23.102369 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 11:09:23.102341128 +0000 UTC m=+41.313206881 I0910 11:09:23.103025 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:09:23.103062 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 11:09:23.103055564 +0000 UTC m=+41.313921267 I0910 11:09:23.117805 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-10 11:09:23.117790862 +0000 UTC m=+41.328656565 I0910 11:09:23.134141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:23.134254 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 11:09:23.134246577 +0000 UTC m=+41.345112250 I0910 11:09:23.345580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:23.391052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nsmdk" condition "Approved" to 2026-09-10 11:09:23.391030788 +0000 UTC m=+41.601896491 I0910 11:09:23.434503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-nsmdk" condition "Ready" to 2026-09-10 11:09:23.434478985 +0000 UTC m=+41.645344698 I0910 11:09:23.475954 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:09:23.47593151 +0000 UTC m=+41.686797193 I0910 11:09:23.502950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:23.503401 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:09:23.503383153 +0000 UTC m=+41.714248856 I0910 11:09:23.539044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:23.539653 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:09:23.539636515 +0000 UTC m=+41.750502228 I0910 11:11:07.408606 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-10 11:11:07.408439083 +0000 UTC m=+145.619304796 I0910 11:11:07.408995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:11:07.409204 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-10 11:11:07.40918514 +0000 UTC m=+145.620050853 E0910 11:11:07.425633 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:11:07.425773 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-10 11:11:07.425761287 +0000 UTC m=+145.636626980 I0910 11:11:07.425795 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:11:07.429178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:11:07.429283 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:11:07.429476 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-10 11:11:07.429462106 +0000 UTC m=+145.640327849 E0910 11:11:07.439716 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0910 11:11:07.440323 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:11:07.440453 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 11:11:07.440604 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0910 11:11:07.441347 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-10 11:11:07.441331962 +0000 UTC m=+145.652197655 I0910 11:11:07.441695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:11:07.441754 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-10 11:11:07.4417372 +0000 UTC m=+145.652602903 I0910 11:11:07.464534 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:11:07.464745 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:11:07.464796 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-10 11:11:07.464782568 +0000 UTC m=+145.675648271 I0910 11:11:07.628960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:11:07.640197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-cl2vz" condition "Approved" to 2026-09-10 11:11:07.640182406 +0000 UTC m=+145.851048089 I0910 11:11:07.668278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-cl2vz" condition "Ready" to 2026-09-10 11:11:07.668262121 +0000 UTC m=+145.879127804 I0910 11:11:07.696372 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:11:07.696352146 +0000 UTC m=+145.907217809 I0910 11:11:07.709056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-p2p2b" condition "Approved" to 2026-09-10 11:11:07.70903434 +0000 UTC m=+145.919900143 I0910 11:11:07.730478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:11:07.730721 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:11:07.730713706 +0000 UTC m=+145.941579379 I0910 11:11:07.738032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-p2p2b" condition "Ready" to 2026-09-10 11:11:07.738020614 +0000 UTC m=+145.948886277 I0910 11:11:07.749508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:11:07.749701 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:11:07.749695025 +0000 UTC m=+145.960560698 I0910 11:11:12.440501 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:11:12.440487372 +0000 UTC m=+150.651353085 I0910 11:11:12.461044 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-p2p2b" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:11:12.461032405 +0000 UTC m=+150.671898108 I0910 11:11:12.503089 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:11:12.50307197 +0000 UTC m=+150.713937673 I0910 11:11:12.537415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:11:12.596162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:31.728567 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-71.nip.io-tls" condition "Ready" to 2026-09-10 11:14:31.728326351 +0000 UTC m=+349.939192034 I0910 11:14:31.728583 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-71.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:14:31.728689 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-71.nip.io-tls" condition "Issuing" to 2026-09-10 11:14:31.728676989 +0000 UTC m=+349.939542702 I0910 11:14:31.747664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-71.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-71.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:31.747752 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-71.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:14:31.747780 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-71.nip.io-tls" condition "Issuing" to 2026-09-10 11:14:31.74777043 +0000 UTC m=+349.958636143 I0910 11:14:32.380253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-71.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-71.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:32.391403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-71.nip.io-tls-mjxqf" condition "Approved" to 2026-09-10 11:14:32.391388686 +0000 UTC m=+350.602254389 I0910 11:14:32.415946 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-71.nip.io-tls-mjxqf" condition "Ready" to 2026-09-10 11:14:32.415926074 +0000 UTC m=+350.626791777 I0910 11:14:32.457305 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-71.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:14:32.457285585 +0000 UTC m=+350.668151288 I0910 11:14:32.491561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-71.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-71.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:32.492117 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-71.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:14:32.492106695 +0000 UTC m=+350.702972388 I0910 11:14:32.526676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-71.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-71.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:48.453355 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:15:48.453352 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 11:15:48.45333279 +0000 UTC m=+426.664198503 I0910 11:15:48.453416 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 11:15:48.453403341 +0000 UTC m=+426.664269044 E0910 11:15:48.468911 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:15:48.468992 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-10 11:15:48.468977026 +0000 UTC m=+426.679842729 E0910 11:15:48.469093 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:15:48.472067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:48.472143 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:15:48.472163 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 11:15:48.472155704 +0000 UTC m=+426.683021377 E0910 11:15:48.482754 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0910 11:15:48.482922 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:15:48.484622 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:15:48.484730 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0910 11:15:48.520044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-crsrz" condition "Approved" to 2026-09-10 11:15:48.519991814 +0000 UTC m=+426.730857527 I0910 11:15:48.534388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-crsrz" condition "Ready" to 2026-09-10 11:15:48.534376254 +0000 UTC m=+426.745241937 I0910 11:15:48.564786 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:15:48.564766728 +0000 UTC m=+426.775632451 I0910 11:15:48.585939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:48.586234 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:15:48.586226931 +0000 UTC m=+426.797092614 I0910 11:15:48.593452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:48.604458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:53.484038 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:15:53.484007802 +0000 UTC m=+431.694873505 I0910 11:16:35.132156 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 11:16:35.132107068 +0000 UTC m=+473.342972791 I0910 11:16:35.132634 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:16:35.132676 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 11:16:35.132669941 +0000 UTC m=+473.343535644 I0910 11:16:35.144604 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 11:16:35.144593038 +0000 UTC m=+473.355458741 I0910 11:16:35.144688 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:16:35.144735 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 11:16:35.14472635 +0000 UTC m=+473.355592033 I0910 11:16:35.145053 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 11:16:35.145048877 +0000 UTC m=+473.355914550 I0910 11:16:35.145082 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:16:35.145102 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 11:16:35.145097748 +0000 UTC m=+473.355963451 I0910 11:16:35.173860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:35.173942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:16:35.173979 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 11:16:35.173971689 +0000 UTC m=+473.384837392 I0910 11:16:35.174905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:35.174969 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:16:35.175000 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 11:16:35.174994222 +0000 UTC m=+473.385859895 I0910 11:16:35.175969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:35.176041 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 11:16:35.176036214 +0000 UTC m=+473.386901887 I0910 11:16:35.371706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:35.376231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v7lm6" condition "Approved" to 2026-09-10 11:16:35.376221755 +0000 UTC m=+473.587087428 I0910 11:16:35.392873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:35.407084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-v7lm6" condition "Ready" to 2026-09-10 11:16:35.40706962 +0000 UTC m=+473.617935333 I0910 11:16:35.429921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-j6l7k" condition "Approved" to 2026-09-10 11:16:35.429909681 +0000 UTC m=+473.640775354 I0910 11:16:35.451326 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-j6l7k" condition "Ready" to 2026-09-10 11:16:35.451316221 +0000 UTC m=+473.662181894 I0910 11:16:35.467954 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:35.4679448 +0000 UTC m=+473.678810473 I0910 11:16:35.482508 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:35.482498283 +0000 UTC m=+473.693363946 I0910 11:16:35.493110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:35.493332 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:35.493327736 +0000 UTC m=+473.704193409 I0910 11:16:35.503743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:35.510172 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:35.510165939 +0000 UTC m=+473.721031612 I0910 11:16:35.618191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:35.675649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:35.869793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:36.116931 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:36.175132 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8d7w4" condition "Approved" to 2026-09-10 11:16:36.175117527 +0000 UTC m=+474.385983230 I0910 11:16:36.434916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-8d7w4" condition "Ready" to 2026-09-10 11:16:36.43490432 +0000 UTC m=+474.645770013 I0910 11:16:36.720793 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:36.720777016 +0000 UTC m=+474.931642729 I0910 11:16:36.824586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:36.825001 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:36.824991161 +0000 UTC m=+475.035856874 I0910 11:16:37.068346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:37.122612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:43.266367 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls" condition "Ready" to 2026-09-10 11:16:43.266359068 +0000 UTC m=+481.477224741 I0910 11:16:43.266762 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:16:43.266805 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls" condition "Issuing" to 2026-09-10 11:16:43.266800838 +0000 UTC m=+481.477666511 I0910 11:16:43.280299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:43.280386 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls" condition "Ready" to 2026-09-10 11:16:43.28037512 +0000 UTC m=+481.491240833 I0910 11:16:43.403751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:43.452714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mr4xv-pfv4m" condition "Approved" to 2026-09-10 11:16:43.452694481 +0000 UTC m=+481.663560184 I0910 11:16:43.478182 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mr4xv-pfv4m" condition "Ready" to 2026-09-10 11:16:43.478160749 +0000 UTC m=+481.689026462 I0910 11:16:43.513560 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:43.513546281 +0000 UTC m=+481.724411954 I0910 11:16:43.535524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:43.609450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mr4xv-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:17:08.801924 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:17:08.801955 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 11:17:08.801948571 +0000 UTC m=+507.012814234 I0910 11:17:08.802349 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 11:17:08.80234563 +0000 UTC m=+507.013211303 I0910 11:17:08.819773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:17:08.819852 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 11:17:08.819845847 +0000 UTC m=+507.030711520 I0910 11:17:09.122945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:17:09.164276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-96s6v" condition "Approved" to 2026-09-10 11:17:09.164259133 +0000 UTC m=+507.375124836 I0910 11:17:09.189095 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-96s6v" condition "Ready" to 2026-09-10 11:17:09.189084767 +0000 UTC m=+507.399950451 I0910 11:17:09.225113 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:17:09.225091002 +0000 UTC m=+507.435956715 I0910 11:17:09.248109 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:17:09.248689 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:17:09.24867913 +0000 UTC m=+507.459544843 I0910 11:17:09.272045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:20:37.010866 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 11:20:37.010802474 +0000 UTC m=+715.221668187 I0910 11:20:37.011364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:20:37.011474 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 11:20:37.011462329 +0000 UTC m=+715.222328082 I0910 11:20:37.035640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:20:37.035738 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 11:20:37.035727812 +0000 UTC m=+715.246593525 I0910 11:20:37.189575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:20:37.234214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-42cjh" condition "Approved" to 2026-09-10 11:20:37.234197345 +0000 UTC m=+715.445063058 I0910 11:20:37.261000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-42cjh" condition "Ready" to 2026-09-10 11:20:37.260976062 +0000 UTC m=+715.471841765 I0910 11:20:37.292839 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:20:37.292824128 +0000 UTC m=+715.503689811 I0910 11:20:37.331059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:20:37.332804 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:20:37.332786218 +0000 UTC m=+715.543651931 I0910 11:20:37.347793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:20:37.359709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:23:08.340538 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:23:08.340739 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-10 11:23:08.340726422 +0000 UTC m=+866.551592155 I0910 11:23:08.340538 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-10 11:23:08.340478716 +0000 UTC m=+866.551344429 I0910 11:23:08.362866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:23:08.362980 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:23:08.363006 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-10 11:23:08.362999491 +0000 UTC m=+866.573865164 I0910 11:23:08.640212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4r986" condition "Approved" to 2026-09-10 11:23:08.640199068 +0000 UTC m=+866.851064741 I0910 11:23:08.664593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-4r986" condition "Ready" to 2026-09-10 11:23:08.664578824 +0000 UTC m=+866.875444527 I0910 11:23:08.703922 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:23:08.7039064 +0000 UTC m=+866.914772083 I0910 11:23:08.733869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:23:08.789192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:24:18.365282 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:24:18.365334 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-10 11:24:18.365323396 +0000 UTC m=+936.576189099 I0910 11:24:18.365930 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-10 11:24:18.365908518 +0000 UTC m=+936.576774181 I0910 11:24:18.390053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:24:18.390291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:24:18.390339 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-10 11:24:18.390325645 +0000 UTC m=+936.601191348 I0910 11:24:18.629992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-s7xgj" condition "Approved" to 2026-09-10 11:24:18.629980233 +0000 UTC m=+936.840845926 I0910 11:24:18.660993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-s7xgj" condition "Ready" to 2026-09-10 11:24:18.66097941 +0000 UTC m=+936.871845093 I0910 11:24:18.707795 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:24:18.707773418 +0000 UTC m=+936.918639131 I0910 11:24:18.735576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:27:28.382605 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-10 11:27:28.382551098 +0000 UTC m=+1126.593416791 I0910 11:27:28.382817 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:27:28.382937 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-10 11:27:28.382923196 +0000 UTC m=+1126.593788909 I0910 11:27:28.403514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:27:28.403703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:27:28.403737 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-10 11:27:28.403728774 +0000 UTC m=+1126.614594487 I0910 11:27:28.558299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:27:28.565312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8k87x" condition "Approved" to 2026-09-10 11:27:28.565293939 +0000 UTC m=+1126.776159662 I0910 11:27:28.586474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-8k87x" condition "Ready" to 2026-09-10 11:27:28.586464435 +0000 UTC m=+1126.797330108 I0910 11:27:28.621582 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:27:28.62156955 +0000 UTC m=+1126.832435233 I0910 11:27:28.641770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:27:28.642159 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:27:28.642132503 +0000 UTC m=+1126.852998176 I0910 11:27:28.668966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:27:28.669413 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:27:28.669404119 +0000 UTC m=+1126.880269812 I0910 11:33:49.924425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:33:49.924429 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-10 11:33:49.924389042 +0000 UTC m=+1508.135254745 I0910 11:33:49.924508 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-10 11:33:49.924497504 +0000 UTC m=+1508.135363217 I0910 11:33:49.954685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:33:49.954769 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:33:49.954788 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-10 11:33:49.954780976 +0000 UTC m=+1508.165646659 I0910 11:33:50.221852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:33:50.230076 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-gwb7n" condition "Approved" to 2026-09-10 11:33:50.230058402 +0000 UTC m=+1508.440924075 I0910 11:33:50.250847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-gwb7n" condition "Ready" to 2026-09-10 11:33:50.250835959 +0000 UTC m=+1508.461701632 I0910 11:33:50.288280 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:33:50.288255793 +0000 UTC m=+1508.499121466 I0910 11:33:50.317074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:33:50.317495 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:33:50.317487742 +0000 UTC m=+1508.528353405 I0910 11:33:50.340390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:35:21.375221 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-10 11:35:21.37516914 +0000 UTC m=+1599.586034833 I0910 11:35:21.375221 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:35:21.375587 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-10 11:35:21.37557979 +0000 UTC m=+1599.586445463 I0910 11:35:21.393317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:35:21.393529 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-10 11:35:21.393466494 +0000 UTC m=+1599.604332167 I0910 11:35:21.573167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:35:21.607113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-xszkc" condition "Approved" to 2026-09-10 11:35:21.607102146 +0000 UTC m=+1599.817967829 I0910 11:35:21.628965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-xszkc" condition "Ready" to 2026-09-10 11:35:21.628951816 +0000 UTC m=+1599.839817489 I0910 11:35:21.666963 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:35:21.666943163 +0000 UTC m=+1599.877808876 I0910 11:35:21.711982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:35:21.712378 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:35:21.712370159 +0000 UTC m=+1599.923235842 I0910 11:35:21.734846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:35:21.735135 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:35:21.735127998 +0000 UTC m=+1599.945993671 I0910 11:35:21.740821 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:17.469059 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-10 11:36:17.469033073 +0000 UTC m=+1655.679898756 I0910 11:36:17.469298 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:36:17.469367 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-10 11:36:17.46935089 +0000 UTC m=+1655.680216583 I0910 11:36:17.490396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:17.491356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:36:17.491471 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-10 11:36:17.491458135 +0000 UTC m=+1655.702323838 I0910 11:36:17.557041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-mzncm" condition "Approved" to 2026-09-10 11:36:17.557014975 +0000 UTC m=+1655.767880678 I0910 11:36:17.578342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-mzncm" condition "Ready" to 2026-09-10 11:36:17.578326932 +0000 UTC m=+1655.789192605 I0910 11:36:17.618816 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:36:17.618790052 +0000 UTC m=+1655.829655765 I0910 11:36:17.648498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:17.649042 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:36:17.649027721 +0000 UTC m=+1655.859893434 I0910 11:36:17.669301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:18.184559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:36:18.184606 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-10 11:36:18.184597472 +0000 UTC m=+1656.395463185 I0910 11:36:18.184566 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-10 11:36:18.184544571 +0000 UTC m=+1656.395410284 I0910 11:36:18.208297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:18.208377 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:36:18.208400 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-10 11:36:18.208393523 +0000 UTC m=+1656.419259196 I0910 11:36:18.276019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:18.282066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hnv86" condition "Approved" to 2026-09-10 11:36:18.282040445 +0000 UTC m=+1656.492906158 I0910 11:36:18.305308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hnv86" condition "Ready" to 2026-09-10 11:36:18.305293016 +0000 UTC m=+1656.516158699 I0910 11:36:18.337976 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:36:18.337957607 +0000 UTC m=+1656.548823290 I0910 11:36:18.368552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:18.369397 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:36:18.369383613 +0000 UTC m=+1656.580249306 I0910 11:36:18.382447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:18.399614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:18.966772 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-10 11:36:18.9667568 +0000 UTC m=+1657.177622483 I0910 11:36:19.666460 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-10 11:36:19.666445217 +0000 UTC m=+1657.877310930 I0910 11:37:08.595699 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-10 11:37:08.595682729 +0000 UTC m=+1706.806548402 I0910 11:37:08.596155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:37:08.596216 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-10 11:37:08.59620302 +0000 UTC m=+1706.807068693 I0910 11:37:08.623567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:37:08.623643 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:37:08.623664 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-10 11:37:08.623654831 +0000 UTC m=+1706.834520504 I0910 11:37:09.922612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-5h4jv" condition "Approved" to 2026-09-10 11:37:09.922597065 +0000 UTC m=+1708.133462738 I0910 11:37:09.995588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-5h4jv" condition "Ready" to 2026-09-10 11:37:09.995578093 +0000 UTC m=+1708.206443766 I0910 11:37:10.037947 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:37:10.037929744 +0000 UTC m=+1708.248795417 I0910 11:37:10.065846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:37:10.066279 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:37:10.066272083 +0000 UTC m=+1708.277137756 I0910 11:37:10.083692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:37:10.084056 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:37:10.084047975 +0000 UTC m=+1708.294913648 I0910 11:39:58.856728 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-10 11:39:58.856494666 +0000 UTC m=+1877.067360369 I0910 11:39:58.856895 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:39:58.856948 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-10 11:39:58.856939856 +0000 UTC m=+1877.067805539 I0910 11:39:58.883647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:39:58.883830 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-10 11:39:58.883817963 +0000 UTC m=+1877.094683626 I0910 11:39:59.069042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:39:59.107288 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-r4kvx" condition "Approved" to 2026-09-10 11:39:59.107271906 +0000 UTC m=+1877.318137579 I0910 11:39:59.128930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-r4kvx" condition "Ready" to 2026-09-10 11:39:59.128915841 +0000 UTC m=+1877.339781544 I0910 11:39:59.166346 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:39:59.166314285 +0000 UTC m=+1877.377179988 I0910 11:39:59.199714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:39:59.200144 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:39:59.200133051 +0000 UTC m=+1877.410998744 I0910 11:39:59.212069 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:39:59.223505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:39:59.223872 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:39:59.223857292 +0000 UTC m=+1877.434722965 I0910 11:39:59.224434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:40:00.340531 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-10 11:40:00.340519128 +0000 UTC m=+1878.551384811 I0910 11:40:00.341077 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:40:00.341108 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-10 11:40:00.341102641 +0000 UTC m=+1878.551968334 I0910 11:40:00.360833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:40:00.361027 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:40:00.361275 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-10 11:40:00.361262445 +0000 UTC m=+1878.572128158 I0910 11:40:00.557285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-ng5vb" condition "Approved" to 2026-09-10 11:40:00.557266477 +0000 UTC m=+1878.768132190 I0910 11:40:00.635320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-ng5vb" condition "Ready" to 2026-09-10 11:40:00.635309813 +0000 UTC m=+1878.846175486 I0910 11:40:00.669621 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:40:00.669607231 +0000 UTC m=+1878.880472914 I0910 11:40:00.693080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:40:00.736601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:43:23.662682 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-10 11:43:23.662630557 +0000 UTC m=+2081.873496240 I0910 11:43:23.663271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:43:23.663305 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-10 11:43:23.663294511 +0000 UTC m=+2081.874160184 I0910 11:43:23.679867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:43:23.679960 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:43:23.679978 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-10 11:43:23.679971389 +0000 UTC m=+2081.890837062 I0910 11:43:23.978054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-d6k2w" condition "Approved" to 2026-09-10 11:43:23.978025326 +0000 UTC m=+2082.188891039 I0910 11:43:23.998128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-d6k2w" condition "Ready" to 2026-09-10 11:43:23.998113027 +0000 UTC m=+2082.208978700 I0910 11:43:24.039867 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:43:24.039851863 +0000 UTC m=+2082.250717536 I0910 11:43:24.066456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:44:08.516996 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lcqjj-vnc" condition "Ready" to 2026-09-10 11:44:08.516976531 +0000 UTC m=+2126.727842194 I0910 11:44:08.517379 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lcqjj-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:44:08.517442 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lcqjj-vnc" condition "Issuing" to 2026-09-10 11:44:08.51742712 +0000 UTC m=+2126.728292833 I0910 11:44:08.534003 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lcqjj-api" condition "Ready" to 2026-09-10 11:44:08.533985826 +0000 UTC m=+2126.744851519 I0910 11:44:08.534600 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lcqjj-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:44:08.534684 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lcqjj-api" condition "Issuing" to 2026-09-10 11:44:08.534672161 +0000 UTC m=+2126.745537834 I0910 11:44:08.556272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lcqjj-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lcqjj-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:44:08.556331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lcqjj-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:44:08.556345 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lcqjj-vnc" condition "Issuing" to 2026-09-10 11:44:08.556338445 +0000 UTC m=+2126.767204118 I0910 11:44:08.560035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lcqjj-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lcqjj-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:44:08.560077 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-lcqjj-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:44:08.560087 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-lcqjj-api" condition "Issuing" to 2026-09-10 11:44:08.560084676 +0000 UTC m=+2126.770950339 I0910 11:44:08.893190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-lcqjj-vnc-mf2z9" condition "Approved" to 2026-09-10 11:44:08.893176325 +0000 UTC m=+2127.104041998 I0910 11:44:08.927543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-lcqjj-vnc-mf2z9" condition "Ready" to 2026-09-10 11:44:08.927531373 +0000 UTC m=+2127.138397046 I0910 11:44:08.988527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-lcqjj-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lcqjj-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:44:08.992671 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-lcqjj-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:44:08.99264667 +0000 UTC m=+2127.203512363 I0910 11:44:09.000976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-lcqjj-api-cl5dv" condition "Approved" to 2026-09-10 11:44:09.000958918 +0000 UTC m=+2127.211824601 I0910 11:44:09.023175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-lcqjj-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lcqjj-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:44:09.024533 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-lcqjj-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:44:09.024524974 +0000 UTC m=+2127.235390647 I0910 11:44:09.034284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-lcqjj-api-cl5dv" condition "Ready" to 2026-09-10 11:44:09.034247903 +0000 UTC m=+2127.245113576 I0910 11:44:09.115440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-lcqjj-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lcqjj-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:44:09.143653 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-lcqjj-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:44:09.143638481 +0000 UTC m=+2127.354504154 I0910 11:44:09.186374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-lcqjj-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-lcqjj-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:48:16.451889 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-10 11:48:16.451816194 +0000 UTC m=+2374.662681897 I0910 11:48:16.452676 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:48:16.452792 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-10 11:48:16.452780535 +0000 UTC m=+2374.663646238 I0910 11:48:16.476281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:48:16.476390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:48:16.476415 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-10 11:48:16.47640464 +0000 UTC m=+2374.687270353 I0910 11:48:16.759892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-m5n29" condition "Approved" to 2026-09-10 11:48:16.759876872 +0000 UTC m=+2374.970742555 I0910 11:48:16.784104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-m5n29" condition "Ready" to 2026-09-10 11:48:16.78409439 +0000 UTC m=+2374.994960063 I0910 11:48:16.821378 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:48:16.821364987 +0000 UTC m=+2375.032230660 I0910 11:48:16.855374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:48:18.105365 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:48:18.105400 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-10 11:48:18.105391645 +0000 UTC m=+2376.316257318 I0910 11:48:18.105774 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-10 11:48:18.105769834 +0000 UTC m=+2376.316635507 I0910 11:48:18.127440 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:48:18.127516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:48:18.127530 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-10 11:48:18.127525218 +0000 UTC m=+2376.338390891 I0910 11:48:18.376686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-v8rgn" condition "Approved" to 2026-09-10 11:48:18.376670816 +0000 UTC m=+2376.587536529 I0910 11:48:18.406052 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-v8rgn" condition "Ready" to 2026-09-10 11:48:18.406038855 +0000 UTC m=+2376.616904548 I0910 11:48:18.452415 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:48:18.452402496 +0000 UTC m=+2376.663268169 I0910 11:48:18.484302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:48:18.486960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:48:18.487764 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:48:18.487756862 +0000 UTC m=+2376.698622545 I0910 11:48:18.503686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:48:18.504141 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:48:18.504132193 +0000 UTC m=+2376.714997876 I0910 11:48:18.507638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:38.100444 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-10 11:50:38.10042892 +0000 UTC m=+2516.311294603 I0910 11:50:38.100530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:50:38.100574 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-10 11:50:38.100562673 +0000 UTC m=+2516.311428386 E0910 11:50:38.118316 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:50:38.118406 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-10 11:50:38.118395206 +0000 UTC m=+2516.329260919 I0910 11:50:38.118435 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:50:38.123151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:38.123258 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:50:38.123365 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-10 11:50:38.123272249 +0000 UTC m=+2516.334137922 E0910 11:50:38.133616 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0910 11:50:38.134275 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:50:38.134311 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 11:50:38.134376 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0910 11:50:38.183041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-nnw2m" condition "Approved" to 2026-09-10 11:50:38.18302026 +0000 UTC m=+2516.393885963 I0910 11:50:38.212767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-nnw2m" condition "Ready" to 2026-09-10 11:50:38.212752847 +0000 UTC m=+2516.423618550 I0910 11:50:38.256537 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:50:38.256520905 +0000 UTC m=+2516.467386618 I0910 11:50:38.292629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:38.343684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:38.883374 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-10 11:50:38.883354237 +0000 UTC m=+2517.094219940 I0910 11:50:38.883944 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:50:38.883976 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-10 11:50:38.88396994 +0000 UTC m=+2517.094835653 E0910 11:50:38.906710 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:50:38.906760 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-10 11:50:38.906751538 +0000 UTC m=+2517.117617221 I0910 11:50:38.906848 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 11:50:38.918849 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0910 11:50:38.919050 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:50:38.919101 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 11:50:38.919138 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0910 11:50:38.921094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:38.921323 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-10 11:50:38.921262419 +0000 UTC m=+2517.132128092 I0910 11:50:38.935981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:38.936096 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-10 11:50:38.936088708 +0000 UTC m=+2517.146954391 I0910 11:50:38.943365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-7bpn5" condition "Approved" to 2026-09-10 11:50:38.943353413 +0000 UTC m=+2517.154219076 I0910 11:50:38.974947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-7bpn5" condition "Ready" to 2026-09-10 11:50:38.974938029 +0000 UTC m=+2517.185803702 I0910 11:50:39.020658 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:50:39.020643439 +0000 UTC m=+2517.231509112 I0910 11:50:39.045358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:39.698581 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-10 11:50:39.698554916 +0000 UTC m=+2517.909420589 I0910 11:50:39.698588 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:50:39.699066 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-10 11:50:39.699048626 +0000 UTC m=+2517.909914339 I0910 11:50:39.717935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:39.718131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:50:39.718170 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-10 11:50:39.718161096 +0000 UTC m=+2517.929026779 I0910 11:50:39.770024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-sdnqg" condition "Approved" to 2026-09-10 11:50:39.770009726 +0000 UTC m=+2517.980875399 I0910 11:50:39.793408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-sdnqg" condition "Ready" to 2026-09-10 11:50:39.793394048 +0000 UTC m=+2518.004259721 I0910 11:50:43.134313 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:50:43.134300149 +0000 UTC m=+2521.345165832 I0910 11:50:43.144701 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-sdnqg" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:50:43.144687261 +0000 UTC m=+2521.355552934 I0910 11:50:43.175902 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:50:43.17587474 +0000 UTC m=+2521.386740453 I0910 11:50:43.198403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:43.198764 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:50:43.1987558 +0000 UTC m=+2521.409621473 I0910 11:50:43.210379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:43.225907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:43.923081 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:50:43.923063141 +0000 UTC m=+2522.133928834 I0910 11:53:10.657178 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-10 11:53:10.657145282 +0000 UTC m=+2668.868011005 I0910 11:53:10.658368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:53:10.658409 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-10 11:53:10.65840167 +0000 UTC m=+2668.869267373 I0910 11:53:10.682810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:10.682923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:53:10.682951 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-10 11:53:10.682940305 +0000 UTC m=+2668.893806018 I0910 11:53:11.015018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-bmpbn" condition "Approved" to 2026-09-10 11:53:11.015002101 +0000 UTC m=+2669.225867784 I0910 11:53:11.050503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-bmpbn" condition "Ready" to 2026-09-10 11:53:11.050491152 +0000 UTC m=+2669.261356825 I0910 11:53:11.143232 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:53:11.143222219 +0000 UTC m=+2669.354087892 I0910 11:53:11.202741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:11.203206 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:53:11.203198633 +0000 UTC m=+2669.414064306 I0910 11:53:11.231336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:11.232134 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:53:11.232124333 +0000 UTC m=+2669.442990006 I0910 11:53:11.235322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:58.964737 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-10 11:53:58.964678022 +0000 UTC m=+2717.175543725 I0910 11:53:58.999230 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:53:58.999258 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-10 11:53:58.999194652 +0000 UTC m=+2717.210060345 I0910 11:53:58.999285 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-10 11:53:58.999275004 +0000 UTC m=+2717.210140687 I0910 11:53:59.027095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:59.027169 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-10 11:53:59.027158021 +0000 UTC m=+2717.238023694 E0910 11:53:59.044107 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0910 11:53:59.123805 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-10 11:53:59.123759121 +0000 UTC m=+2717.334624794 E0910 11:53:59.149711 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0910 11:53:59.150741 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:53:59.150781 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-10 11:53:59.15077176 +0000 UTC m=+2717.361637443 I0910 11:53:59.150790 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-10 11:53:59.15077848 +0000 UTC m=+2717.361644153 I0910 11:53:59.177153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:59.177369 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-10 11:53:59.177355219 +0000 UTC m=+2717.388220912 I0910 11:53:59.560316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:59.633552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-p6n6p" condition "Approved" to 2026-09-10 11:53:59.633538865 +0000 UTC m=+2717.844404538 I0910 11:53:59.669561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-p6n6p" condition "Ready" to 2026-09-10 11:53:59.669541576 +0000 UTC m=+2717.880407249 I0910 11:53:59.735290 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:53:59.735273444 +0000 UTC m=+2717.946139127 I0910 11:53:59.769703 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:59.849372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:54:00.111110 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-10 11:54:00.111094808 +0000 UTC m=+2718.321960481 I0910 11:54:00.136010 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-10 11:54:00.135994402 +0000 UTC m=+2718.346860075 I0910 11:54:00.136044 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:54:00.136121 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-10 11:54:00.136113624 +0000 UTC m=+2718.346979297 I0910 11:54:00.156362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:54:00.156462 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-10 11:54:00.15645435 +0000 UTC m=+2718.367320013 I0910 11:54:00.421556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:54:00.465607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-2nhgj" condition "Approved" to 2026-09-10 11:54:00.465583614 +0000 UTC m=+2718.676449287 I0910 11:54:00.491442 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-2nhgj" condition "Ready" to 2026-09-10 11:54:00.491432618 +0000 UTC m=+2718.702298281 I0910 11:54:00.530693 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:54:00.530680889 +0000 UTC m=+2718.741546562 I0910 11:54:00.567400 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:54:00.654837 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-10 11:54:00.65482046 +0000 UTC m=+2718.865686143 I0910 11:54:00.673287 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-10 11:54:00.673275024 +0000 UTC m=+2718.884140707 I0910 11:54:00.673627 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:54:00.673664 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-10 11:54:00.673657872 +0000 UTC m=+2718.884523545 I0910 11:54:00.693142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:54:00.693229 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-10 11:54:00.693221562 +0000 UTC m=+2718.904087245 I0910 11:54:00.880656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:54:00.927443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-tnqc7" condition "Approved" to 2026-09-10 11:54:00.927432911 +0000 UTC m=+2719.138298584 I0910 11:54:00.969165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-tnqc7" condition "Ready" to 2026-09-10 11:54:00.969146935 +0000 UTC m=+2719.180012658 I0910 11:54:01.048508 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:54:01.048494045 +0000 UTC m=+2719.259359718 I0910 11:54:01.119627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:54:01.243954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:54:01.280748 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-10 11:54:01.280734732 +0000 UTC m=+2719.491600405 I0910 11:54:01.309230 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-10 11:54:01.309201281 +0000 UTC m=+2719.520066994 I0910 11:54:01.309685 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:54:01.309711 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-10 11:54:01.309707003 +0000 UTC m=+2719.520572676 I0910 11:54:01.351422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:54:01.351731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:54:01.351807 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-10 11:54:01.351798785 +0000 UTC m=+2719.562664458 I0910 11:54:01.868670 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-64ztm" condition "Approved" to 2026-09-10 11:54:01.86865537 +0000 UTC m=+2720.079521053 I0910 11:54:01.873384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:54:01.924455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-64ztm" condition "Ready" to 2026-09-10 11:54:01.924438625 +0000 UTC m=+2720.135304298 I0910 11:54:02.255908 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:54:02.255893578 +0000 UTC m=+2720.466759251 I0910 11:54:02.401441 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:54:02.401893 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:54:02.401883336 +0000 UTC m=+2720.612748999 I0910 11:54:02.601237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"