I0902 16:28:21.630675 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0902 16:28:21.630866 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0902 16:28:21.635614 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0902 16:28:21.635649 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0902 16:28:21.635658 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0902 16:28:21.635997 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0902 16:28:21.636037 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0902 16:28:21.636103 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0902 16:28:21.638609 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0902 16:28:21.653226 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0902 16:28:21.653500 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0902 16:28:21.653559 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0902 16:28:21.660317 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0902 16:28:21.665425 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0902 16:28:21.670566 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0902 16:28:21.674461 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0902 16:28:21.679098 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0902 16:28:21.683563 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0902 16:28:21.683645 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0902 16:28:21.687317 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0902 16:28:21.690936 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0902 16:28:21.694883 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0902 16:28:21.698560 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0902 16:28:21.702458 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0902 16:28:21.702486 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0902 16:28:21.702570 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0902 16:28:21.709423 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0902 16:28:21.709481 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0902 16:28:21.713939 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0902 16:28:21.717311 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0902 16:28:21.721063 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0902 16:28:21.724690 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0902 16:28:21.728588 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0902 16:28:21.732514 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0902 16:28:21.734320 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 16:28:21.735502 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 16:28:21.737489 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 16:28:21.737801 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 16:28:21.738376 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 16:28:21.738956 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 16:28:21.756274 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 16:28:21.777306 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 16:28:21.801578 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 16:28:21.825848 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 16:28:21.847792 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0902 16:28:38.059308 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-02 16:28:38.059257897 +0000 UTC m=+16.457188655 I0902 16:28:38.828373 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:28:38.828434 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-02 16:28:38.828422464 +0000 UTC m=+17.226353222 I0902 16:28:38.828489 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-02 16:28:38.828478355 +0000 UTC m=+17.226409113 E0902 16:28:38.845079 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0902 16:28:38.845138 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-02 16:28:38.845129617 +0000 UTC m=+17.243060385 E0902 16:28:38.845228 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0902 16:28:38.845699 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:28:38.845814 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-02 16:28:38.845801732 +0000 UTC m=+17.243732490 E0902 16:28:38.855862 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0902 16:28:38.856419 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 16:28:38.857110 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 16:28:38.857256 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0902 16:28:38.861272 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:28:38.900464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-02 16:28:38.90044693 +0000 UTC m=+17.298377688 I0902 16:28:38.928165 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-02 16:28:38.928147522 +0000 UTC m=+17.326078280 I0902 16:28:38.957202 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:28:38.957184983 +0000 UTC m=+17.355115751 I0902 16:28:38.975042 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:28:38.975496 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:28:38.97548777 +0000 UTC m=+17.373418528 I0902 16:28:38.991593 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:28:38.991631 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:28:43.857082 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:28:43.85706775 +0000 UTC m=+22.254998508 I0902 16:29:07.509047 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-02 16:29:07.509029124 +0000 UTC m=+45.906959892 I0902 16:29:07.509205 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:29:07.509357 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-02 16:29:07.509342111 +0000 UTC m=+45.907272889 I0902 16:29:07.519826 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-02 16:29:07.519810568 +0000 UTC m=+45.917741326 I0902 16:29:07.526602 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:29:07.527690 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-02 16:29:07.527674089 +0000 UTC m=+45.925604857 I0902 16:29:07.682024 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:29:07.710914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-02 16:29:07.710899581 +0000 UTC m=+46.108830309 I0902 16:29:07.743863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-02 16:29:07.743847228 +0000 UTC m=+46.141777986 I0902 16:29:07.771589 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:29:07.77154249 +0000 UTC m=+46.169473248 I0902 16:29:07.785358 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:29:07.835758 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:30:57.321924 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:30:57.321966 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-02 16:30:57.321955828 +0000 UTC m=+155.719886586 I0902 16:30:57.322079 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-02 16:30:57.32205777 +0000 UTC m=+155.719988528 E0902 16:30:57.333412 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0902 16:30:57.333538 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-02 16:30:57.333526367 +0000 UTC m=+155.731457125 I0902 16:30:57.333601 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0902 16:30:57.334867 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:30:57.334968 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-02 16:30:57.334958417 +0000 UTC m=+155.732889185 I0902 16:30:57.342921 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:30:57.342956 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-02 16:30:57.34294947 +0000 UTC m=+155.740880238 I0902 16:30:57.343197 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-02 16:30:57.343175595 +0000 UTC m=+155.741106403 E0902 16:30:57.344366 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" E0902 16:30:57.344456 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0902 16:30:57.344492 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0902 16:30:57.344541 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" I0902 16:30:57.356957 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:30:57.357098 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-02 16:30:57.357084825 +0000 UTC m=+155.755015623 I0902 16:30:57.505584 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:30:57.538638 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-09-02 16:30:57.538622764 +0000 UTC m=+155.936553532 I0902 16:30:57.560458 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:30:57.565243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-09-02 16:30:57.565225049 +0000 UTC m=+155.963155817 I0902 16:30:57.587186 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-09-02 16:30:57.587176313 +0000 UTC m=+155.985107031 I0902 16:30:57.590700 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:30:57.590682619 +0000 UTC m=+155.988613387 I0902 16:30:57.601163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-09-02 16:30:57.601150744 +0000 UTC m=+155.999081472 I0902 16:30:57.603663 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:30:57.604027 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:30:57.604022276 +0000 UTC m=+156.001953004 I0902 16:30:57.617802 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:31:02.345154 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:31:02.345140297 +0000 UTC m=+160.743071055 I0902 16:31:02.359870 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:31:02.359852804 +0000 UTC m=+160.757783572 I0902 16:31:02.388735 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:31:02.388722097 +0000 UTC m=+160.786652865 I0902 16:31:02.403180 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:31:02.404010 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:31:02.403999027 +0000 UTC m=+160.801929765 I0902 16:31:02.418535 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:31:02.427767 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:34:19.971594 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-140.nip.io-tls" condition "Ready" to 2026-09-02 16:34:19.971568813 +0000 UTC m=+358.369499581 I0902 16:34:19.971593 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-140.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:34:19.971800 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-140.nip.io-tls" condition "Issuing" to 2026-09-02 16:34:19.971781338 +0000 UTC m=+358.369712106 I0902 16:34:19.990683 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:34:19.990793 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-140.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:34:19.990822 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-140.nip.io-tls" condition "Issuing" to 2026-09-02 16:34:19.990811943 +0000 UTC m=+358.388742701 I0902 16:34:20.255733 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:34:20.273903 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-140.nip.io-tls-1" condition "Approved" to 2026-09-02 16:34:20.273885529 +0000 UTC m=+358.671816287 I0902 16:34:20.291688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-140.nip.io-tls-1" condition "Ready" to 2026-09-02 16:34:20.291678438 +0000 UTC m=+358.689609176 I0902 16:34:20.318013 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:34:20.31800083 +0000 UTC m=+358.715931568 I0902 16:34:20.332159 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:34:20.332627 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-140.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:34:20.332622441 +0000 UTC m=+358.730553179 I0902 16:34:20.347141 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:34:20.362713 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-140.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-140.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:35:34.648374 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:35:34.648486 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-02 16:35:34.648478445 +0000 UTC m=+433.046409203 I0902 16:35:34.648470 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-02 16:35:34.648444064 +0000 UTC m=+433.046374822 E0902 16:35:34.665913 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0902 16:35:34.666063 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-02 16:35:34.666008301 +0000 UTC m=+433.063939059 E0902 16:35:34.666104 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0902 16:35:34.670313 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:35:34.670471 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:35:34.670683 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-02 16:35:34.670606509 +0000 UTC m=+433.068537317 E0902 16:35:34.676827 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0902 16:35:34.677235 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 16:35:34.677342 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0902 16:35:34.677456 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0902 16:35:34.715175 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:35:34.724022 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-02 16:35:34.723993503 +0000 UTC m=+433.121924281 I0902 16:35:34.743124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-02 16:35:34.743101722 +0000 UTC m=+433.141032490 I0902 16:35:34.772958 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:35:34.772936742 +0000 UTC m=+433.170867510 I0902 16:35:34.785981 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:35:34.786556 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:35:34.786516894 +0000 UTC m=+433.184447652 I0902 16:35:34.800964 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:35:39.677563 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:35:39.677470142 +0000 UTC m=+438.075400910 I0902 16:36:20.518367 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:36:20.518400 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-02 16:36:20.518392312 +0000 UTC m=+478.916323050 I0902 16:36:20.519307 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-02 16:36:20.519289311 +0000 UTC m=+478.917220049 I0902 16:36:20.519615 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-02 16:36:20.519610688 +0000 UTC m=+478.917541426 I0902 16:36:20.520105 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:36:20.520159 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-02 16:36:20.520147669 +0000 UTC m=+478.918078417 I0902 16:36:20.530008 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-02 16:36:20.529982561 +0000 UTC m=+478.927913319 I0902 16:36:20.530098 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:36:20.530145 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-02 16:36:20.530132724 +0000 UTC m=+478.928063462 I0902 16:36:20.542509 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:20.542578 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:20.542761 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-02 16:36:20.542715103 +0000 UTC m=+478.940645841 I0902 16:36:20.544750 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-02 16:36:20.544723996 +0000 UTC m=+478.942654774 I0902 16:36:20.549183 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:20.549245 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:36:20.549269 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-02 16:36:20.549261814 +0000 UTC m=+478.947192542 I0902 16:36:20.650018 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:20.668990 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:20.671081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-02 16:36:20.671071014 +0000 UTC m=+479.069001732 I0902 16:36:20.689121 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-02 16:36:20.689109621 +0000 UTC m=+479.087040349 I0902 16:36:20.700419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-02 16:36:20.700403163 +0000 UTC m=+479.098333901 I0902 16:36:20.711748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-02 16:36:20.711733865 +0000 UTC m=+479.109664603 I0902 16:36:20.719003 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:36:20.71898896 +0000 UTC m=+479.116919698 I0902 16:36:20.729868 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:20.730325 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:36:20.730316663 +0000 UTC m=+479.128247391 I0902 16:36:20.734119 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:36:20.734035173 +0000 UTC m=+479.131965941 I0902 16:36:20.854358 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:20.855282 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:36:20.855271491 +0000 UTC m=+479.253202259 I0902 16:36:20.902115 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:21.252922 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:21.302930 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:21.510051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-02 16:36:21.510028422 +0000 UTC m=+479.907959210 I0902 16:36:21.870429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-02 16:36:21.870411714 +0000 UTC m=+480.268342482 I0902 16:36:22.117884 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:36:22.117869208 +0000 UTC m=+480.515799976 I0902 16:36:22.202250 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:22.203637 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:36:22.203625665 +0000 UTC m=+480.601556423 I0902 16:36:22.403025 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:29.707697 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:36:29.707758 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls" condition "Issuing" to 2026-09-02 16:36:29.707752011 +0000 UTC m=+488.105682749 I0902 16:36:29.707787 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls" condition "Ready" to 2026-09-02 16:36:29.707766632 +0000 UTC m=+488.105697380 I0902 16:36:29.719258 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:29.719374 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls" condition "Ready" to 2026-09-02 16:36:29.71936343 +0000 UTC m=+488.117294188 I0902 16:36:29.822249 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:29.854844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls-1" condition "Approved" to 2026-09-02 16:36:29.854817673 +0000 UTC m=+488.252748441 I0902 16:36:29.874023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls-1" condition "Ready" to 2026-09-02 16:36:29.874006824 +0000 UTC m=+488.271937582 I0902 16:36:29.898638 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:36:29.898624451 +0000 UTC m=+488.296555199 I0902 16:36:29.916864 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:29.917495 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:36:29.917484116 +0000 UTC m=+488.315414864 I0902 16:36:29.936150 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:29.940792 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-dx6nx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:52.359078 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:36:52.359132 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-02 16:36:52.359119589 +0000 UTC m=+510.757050357 I0902 16:36:52.359303 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-02 16:36:52.359249762 +0000 UTC m=+510.757180530 I0902 16:36:52.371149 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:52.371408 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-02 16:36:52.371392342 +0000 UTC m=+510.769323150 I0902 16:36:52.663630 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:52.694759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-02 16:36:52.694733131 +0000 UTC m=+511.092663889 I0902 16:36:52.715154 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-02 16:36:52.715143358 +0000 UTC m=+511.113074096 I0902 16:36:52.743959 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:36:52.743940815 +0000 UTC m=+511.141871583 I0902 16:36:52.758695 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:52.760515 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:36:52.76050095 +0000 UTC m=+511.158431718 I0902 16:36:52.775932 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:36:52.776601 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:36:52.776590315 +0000 UTC m=+511.174521083 I0902 16:40:21.226956 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-02 16:40:21.226900438 +0000 UTC m=+719.624831206 I0902 16:40:21.227165 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:40:21.227226 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-02 16:40:21.227211625 +0000 UTC m=+719.625142383 I0902 16:40:21.241217 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:40:21.241510 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-02 16:40:21.24146437 +0000 UTC m=+719.639395158 I0902 16:40:21.580401 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:40:21.620827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-02 16:40:21.620801005 +0000 UTC m=+720.018731773 I0902 16:40:21.642158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-02 16:40:21.642144172 +0000 UTC m=+720.040074940 I0902 16:40:21.674879 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:40:21.674866354 +0000 UTC m=+720.072797112 I0902 16:40:21.699633 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:40:21.700166 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:40:21.700158666 +0000 UTC m=+720.098089404 I0902 16:40:21.720041 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:40:21.720291 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:40:21.721116 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:40:21.721104785 +0000 UTC m=+720.119035543 I0902 16:43:04.566273 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-02 16:43:04.566207824 +0000 UTC m=+882.964138592 I0902 16:43:04.566523 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:43:04.566687 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-02 16:43:04.566674274 +0000 UTC m=+882.964605092 I0902 16:43:04.583052 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:43:04.583177 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-02 16:43:04.583164828 +0000 UTC m=+882.981095596 I0902 16:43:04.903922 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:43:04.942259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Approved" to 2026-09-02 16:43:04.942242913 +0000 UTC m=+883.340173681 I0902 16:43:04.962189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Ready" to 2026-09-02 16:43:04.962175061 +0000 UTC m=+883.360105829 I0902 16:43:04.994202 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:43:04.994192698 +0000 UTC m=+883.392123436 I0902 16:43:05.011803 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:43:05.063478 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:44:22.332436 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-02 16:44:22.332366674 +0000 UTC m=+960.730297442 I0902 16:44:22.332861 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:44:22.332944 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-02 16:44:22.332935036 +0000 UTC m=+960.730865834 I0902 16:44:22.359654 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:44:22.359870 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-02 16:44:22.359826481 +0000 UTC m=+960.757757299 I0902 16:44:22.581922 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:44:22.619809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Approved" to 2026-09-02 16:44:22.619795556 +0000 UTC m=+961.017726324 I0902 16:44:22.642389 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Ready" to 2026-09-02 16:44:22.642373368 +0000 UTC m=+961.040304136 I0902 16:44:22.673026 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:44:22.673012893 +0000 UTC m=+961.070943631 I0902 16:44:22.690948 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:47:41.400080 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:47:41.400176 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-02 16:47:41.400163244 +0000 UTC m=+1159.798094012 I0902 16:47:41.400335 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-02 16:47:41.400319588 +0000 UTC m=+1159.798250346 I0902 16:47:41.417217 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:47:41.417331 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-02 16:47:41.417320601 +0000 UTC m=+1159.815251369 I0902 16:47:41.641975 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:47:41.693908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Approved" to 2026-09-02 16:47:41.693893717 +0000 UTC m=+1160.091824475 I0902 16:47:41.714589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Ready" to 2026-09-02 16:47:41.714574089 +0000 UTC m=+1160.112504847 I0902 16:47:41.747211 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:47:41.747196437 +0000 UTC m=+1160.145127205 I0902 16:47:41.767098 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:47:41.815289 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:55:41.002643 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-02 16:55:41.002572165 +0000 UTC m=+1639.400502943 I0902 16:55:41.002683 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:55:41.002772 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-02 16:55:41.002760729 +0000 UTC m=+1639.400691517 I0902 16:55:41.017980 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:55:41.018340 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-02 16:55:41.01832264 +0000 UTC m=+1639.416253428 I0902 16:55:41.207718 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:55:41.249281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Approved" to 2026-09-02 16:55:41.249270944 +0000 UTC m=+1639.647201682 I0902 16:55:41.270741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Ready" to 2026-09-02 16:55:41.270728041 +0000 UTC m=+1639.668658799 I0902 16:55:41.307583 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:55:41.307573137 +0000 UTC m=+1639.705503875 I0902 16:55:41.321531 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:57:26.264531 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:57:26.264593 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-02 16:57:26.264586364 +0000 UTC m=+1744.662517092 I0902 16:57:26.264684 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-02 16:57:26.264657505 +0000 UTC m=+1744.662588283 I0902 16:57:26.277319 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:57:26.277447 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:57:26.277478 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-02 16:57:26.277468765 +0000 UTC m=+1744.675399523 I0902 16:57:26.589246 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:57:26.609468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-09-02 16:57:26.609455413 +0000 UTC m=+1745.007386181 I0902 16:57:26.630470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-09-02 16:57:26.630455347 +0000 UTC m=+1745.028386105 I0902 16:57:26.656469 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:57:26.656457297 +0000 UTC m=+1745.054388045 I0902 16:57:26.674896 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:57:26.676276 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:57:26.676265406 +0000 UTC m=+1745.074196164 I0902 16:57:26.681467 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:57:26.688835 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:57:26.689671 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:57:26.689657129 +0000 UTC m=+1745.087587887 I0902 16:58:38.103188 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-02 16:58:38.103120343 +0000 UTC m=+1816.501051111 I0902 16:58:38.103393 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:58:38.103542 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-02 16:58:38.103527952 +0000 UTC m=+1816.501458720 I0902 16:58:38.117752 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:58:38.117867 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-02 16:58:38.117855754 +0000 UTC m=+1816.515786512 I0902 16:58:38.141234 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:58:38.171160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-09-02 16:58:38.17113813 +0000 UTC m=+1816.569068888 I0902 16:58:38.192551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-09-02 16:58:38.192533293 +0000 UTC m=+1816.590464051 I0902 16:58:38.221203 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:58:38.221181838 +0000 UTC m=+1816.619112616 I0902 16:58:38.238925 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:58:38.743939 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:58:38.743994 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-02 16:58:38.7439815 +0000 UTC m=+1817.141912268 I0902 16:58:38.744155 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-02 16:58:38.744136533 +0000 UTC m=+1817.142067291 I0902 16:58:38.761617 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:58:38.761702 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:58:38.761724 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-02 16:58:38.761717274 +0000 UTC m=+1817.159648002 I0902 16:58:38.796654 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:58:38.804973 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-09-02 16:58:38.804954668 +0000 UTC m=+1817.202885456 I0902 16:58:38.825091 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-09-02 16:58:38.825074814 +0000 UTC m=+1817.223005572 I0902 16:58:38.853916 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:58:38.853891393 +0000 UTC m=+1817.251822171 I0902 16:58:38.872294 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:58:39.484559 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-02 16:58:39.484546274 +0000 UTC m=+1817.882477012 I0902 16:58:40.162106 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-02 16:58:40.162093206 +0000 UTC m=+1818.560023964 I0902 16:59:26.883818 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:59:26.883846 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-02 16:59:26.883839792 +0000 UTC m=+1865.281770520 I0902 16:59:26.884091 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-02 16:59:26.884088037 +0000 UTC m=+1865.282018765 I0902 16:59:26.902275 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:59:26.902328 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 16:59:26.902368 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-02 16:59:26.902360107 +0000 UTC m=+1865.300290845 I0902 16:59:28.911075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Approved" to 2026-09-02 16:59:28.911061212 +0000 UTC m=+1867.308991930 I0902 16:59:28.927894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Ready" to 2026-09-02 16:59:28.92788366 +0000 UTC m=+1867.325814388 I0902 16:59:28.957762 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:59:28.957738695 +0000 UTC m=+1867.355669433 I0902 16:59:28.975885 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:59:28.979761 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:59:28.979744344 +0000 UTC m=+1867.377675112 I0902 16:59:28.979936 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:59:28.995879 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0902 16:59:28.998481 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 16:59:28.998455693 +0000 UTC m=+1867.396386431 I0902 17:02:26.034748 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:02:26.034790 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-02 17:02:26.034781343 +0000 UTC m=+2044.432712101 I0902 17:02:26.035166 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-02 17:02:26.03515407 +0000 UTC m=+2044.433084838 I0902 17:02:26.058157 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:02:26.063618 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-02 17:02:26.063602647 +0000 UTC m=+2044.461533405 I0902 17:02:26.395472 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:02:26.443114 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Approved" to 2026-09-02 17:02:26.44309987 +0000 UTC m=+2044.841030638 I0902 17:02:26.463033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Ready" to 2026-09-02 17:02:26.463022884 +0000 UTC m=+2044.860953622 I0902 17:02:26.499788 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:02:26.499778967 +0000 UTC m=+2044.897709695 I0902 17:02:26.515495 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:02:26.516022 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:02:26.516015933 +0000 UTC m=+2044.913946661 I0902 17:02:26.529367 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:02:26.537856 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:02:27.634388 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-02 17:02:27.634373394 +0000 UTC m=+2046.032304152 I0902 17:02:27.634459 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:02:27.634539 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-02 17:02:27.634528727 +0000 UTC m=+2046.032459495 I0902 17:02:27.646529 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:02:27.646629 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:02:27.646653 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-02 17:02:27.646646916 +0000 UTC m=+2046.044577674 I0902 17:02:27.935896 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:02:27.960565 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Approved" to 2026-09-02 17:02:27.960555272 +0000 UTC m=+2046.358486010 I0902 17:02:28.000908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Ready" to 2026-09-02 17:02:28.000896391 +0000 UTC m=+2046.398827159 I0902 17:02:28.037107 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:02:28.037089032 +0000 UTC m=+2046.435019770 I0902 17:02:28.058941 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:04.091239 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:06:04.091269 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-02 17:06:04.091186646 +0000 UTC m=+2262.489117414 I0902 17:06:04.091329 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-02 17:06:04.091321729 +0000 UTC m=+2262.489252457 I0902 17:06:04.112183 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:04.112372 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-02 17:06:04.112361606 +0000 UTC m=+2262.510292384 I0902 17:06:04.449131 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:04.491951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Approved" to 2026-09-02 17:06:04.491937372 +0000 UTC m=+2262.889868110 I0902 17:06:04.533525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Ready" to 2026-09-02 17:06:04.533507177 +0000 UTC m=+2262.931437945 I0902 17:06:04.594553 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:06:04.594539687 +0000 UTC m=+2262.992470425 I0902 17:06:04.611922 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:04.612405 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:06:04.612399128 +0000 UTC m=+2263.010329856 I0902 17:06:04.625748 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:07.114481 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hkx7q-api" condition "Ready" to 2026-09-02 17:06:07.114462581 +0000 UTC m=+2265.512393349 I0902 17:06:07.115539 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hkx7q-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:06:07.115619 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hkx7q-api" condition "Issuing" to 2026-09-02 17:06:07.115611515 +0000 UTC m=+2265.513542283 I0902 17:06:07.123062 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hkx7q-vnc" condition "Ready" to 2026-09-02 17:06:07.123044214 +0000 UTC m=+2265.520975002 I0902 17:06:07.123198 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hkx7q-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:06:07.123280 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hkx7q-vnc" condition "Issuing" to 2026-09-02 17:06:07.123240928 +0000 UTC m=+2265.521171686 I0902 17:06:07.272380 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hkx7q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hkx7q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:07.272609 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hkx7q-vnc" condition "Ready" to 2026-09-02 17:06:07.272577959 +0000 UTC m=+2265.670528167 I0902 17:06:07.273814 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hkx7q-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hkx7q-api\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:07.273892 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hkx7q-api" condition "Ready" to 2026-09-02 17:06:07.273884027 +0000 UTC m=+2265.671814795 I0902 17:06:07.399899 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hkx7q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hkx7q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:07.421939 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hkx7q-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hkx7q-api\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:07.436591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-hkx7q-vnc-1" condition "Approved" to 2026-09-02 17:06:07.436577422 +0000 UTC m=+2265.834508160 I0902 17:06:07.453294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-hkx7q-vnc-1" condition "Ready" to 2026-09-02 17:06:07.453282618 +0000 UTC m=+2265.851213366 I0902 17:06:07.455545 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-hkx7q-api-1" condition "Approved" to 2026-09-02 17:06:07.455532736 +0000 UTC m=+2265.853463474 I0902 17:06:07.478260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-hkx7q-api-1" condition "Ready" to 2026-09-02 17:06:07.47823382 +0000 UTC m=+2265.876164558 I0902 17:06:07.483171 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hkx7q-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:06:07.483158204 +0000 UTC m=+2265.881088942 I0902 17:06:07.499803 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hkx7q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hkx7q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:07.501074 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hkx7q-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:06:07.501057756 +0000 UTC m=+2265.898988504 I0902 17:06:07.514190 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hkx7q-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:06:07.514172095 +0000 UTC m=+2265.912102843 I0902 17:06:07.523780 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hkx7q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hkx7q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:07.524186 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hkx7q-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:06:07.524179518 +0000 UTC m=+2265.922110236 I0902 17:06:07.530224 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hkx7q-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hkx7q-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:07.530723 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hkx7q-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hkx7q-api\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:07.532209 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hkx7q-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:06:07.532201339 +0000 UTC m=+2265.930132067 I0902 17:06:07.538451 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hkx7q-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hkx7q-api\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:06:07.543785 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hkx7q-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hkx7q-api\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:10:57.753074 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-02 17:10:57.753036649 +0000 UTC m=+2556.150967407 I0902 17:10:57.753721 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:10:57.753773 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-02 17:10:57.753766985 +0000 UTC m=+2556.151697753 I0902 17:10:57.772347 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:10:57.772514 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-02 17:10:57.772502314 +0000 UTC m=+2556.170433072 I0902 17:10:57.983305 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:10:58.026892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Approved" to 2026-09-02 17:10:58.026877632 +0000 UTC m=+2556.424808390 I0902 17:10:58.055673 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Ready" to 2026-09-02 17:10:58.055657228 +0000 UTC m=+2556.453587986 I0902 17:10:58.105331 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:10:58.105311029 +0000 UTC m=+2556.503241797 I0902 17:10:58.121191 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:10:58.121771 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:10:58.121764241 +0000 UTC m=+2556.519694979 I0902 17:10:58.135959 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:10:58.142634 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:10:59.245580 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-02 17:10:59.245557572 +0000 UTC m=+2557.643488340 I0902 17:10:59.245689 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:10:59.245726 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-02 17:10:59.245715156 +0000 UTC m=+2557.643645924 I0902 17:10:59.262049 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:10:59.262136 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:10:59.262161 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-02 17:10:59.262151237 +0000 UTC m=+2557.660082005 I0902 17:10:59.439712 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:10:59.449911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Approved" to 2026-09-02 17:10:59.44990058 +0000 UTC m=+2557.847831308 I0902 17:10:59.471172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Ready" to 2026-09-02 17:10:59.471161975 +0000 UTC m=+2557.869092723 I0902 17:10:59.504868 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:10:59.504856766 +0000 UTC m=+2557.902787524 I0902 17:10:59.520406 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:10:59.520935 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:10:59.520927129 +0000 UTC m=+2557.918857877 I0902 17:10:59.537584 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:17.294807 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-02 17:13:17.294790076 +0000 UTC m=+2695.692720844 I0902 17:13:17.295401 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:13:17.295442 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-02 17:13:17.29543516 +0000 UTC m=+2695.693365928 E0902 17:13:17.308081 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0902 17:13:17.308173 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-02 17:13:17.308164011 +0000 UTC m=+2695.706094769 I0902 17:13:17.308202 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0902 17:13:17.310583 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:17.310711 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:13:17.310757 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-02 17:13:17.310747167 +0000 UTC m=+2695.708677925 E0902 17:13:17.317412 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" E0902 17:13:17.317544 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0902 17:13:17.317602 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0902 17:13:17.317655 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" I0902 17:13:17.355145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Approved" to 2026-09-02 17:13:17.355135236 +0000 UTC m=+2695.753065954 I0902 17:13:17.374847 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Ready" to 2026-09-02 17:13:17.374829047 +0000 UTC m=+2695.772759815 I0902 17:13:17.405101 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:13:17.405086294 +0000 UTC m=+2695.803017062 I0902 17:13:17.427585 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:17.428118 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:13:17.428108066 +0000 UTC m=+2695.826038834 I0902 17:13:17.451333 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:17.971897 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:13:17.971983 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-02 17:13:17.971976183 +0000 UTC m=+2696.369906901 I0902 17:13:17.972307 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-02 17:13:17.97230335 +0000 UTC m=+2696.370234078 E0902 17:13:17.987671 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0902 17:13:17.987727 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-02 17:13:17.98771624 +0000 UTC m=+2696.385646998 I0902 17:13:17.987788 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0902 17:13:17.989393 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:17.989535 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:13:17.989562 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-02 17:13:17.989551539 +0000 UTC m=+2696.387482307 E0902 17:13:17.997691 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" E0902 17:13:17.998117 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0902 17:13:18.001850 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0902 17:13:18.002085 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" I0902 17:13:18.038775 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:18.047762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Approved" to 2026-09-02 17:13:18.047745452 +0000 UTC m=+2696.445676220 I0902 17:13:18.061737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Ready" to 2026-09-02 17:13:18.061722351 +0000 UTC m=+2696.459653109 I0902 17:13:18.085878 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:13:18.085838987 +0000 UTC m=+2696.483769745 I0902 17:13:18.099590 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:18.100030 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:13:18.100019991 +0000 UTC m=+2696.497950729 I0902 17:13:18.107049 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:18.113001 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:18.117371 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:18.701330 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-02 17:13:18.701312555 +0000 UTC m=+2697.099243333 I0902 17:13:18.701453 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:13:18.702136 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-02 17:13:18.702114162 +0000 UTC m=+2697.100044920 I0902 17:13:18.720522 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:18.720852 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-02 17:13:18.720824523 +0000 UTC m=+2697.118755281 I0902 17:13:18.738014 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:18.765189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Approved" to 2026-09-02 17:13:18.76517524 +0000 UTC m=+2697.163105958 I0902 17:13:18.780463 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Ready" to 2026-09-02 17:13:18.780446847 +0000 UTC m=+2697.178377585 I0902 17:13:22.318745 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:13:22.318731569 +0000 UTC m=+2700.716662337 I0902 17:13:22.332802 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:13:22.33278112 +0000 UTC m=+2700.730711888 I0902 17:13:22.367931 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:13:22.36791758 +0000 UTC m=+2700.765848318 I0902 17:13:22.384491 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:22.385071 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:13:22.385030527 +0000 UTC m=+2700.782961265 I0902 17:13:22.401617 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:13:22.998085 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:13:22.998073352 +0000 UTC m=+2701.396004090 I0902 17:16:03.844146 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-02 17:16:03.844113396 +0000 UTC m=+2862.242044174 I0902 17:16:03.844189 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:16:03.844455 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-02 17:16:03.844445853 +0000 UTC m=+2862.242376601 I0902 17:16:03.860663 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:03.860822 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:16:03.860856 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-02 17:16:03.860846654 +0000 UTC m=+2862.258777422 I0902 17:16:04.221837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Approved" to 2026-09-02 17:16:04.221825301 +0000 UTC m=+2862.619756029 I0902 17:16:04.238751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Ready" to 2026-09-02 17:16:04.238740933 +0000 UTC m=+2862.636671661 I0902 17:16:04.265086 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:16:04.265073196 +0000 UTC m=+2862.663003914 I0902 17:16:04.283043 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:04.284343 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:16:04.284335738 +0000 UTC m=+2862.682266476 I0902 17:16:04.296988 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:04.304565 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:51.417109 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-02 17:16:51.417081101 +0000 UTC m=+2909.815011829 I0902 17:16:51.442867 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-02 17:16:51.442849853 +0000 UTC m=+2909.840780621 I0902 17:16:51.442929 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:16:51.442986 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-02 17:16:51.442978796 +0000 UTC m=+2909.840909534 I0902 17:16:51.455103 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:51.455696 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-02 17:16:51.455667786 +0000 UTC m=+2909.853598534 E0902 17:16:51.469726 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller" I0902 17:16:51.524090 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-02 17:16:51.524066199 +0000 UTC m=+2909.921996927 I0902 17:16:51.542288 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:16:51.542324 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-02 17:16:51.542316479 +0000 UTC m=+2909.940247217 I0902 17:16:51.542654 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-02 17:16:51.542648516 +0000 UTC m=+2909.940579264 I0902 17:16:51.551913 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:51.552016 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:16:51.552045 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-02 17:16:51.552038807 +0000 UTC m=+2909.949969535 E0902 17:16:51.640255 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" I0902 17:16:51.843482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-09-02 17:16:51.843468467 +0000 UTC m=+2910.241399195 I0902 17:16:51.859562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-09-02 17:16:51.8595513 +0000 UTC m=+2910.257482028 I0902 17:16:51.885694 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:16:51.885681039 +0000 UTC m=+2910.283611767 I0902 17:16:51.897366 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:51.897713 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:16:51.897708026 +0000 UTC m=+2910.295638754 I0902 17:16:51.917105 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:52.321170 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-02 17:16:52.321154037 +0000 UTC m=+2910.719084765 I0902 17:16:52.337943 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:16:52.337975 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-02 17:16:52.337967327 +0000 UTC m=+2910.735898055 I0902 17:16:52.338941 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-02 17:16:52.338935307 +0000 UTC m=+2910.736866035 I0902 17:16:52.350278 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:52.350346 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-02 17:16:52.350338862 +0000 UTC m=+2910.748269590 I0902 17:16:52.442123 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:52.482908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-09-02 17:16:52.482896306 +0000 UTC m=+2910.880827034 I0902 17:16:52.497618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-09-02 17:16:52.49760889 +0000 UTC m=+2910.895539618 I0902 17:16:52.524999 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:16:52.524984475 +0000 UTC m=+2910.922915203 I0902 17:16:52.541803 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:52.692229 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-02 17:16:52.69221863 +0000 UTC m=+2911.090149358 I0902 17:16:52.709945 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:16:52.709982 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-02 17:16:52.709974199 +0000 UTC m=+2911.107904927 I0902 17:16:52.710341 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-02 17:16:52.710336407 +0000 UTC m=+2911.108267155 I0902 17:16:52.719959 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:52.720015 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-02 17:16:52.720008654 +0000 UTC m=+2911.117939382 I0902 17:16:53.166033 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-02 17:16:53.166018848 +0000 UTC m=+2911.563949576 I0902 17:16:53.179628 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0902 17:16:53.179653 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-02 17:16:53.17964807 +0000 UTC m=+2911.577578798 I0902 17:16:53.179917 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-02 17:16:53.179913545 +0000 UTC m=+2911.577844273 I0902 17:16:53.188100 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:53.188179 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-02 17:16:53.188172042 +0000 UTC m=+2911.586102770 I0902 17:16:53.265963 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:53.294367 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-09-02 17:16:53.294356652 +0000 UTC m=+2911.692287380 I0902 17:16:53.313066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-09-02 17:16:53.313055671 +0000 UTC m=+2911.710986409 I0902 17:16:53.374947 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:53.487821 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:16:53.487810067 +0000 UTC m=+2911.885740795 I0902 17:16:53.629433 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:53.681010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-09-02 17:16:53.680999897 +0000 UTC m=+2912.078930625 I0902 17:16:53.891173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-09-02 17:16:53.891158629 +0000 UTC m=+2912.289089387 I0902 17:16:54.479400 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:16:54.479386973 +0000 UTC m=+2912.877317711 I0902 17:16:54.621435 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0902 17:16:54.621853 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-02 17:16:54.621847888 +0000 UTC m=+2913.019778606 I0902 17:16:54.821682 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"