I0526 08:17:32.455895       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0526 08:17:32.456068       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0526 08:17:32.456250       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0526 08:17:32.462875       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0526 08:17:32.463733       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0526 08:17:32.463760       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0526 08:17:32.463793       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0526 08:17:32.468071       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0526 08:17:32.482574       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0526 08:17:32.487293       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0526 08:17:32.487545       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0526 08:17:32.490372       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0526 08:17:32.495117       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0526 08:17:32.499054       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0526 08:17:32.499177       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0526 08:17:32.502777       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0526 08:17:32.502888       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0526 08:17:32.504740       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0526 08:17:32.506618       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0526 08:17:32.508297       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0526 08:17:32.510074       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0526 08:17:32.510096       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0526 08:17:32.510229       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0526 08:17:32.512824       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0526 08:17:32.518358       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0526 08:17:32.521903       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0526 08:17:32.524528       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0526 08:17:32.524629       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0526 08:17:32.527103       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0526 08:17:32.529634       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0526 08:17:32.532108       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0526 08:17:32.534635       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0526 08:17:32.538829       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0526 08:17:32.540350       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0526 08:17:32.542628       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0526 08:17:32.543197       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0526 08:17:32.555668       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0526 08:17:32.574131       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0526 08:17:32.595786       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0526 08:17:32.606571       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0526 08:17:32.624350       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0526 08:17:32.639834       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0526 08:17:32.675080       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0526 08:18:14.576286       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-26 08:18:14.576271358 +0000 UTC m=+42.150042390
I0526 08:18:15.376780       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-26 08:18:15.376764188 +0000 UTC m=+42.950535190
I0526 08:18:15.376924       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:18:15.377002       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-26 08:18:15.376989684 +0000 UTC m=+42.950760736
E0526 08:18:15.394170       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0526 08:18:15.394296       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-26 08:18:15.394280051 +0000 UTC m=+42.968051093
E0526 08:18:15.394344       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0526 08:18:15.395750       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:15.395839       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:18:15.395870       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-26 08:18:15.395862211 +0000 UTC m=+42.969633253
E0526 08:18:15.410167       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0526 08:18:15.410278       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0526 08:18:15.410312       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0526 08:18:15.410355       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0526 08:18:15.443754       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jwztf" condition "Approved" to 2026-05-26 08:18:15.443737749 +0000 UTC m=+43.017508761
I0526 08:18:15.457983       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-jwztf" condition "Ready" to 2026-05-26 08:18:15.457965537 +0000 UTC m=+43.031736549
I0526 08:18:15.483105       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:15.483089526 +0000 UTC m=+43.056860528
I0526 08:18:15.504678       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:15.505106       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:15.505097786 +0000 UTC m=+43.078868798
I0526 08:18:15.526852       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:15.527138       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:15.527129476 +0000 UTC m=+43.100900488
I0526 08:18:15.535836       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:20.313276       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-26 08:18:20.313251859 +0000 UTC m=+47.887022951
I0526 08:18:20.313787       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:18:20.313825       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-26 08:18:20.313817524 +0000 UTC m=+47.887588556
I0526 08:18:20.325791       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-26 08:18:20.325774153 +0000 UTC m=+47.899545165
I0526 08:18:20.332964       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:20.333015       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:18:20.333031       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-26 08:18:20.3330263 +0000 UTC m=+47.906797302
I0526 08:18:20.411269       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:20.411250732 +0000 UTC m=+47.985021774
I0526 08:18:20.596584       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wkk98" condition "Approved" to 2026-05-26 08:18:20.596565749 +0000 UTC m=+48.170336781
I0526 08:18:20.626659       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wkk98" condition "Ready" to 2026-05-26 08:18:20.626641756 +0000 UTC m=+48.200412788
I0526 08:18:20.660907       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:20.660889041 +0000 UTC m=+48.234660053
I0526 08:18:20.679360       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:25.878858       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-26 08:18:25.878822716 +0000 UTC m=+53.452593758
I0526 08:18:25.879468       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:18:25.879501       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-26 08:18:25.879493964 +0000 UTC m=+53.453265006
E0526 08:18:25.892765       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0526 08:18:25.892815       1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-26 08:18:25.892808367 +0000 UTC m=+53.466579379
I0526 08:18:25.892855       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0526 08:18:25.896018       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:25.896070       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:18:25.896091       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-26 08:18:25.896085673 +0000 UTC m=+53.469856685
E0526 08:18:25.902398       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
E0526 08:18:25.902488       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0526 08:18:25.902517       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0526 08:18:25.902548       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
I0526 08:18:25.905455       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-26 08:18:25.905440344 +0000 UTC m=+53.479211356
I0526 08:18:25.905959       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:18:25.906038       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-26 08:18:25.905996068 +0000 UTC m=+53.479767090
I0526 08:18:25.920686       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:25.920756       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:18:25.920774       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-26 08:18:25.92076742 +0000 UTC m=+53.494538422
I0526 08:18:26.047665       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:26.055331       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-n82k2" condition "Approved" to 2026-05-26 08:18:26.055308046 +0000 UTC m=+53.629079058
I0526 08:18:26.063148       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-sdq45" condition "Approved" to 2026-05-26 08:18:26.063128668 +0000 UTC m=+53.636899710
I0526 08:18:26.080943       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-sdq45" condition "Ready" to 2026-05-26 08:18:26.080923138 +0000 UTC m=+53.654694180
I0526 08:18:26.083096       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-n82k2" condition "Ready" to 2026-05-26 08:18:26.083083813 +0000 UTC m=+53.656854825
I0526 08:18:26.132584       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:26.132562372 +0000 UTC m=+53.706333374
I0526 08:18:26.153123       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:26.153754       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:26.153740149 +0000 UTC m=+53.727511181
I0526 08:18:26.164312       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:26.171241       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:26.414062       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-26 08:18:26.414047384 +0000 UTC m=+53.987818386
I0526 08:18:26.414430       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:18:26.414450       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-26 08:18:26.414446365 +0000 UTC m=+53.988217377
I0526 08:18:26.432195       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:26.432277       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:18:26.432297       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-26 08:18:26.432289236 +0000 UTC m=+54.006060278
I0526 08:18:26.476953       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-8cs2l" condition "Approved" to 2026-05-26 08:18:26.476937209 +0000 UTC m=+54.050708211
I0526 08:18:26.746405       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-8cs2l" condition "Ready" to 2026-05-26 08:18:26.74639144 +0000 UTC m=+54.320162482
I0526 08:18:27.047159       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:27.04714064 +0000 UTC m=+54.620911682
I0526 08:18:27.102809       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:27.103194       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:27.103181448 +0000 UTC m=+54.676952490
I0526 08:18:27.157211       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-26 08:18:27.157192944 +0000 UTC m=+54.730963976
I0526 08:18:27.157393       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:18:27.157421       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-26 08:18:27.157414649 +0000 UTC m=+54.731185691
I0526 08:18:27.236639       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:27.338046       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:27.338153       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:18:27.338193       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-26 08:18:27.338182059 +0000 UTC m=+54.911953141
I0526 08:18:27.707624       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hvkfj" condition "Approved" to 2026-05-26 08:18:27.707598273 +0000 UTC m=+55.281369325
I0526 08:18:27.770900       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hvkfj" condition "Ready" to 2026-05-26 08:18:27.770889759 +0000 UTC m=+55.344660771
I0526 08:18:27.996730       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-26 08:18:27.996718043 +0000 UTC m=+55.570489055
I0526 08:18:28.337629       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:28.33761595 +0000 UTC m=+55.911386952
I0526 08:18:28.490243       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:28.490546       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:28.490537671 +0000 UTC m=+56.064308673
I0526 08:18:28.686658       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:28.872863       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-26 08:18:28.872844938 +0000 UTC m=+56.446615970
I0526 08:18:30.903269       1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:30.903251615 +0000 UTC m=+58.477022647
I0526 08:18:32.703573       1 conditions.go:252] Found status change for CertificateRequest "valkey-server-sdq45" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:32.703546726 +0000 UTC m=+60.277317738
I0526 08:18:35.217115       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:35.217103495 +0000 UTC m=+62.790874517
I0526 08:18:35.239453       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:35.240076       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:35.240061108 +0000 UTC m=+62.813832140
I0526 08:18:35.244085       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:35.261072       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:18:35.261321       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:18:35.261315098 +0000 UTC m=+62.835086100
I0526 08:22:53.109800       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-140.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:22:53.109828       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Issuing" to 2026-05-26 08:22:53.109821832 +0000 UTC m=+320.683592844
I0526 08:22:53.110172       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready" to 2026-05-26 08:22:53.110155831 +0000 UTC m=+320.683926883
I0526 08:22:53.129410       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:22:53.129470       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready" to 2026-05-26 08:22:53.129464459 +0000 UTC m=+320.703235491
I0526 08:22:53.248500       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:22:53.279804       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-140.nip.io-tls-445lm" condition "Approved" to 2026-05-26 08:22:53.279793149 +0000 UTC m=+320.853564161
I0526 08:22:53.300592       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-140.nip.io-tls-445lm" condition "Ready" to 2026-05-26 08:22:53.300579495 +0000 UTC m=+320.874350537
I0526 08:22:53.334119       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:22:53.33410878 +0000 UTC m=+320.907879782
I0526 08:22:53.354565       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:22:53.354926       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:22:53.354920606 +0000 UTC m=+320.928691608
I0526 08:22:53.372434       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:24:05.687531       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:24:05.687562       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-26 08:24:05.687503869 +0000 UTC m=+393.261274901
I0526 08:24:05.687584       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-26 08:24:05.687575341 +0000 UTC m=+393.261346373
E0526 08:24:05.698636       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0526 08:24:05.698682       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-26 08:24:05.698674186 +0000 UTC m=+393.272445198
E0526 08:24:05.698723       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0526 08:24:05.701705       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:24:05.701810       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0526 08:24:05.701833       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-26 08:24:05.701826617 +0000 UTC m=+393.275597629
E0526 08:24:05.706427       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0526 08:24:05.706531       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0526 08:24:05.706585       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0526 08:24:05.706657       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0526 08:24:05.739466       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:24:05.744436       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-t4t8q" condition "Approved" to 2026-05-26 08:24:05.744425303 +0000 UTC m=+393.318196315
I0526 08:24:05.758252       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-t4t8q" condition "Ready" to 2026-05-26 08:24:05.758240189 +0000 UTC m=+393.332011201
I0526 08:24:05.779845       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:24:05.779828895 +0000 UTC m=+393.353599917
I0526 08:24:05.796703       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:24:05.796997       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:24:05.796987806 +0000 UTC m=+393.370758818
I0526 08:24:05.801703       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:24:05.809593       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0526 08:24:10.707565       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-26 08:24:10.707553509 +0000 UTC m=+398.281324511