I0609 09:25:18.354997 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0609 09:25:18.355183 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0609 09:25:18.355318 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0609 09:25:18.360554 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0609 09:25:18.360921 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0609 09:25:18.361100 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0609 09:25:18.361106 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0609 09:25:18.363574 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0609 09:25:18.376325 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0609 09:25:18.376519 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0609 09:25:18.376589 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0609 09:25:18.376610 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0609 09:25:18.383350 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0609 09:25:18.387451 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0609 09:25:18.391475 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0609 09:25:18.393890 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0609 09:25:18.396494 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0609 09:25:18.399222 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0609 09:25:18.402505 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0609 09:25:18.406575 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0609 09:25:18.406654 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0609 09:25:18.411632 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0609 09:25:18.413529 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0609 09:25:18.413581 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0609 09:25:18.415767 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0609 09:25:18.418213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0609 09:25:18.420164 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0609 09:25:18.420389 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0609 09:25:18.422278 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0609 09:25:18.424742 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0609 09:25:18.426101 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0609 09:25:18.431385 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0609 09:25:18.434207 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0609 09:25:18.436092 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 09:25:18.436162 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 09:25:18.436794 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 09:25:18.437612 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 09:25:18.437628 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 09:25:18.437900 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 09:25:18.438291 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 09:25:18.438798 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 09:25:18.439449 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 09:25:18.521357 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 09:25:35.245338 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-09 09:25:35.245301292 +0000 UTC m=+16.922938409 I0609 09:25:36.000713 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-09 09:25:36.000701217 +0000 UTC m=+17.678338314 I0609 09:25:36.000861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:25:36.000930 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-09 09:25:36.000920524 +0000 UTC m=+17.678557671 E0609 09:25:36.145790 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 09:25:36.145904 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-09 09:25:36.14589321 +0000 UTC m=+17.823530327 E0609 09:25:36.145937 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 09:25:36.148614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:25:36.148692 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:25:36.148745 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-09 09:25:36.14873885 +0000 UTC m=+17.826375967 E0609 09:25:36.324583 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0609 09:25:36.324732 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 09:25:36.324807 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 09:25:36.324893 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0609 09:25:36.502623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:25:36.503724 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-btv8n" condition "Approved" to 2026-06-09 09:25:36.503711054 +0000 UTC m=+18.181348141 I0609 09:25:36.532594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-btv8n" condition "Ready" to 2026-06-09 09:25:36.532577257 +0000 UTC m=+18.210214384 I0609 09:25:36.607056 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:25:36.607031913 +0000 UTC m=+18.284669030 I0609 09:25:36.627752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:25:36.817546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:25:41.325691 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:25:41.325671146 +0000 UTC m=+23.003308263 I0609 09:26:16.909038 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:26:16.909058 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-09 09:26:16.908989589 +0000 UTC m=+58.586626736 I0609 09:26:16.909071 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-09 09:26:16.909064782 +0000 UTC m=+58.586701869 I0609 09:26:16.919538 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-09 09:26:16.919523953 +0000 UTC m=+58.597161050 I0609 09:26:16.928996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:26:16.929134 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-09 09:26:16.929119946 +0000 UTC m=+58.606757063 I0609 09:26:17.214333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:26:17.253255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qm9zc" condition "Approved" to 2026-06-09 09:26:17.253238283 +0000 UTC m=+58.930875380 I0609 09:26:17.286972 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-qm9zc" condition "Ready" to 2026-06-09 09:26:17.28695485 +0000 UTC m=+58.964591947 I0609 09:26:17.316248 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:26:17.316231296 +0000 UTC m=+58.993868393 I0609 09:26:17.342373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:26:17.342630 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:26:17.342624212 +0000 UTC m=+59.020261299 I0609 09:26:17.351951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:26:17.363776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:26:17.364378 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:26:17.36436474 +0000 UTC m=+59.042001877 I0609 09:28:28.095943 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-06-09 09:28:28.095920958 +0000 UTC m=+189.773558055 I0609 09:28:28.096160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:28:28.096395 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-06-09 09:28:28.096375172 +0000 UTC m=+189.774012299 E0609 09:28:28.110033 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 09:28:28.110081 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-06-09 09:28:28.110073517 +0000 UTC m=+189.787710614 I0609 09:28:28.110123 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 09:28:28.112820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:28:28.112898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:28:28.112925 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-06-09 09:28:28.112918047 +0000 UTC m=+189.790555144 E0609 09:28:28.123373 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0609 09:28:28.123571 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 09:28:28.123632 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0609 09:28:28.123721 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0609 09:28:28.127048 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:28:28.127079 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-06-09 09:28:28.127071216 +0000 UTC m=+189.804708333 I0609 09:28:28.127224 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-06-09 09:28:28.127210401 +0000 UTC m=+189.804847528 I0609 09:28:28.141251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:28:28.141359 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:28:28.141384 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-06-09 09:28:28.14137702 +0000 UTC m=+189.819014107 I0609 09:28:28.386188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-nxh5n" condition "Approved" to 2026-06-09 09:28:28.386159358 +0000 UTC m=+190.063796475 I0609 09:28:28.405766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-nxh5n" condition "Ready" to 2026-06-09 09:28:28.405749729 +0000 UTC m=+190.083386856 I0609 09:28:28.467570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:28:28.472651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-49n6j" condition "Approved" to 2026-06-09 09:28:28.472637382 +0000 UTC m=+190.150274479 I0609 09:28:28.504890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-49n6j" condition "Ready" to 2026-06-09 09:28:28.504879585 +0000 UTC m=+190.182516692 I0609 09:28:28.533249 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:28:28.533212114 +0000 UTC m=+190.210849201 I0609 09:28:28.551167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:28:28.551754 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:28:28.551742392 +0000 UTC m=+190.229379479 I0609 09:28:28.572527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:28:33.124394 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:28:33.124378445 +0000 UTC m=+194.802015562 I0609 09:28:33.139059 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-nxh5n" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:28:33.13904923 +0000 UTC m=+194.816686327 I0609 09:28:33.169465 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:28:33.169437085 +0000 UTC m=+194.847074192 I0609 09:28:33.188980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:28:33.189318 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:28:33.189310635 +0000 UTC m=+194.866947732 I0609 09:28:33.209000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:31:05.844163 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Ready" to 2026-06-09 09:31:05.844113279 +0000 UTC m=+347.521750376 I0609 09:31:05.844286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-73.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:31:05.844342 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Issuing" to 2026-06-09 09:31:05.844336216 +0000 UTC m=+347.521973323 I0609 09:31:05.860166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:31:05.860376 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-73.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:31:05.860412 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Issuing" to 2026-06-09 09:31:05.860403585 +0000 UTC m=+347.538040712 I0609 09:31:06.019500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:31:06.029513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-73.nip.io-tls-95k5f" condition "Approved" to 2026-06-09 09:31:06.029499495 +0000 UTC m=+347.707136592 I0609 09:31:06.046470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-73.nip.io-tls-95k5f" condition "Ready" to 2026-06-09 09:31:06.046464362 +0000 UTC m=+347.724101439 I0609 09:31:06.076104 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-73.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:31:06.076089761 +0000 UTC m=+347.753726878 I0609 09:31:06.103604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-73.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-73.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:32:24.701808 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:32:24.701864 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-09 09:32:24.701827753 +0000 UTC m=+426.379464840 I0609 09:32:24.702119 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-09 09:32:24.702096602 +0000 UTC m=+426.379733759 E0609 09:32:24.713503 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 09:32:24.713723 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-09 09:32:24.71371476 +0000 UTC m=+426.391351857 E0609 09:32:24.713813 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 09:32:24.714943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:32:24.715009 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-09 09:32:24.715003151 +0000 UTC m=+426.392640258 E0609 09:32:24.725756 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0609 09:32:24.725902 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 09:32:24.725961 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 09:32:24.726020 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0609 09:32:24.731873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:32:24.751567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6dqvs" condition "Approved" to 2026-06-09 09:32:24.75155563 +0000 UTC m=+426.429192717 I0609 09:32:24.761982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6dqvs" condition "Ready" to 2026-06-09 09:32:24.761971391 +0000 UTC m=+426.439608478 I0609 09:32:24.810122 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:32:24.810111697 +0000 UTC m=+426.487748774 I0609 09:32:24.828518 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:32:29.726330 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:32:29.72631652 +0000 UTC m=+431.403953637 I0609 09:33:07.984844 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:33:07.984903 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-09 09:33:07.984897098 +0000 UTC m=+469.662534185 I0609 09:33:07.985191 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-09 09:33:07.985186148 +0000 UTC m=+469.662823235 I0609 09:33:08.001299 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:33:08.001329 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-09 09:33:08.00132351 +0000 UTC m=+469.678960607 I0609 09:33:08.001579 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-09 09:33:08.001574778 +0000 UTC m=+469.679211885 I0609 09:33:08.007636 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-09 09:33:08.007626291 +0000 UTC m=+469.685263388 I0609 09:33:08.007962 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:33:08.008007 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-09 09:33:08.008000223 +0000 UTC m=+469.685637300 I0609 09:33:08.018343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:08.018420 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:33:08.018448 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-09 09:33:08.018442125 +0000 UTC m=+469.696079212 I0609 09:33:08.033313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:08.034037 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-09 09:33:08.03402814 +0000 UTC m=+469.711665237 I0609 09:33:08.038137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:08.038184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:33:08.038205 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-09 09:33:08.038199852 +0000 UTC m=+469.715836949 I0609 09:33:08.223087 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:08.229135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bd9s7" condition "Approved" to 2026-06-09 09:33:08.22912128 +0000 UTC m=+469.906758377 I0609 09:33:08.250394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bd9s7" condition "Ready" to 2026-06-09 09:33:08.250378696 +0000 UTC m=+469.928015803 I0609 09:33:08.297682 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:33:08.297673049 +0000 UTC m=+469.975310146 I0609 09:33:08.332033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:08.332374 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:33:08.332366981 +0000 UTC m=+470.010004088 I0609 09:33:08.342024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:08.345033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mdvls" condition "Approved" to 2026-06-09 09:33:08.345023634 +0000 UTC m=+470.022660741 I0609 09:33:08.360953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mdvls" condition "Ready" to 2026-06-09 09:33:08.360944259 +0000 UTC m=+470.038581346 I0609 09:33:08.364761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:08.396356 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:33:08.396336864 +0000 UTC m=+470.073973951 I0609 09:33:08.430564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:08.580899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:08.887797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fnkln" condition "Approved" to 2026-06-09 09:33:08.887781853 +0000 UTC m=+470.565418950 I0609 09:33:09.147072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-fnkln" condition "Ready" to 2026-06-09 09:33:09.147050523 +0000 UTC m=+470.824687640 I0609 09:33:09.396040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:09.533628 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:33:09.533610889 +0000 UTC m=+471.211248016 I0609 09:33:09.633999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:09.634358 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:33:09.63435003 +0000 UTC m=+471.311987127 I0609 09:33:09.885692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:09.985817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:16.780963 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zn282-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:33:16.781057 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zn282-tls" condition "Issuing" to 2026-06-09 09:33:16.781041129 +0000 UTC m=+478.458678246 I0609 09:33:16.781811 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zn282-tls" condition "Ready" to 2026-06-09 09:33:16.781791163 +0000 UTC m=+478.459428270 I0609 09:33:16.795195 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zn282-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zn282-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:16.795254 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zn282-tls" condition "Ready" to 2026-06-09 09:33:16.795248021 +0000 UTC m=+478.472885118 I0609 09:33:16.940939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zn282-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zn282-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:16.974657 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zn282-xjt8j" condition "Approved" to 2026-06-09 09:33:16.974637122 +0000 UTC m=+478.652274239 I0609 09:33:16.992648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zn282-xjt8j" condition "Ready" to 2026-06-09 09:33:16.992638404 +0000 UTC m=+478.670275491 I0609 09:33:17.025127 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zn282-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:33:17.025112946 +0000 UTC m=+478.702750043 I0609 09:33:17.048686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zn282-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zn282-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:17.049102 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zn282-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:33:17.049091438 +0000 UTC m=+478.726728515 I0609 09:33:17.059448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zn282-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zn282-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:17.071541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zn282-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zn282-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:52.891098 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-09 09:33:52.891048754 +0000 UTC m=+514.568685841 I0609 09:33:52.891680 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:33:52.891742 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-09 09:33:52.891728286 +0000 UTC m=+514.569365383 I0609 09:33:52.925677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:52.925788 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:33:52.925826 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-09 09:33:52.925801538 +0000 UTC m=+514.603438645 I0609 09:33:53.291548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:33:53.299259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ngpsr" condition "Approved" to 2026-06-09 09:33:53.299245597 +0000 UTC m=+514.976882684 I0609 09:33:53.316766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-ngpsr" condition "Ready" to 2026-06-09 09:33:53.316753633 +0000 UTC m=+514.994390720 I0609 09:33:53.342686 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:33:53.342672477 +0000 UTC m=+515.020309574 I0609 09:33:53.372256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:37:20.365878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:37:20.366000 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-09 09:37:20.365953918 +0000 UTC m=+722.043591035 I0609 09:37:20.365995 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-09 09:37:20.365965599 +0000 UTC m=+722.043602716 I0609 09:37:20.463873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:37:20.464006 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-09 09:37:20.463997569 +0000 UTC m=+722.141634666 I0609 09:37:20.776351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:37:20.855804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qfjhh" condition "Approved" to 2026-06-09 09:37:20.85578987 +0000 UTC m=+722.533426967 I0609 09:37:20.955663 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-qfjhh" condition "Ready" to 2026-06-09 09:37:20.955645848 +0000 UTC m=+722.633282975 I0609 09:37:21.093147 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:37:21.093129009 +0000 UTC m=+722.770766136 I0609 09:37:21.227909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:37:21.228498 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:37:21.22848722 +0000 UTC m=+722.906124347 I0609 09:37:21.279995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:39:49.599602 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:39:49.599723 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-06-09 09:39:49.599682429 +0000 UTC m=+871.277319556 I0609 09:39:49.599673 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-06-09 09:39:49.599632108 +0000 UTC m=+871.277269205 I0609 09:39:49.617008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:39:49.617089 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-06-09 09:39:49.617079455 +0000 UTC m=+871.294716572 I0609 09:39:49.976125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:39:50.003625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-9vmbn" condition "Approved" to 2026-06-09 09:39:50.003610788 +0000 UTC m=+871.681247905 I0609 09:39:50.023098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-9vmbn" condition "Ready" to 2026-06-09 09:39:50.02308578 +0000 UTC m=+871.700722877 I0609 09:39:50.122761 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:39:50.122750472 +0000 UTC m=+871.800387559 I0609 09:39:50.146421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:39:50.146762 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:39:50.146756029 +0000 UTC m=+871.824393116 I0609 09:39:50.163376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:39:50.163733 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:39:50.16372646 +0000 UTC m=+871.841363547 I0609 09:39:50.164547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:41:12.680904 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:41:12.680970 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-06-09 09:41:12.680947469 +0000 UTC m=+954.358584596 I0609 09:41:12.680966 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-09 09:41:12.680932478 +0000 UTC m=+954.358569575 I0609 09:41:12.697937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:41:12.698064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:41:12.698098 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-09 09:41:12.698089926 +0000 UTC m=+954.375727043 I0609 09:41:12.846359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-qjskc" condition "Approved" to 2026-06-09 09:41:12.846346971 +0000 UTC m=+954.523984068 I0609 09:41:12.998074 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-qjskc" condition "Ready" to 2026-06-09 09:41:12.998062715 +0000 UTC m=+954.675699802 I0609 09:41:13.197750 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:41:13.197732641 +0000 UTC m=+954.875369758 I0609 09:41:13.225637 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:41:13.286038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:44:26.358865 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-06-09 09:44:26.358817475 +0000 UTC m=+1148.036454592 I0609 09:44:26.359257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:44:26.359353 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-06-09 09:44:26.359342802 +0000 UTC m=+1148.036979919 I0609 09:44:26.378556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:44:26.378658 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-06-09 09:44:26.378650738 +0000 UTC m=+1148.056287835 I0609 09:44:26.539653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:44:26.572921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-84mkr" condition "Approved" to 2026-06-09 09:44:26.57289801 +0000 UTC m=+1148.250535127 I0609 09:44:26.596004 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-84mkr" condition "Ready" to 2026-06-09 09:44:26.595987567 +0000 UTC m=+1148.273624654 I0609 09:44:26.625991 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:44:26.625919563 +0000 UTC m=+1148.303556650 I0609 09:44:26.657060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:44:26.657515 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:44:26.657507221 +0000 UTC m=+1148.335144318 I0609 09:44:26.689502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:52:19.457819 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-06-09 09:52:19.45777449 +0000 UTC m=+1621.135411587 I0609 09:52:19.458304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:52:19.458370 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-06-09 09:52:19.458365029 +0000 UTC m=+1621.136002126 I0609 09:52:19.476924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:52:19.476998 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:52:19.477013 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-06-09 09:52:19.477007593 +0000 UTC m=+1621.154644690 I0609 09:52:19.650055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-t7q2h" condition "Approved" to 2026-06-09 09:52:19.650041342 +0000 UTC m=+1621.327678459 I0609 09:52:19.671188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-t7q2h" condition "Ready" to 2026-06-09 09:52:19.671171696 +0000 UTC m=+1621.348808823 I0609 09:52:19.705087 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:52:19.705073857 +0000 UTC m=+1621.382710954 I0609 09:52:19.728486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:52:19.783864 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:53:57.533976 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-06-09 09:53:57.533480208 +0000 UTC m=+1719.211117315 I0609 09:53:57.534095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:53:57.534123 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-06-09 09:53:57.534113538 +0000 UTC m=+1719.211750655 I0609 09:53:57.555755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:53:57.555837 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:53:57.555857 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-06-09 09:53:57.555851111 +0000 UTC m=+1719.233488198 I0609 09:53:57.733863 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:53:57.741689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-r98f7" condition "Approved" to 2026-06-09 09:53:57.741675808 +0000 UTC m=+1719.419312895 I0609 09:53:57.763836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-r98f7" condition "Ready" to 2026-06-09 09:53:57.763822475 +0000 UTC m=+1719.441459572 I0609 09:53:57.792814 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:53:57.792798089 +0000 UTC m=+1719.470435186 I0609 09:53:57.812515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:54:58.626854 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-06-09 09:54:58.62683471 +0000 UTC m=+1780.304471827 I0609 09:54:58.626923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:54:58.626949 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-06-09 09:54:58.626941874 +0000 UTC m=+1780.304578991 I0609 09:54:58.645486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:54:58.645800 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:54:58.645844 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-06-09 09:54:58.645837277 +0000 UTC m=+1780.323474374 I0609 09:54:58.711439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-lc7dv" condition "Approved" to 2026-06-09 09:54:58.711425079 +0000 UTC m=+1780.389062166 I0609 09:54:58.731087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-lc7dv" condition "Ready" to 2026-06-09 09:54:58.731075255 +0000 UTC m=+1780.408712352 I0609 09:54:58.760047 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:54:58.760033339 +0000 UTC m=+1780.437670446 I0609 09:54:58.778424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:54:58.822655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:54:59.304481 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:54:59.304528 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-06-09 09:54:59.304519206 +0000 UTC m=+1780.982156303 I0609 09:54:59.304524 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-06-09 09:54:59.304508136 +0000 UTC m=+1780.982145243 I0609 09:54:59.320757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:54:59.320827 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:54:59.320964 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-06-09 09:54:59.32095492 +0000 UTC m=+1780.998592017 I0609 09:54:59.367895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-zgmxr" condition "Approved" to 2026-06-09 09:54:59.367882347 +0000 UTC m=+1781.045519444 I0609 09:54:59.383526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-zgmxr" condition "Ready" to 2026-06-09 09:54:59.383515496 +0000 UTC m=+1781.061152593 I0609 09:54:59.407258 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:54:59.407238523 +0000 UTC m=+1781.084875650 I0609 09:54:59.424266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:54:59.424559 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:54:59.424549895 +0000 UTC m=+1781.102186992 I0609 09:54:59.448686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:55:00.044180 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-06-09 09:55:00.044160619 +0000 UTC m=+1781.721797746 I0609 09:55:00.660178 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-06-09 09:55:00.660166816 +0000 UTC m=+1782.337803913 I0609 09:55:47.421114 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:55:47.421149 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-06-09 09:55:47.421143123 +0000 UTC m=+1829.098780210 I0609 09:55:47.421489 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-06-09 09:55:47.421484914 +0000 UTC m=+1829.099121991 I0609 09:55:47.448188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:55:47.448290 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-06-09 09:55:47.448284649 +0000 UTC m=+1829.125921736 I0609 09:55:49.977683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:55:50.021300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-c8hks" condition "Approved" to 2026-06-09 09:55:50.021274279 +0000 UTC m=+1831.698911386 I0609 09:55:50.040688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-c8hks" condition "Ready" to 2026-06-09 09:55:50.040678498 +0000 UTC m=+1831.718315575 I0609 09:55:50.078239 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:55:50.078220995 +0000 UTC m=+1831.755858112 I0609 09:55:50.098168 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:55:50.100012 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:55:50.1000008 +0000 UTC m=+1831.777637897 I0609 09:55:50.102128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:55:50.117775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:55:50.117798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:55:50.118794 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:55:50.118783519 +0000 UTC m=+1831.796420646 I0609 09:58:39.440930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:58:39.441044 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-06-09 09:58:39.441036274 +0000 UTC m=+2001.118673361 I0609 09:58:39.440910 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-06-09 09:58:39.440883969 +0000 UTC m=+2001.118521086 I0609 09:58:39.456756 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:58:39.456808 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:58:39.456824 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-06-09 09:58:39.456817297 +0000 UTC m=+2001.134454384 I0609 09:58:39.619688 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:58:39.629501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-2wttp" condition "Approved" to 2026-06-09 09:58:39.629486306 +0000 UTC m=+2001.307123393 I0609 09:58:39.647620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-2wttp" condition "Ready" to 2026-06-09 09:58:39.647607565 +0000 UTC m=+2001.325244662 I0609 09:58:39.679865 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:58:39.679843663 +0000 UTC m=+2001.357480790 I0609 09:58:39.697332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:58:39.697668 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:58:39.697659471 +0000 UTC m=+2001.375296568 I0609 09:58:39.704424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:58:39.721533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:58:40.993053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 09:58:40.993087 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-06-09 09:58:40.993079253 +0000 UTC m=+2002.670716350 I0609 09:58:40.993040 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-09 09:58:40.993024401 +0000 UTC m=+2002.670661498 I0609 09:58:41.008548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:58:41.008649 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-09 09:58:41.00864222 +0000 UTC m=+2002.686279307 I0609 09:58:41.341932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:58:41.375245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-wtd4h" condition "Approved" to 2026-06-09 09:58:41.375218195 +0000 UTC m=+2003.052855282 I0609 09:58:41.394464 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-wtd4h" condition "Ready" to 2026-06-09 09:58:41.394452579 +0000 UTC m=+2003.072089676 I0609 09:58:41.424317 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:58:41.424305612 +0000 UTC m=+2003.101942709 I0609 09:58:41.457805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:58:41.458922 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:58:41.458911346 +0000 UTC m=+2003.136548443 I0609 09:58:41.462779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:58:41.473225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 09:58:41.473545 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 09:58:41.473540043 +0000 UTC m=+2003.151177130 I0609 10:02:01.399219 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-06-09 10:02:01.399184088 +0000 UTC m=+2203.076821195 I0609 10:02:01.399420 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:02:01.399494 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-06-09 10:02:01.399485208 +0000 UTC m=+2203.077122355 I0609 10:02:01.416407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:02:01.416507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:02:01.416529 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-06-09 10:02:01.416523101 +0000 UTC m=+2203.094160198 I0609 10:02:01.735175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-6cskn" condition "Approved" to 2026-06-09 10:02:01.735156105 +0000 UTC m=+2203.412793202 I0609 10:02:01.755019 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-6cskn" condition "Ready" to 2026-06-09 10:02:01.755007368 +0000 UTC m=+2203.432644455 I0609 10:02:01.785135 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:02:01.785109348 +0000 UTC m=+2203.462746465 I0609 10:02:01.808823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:02:01.809714 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:02:01.809704133 +0000 UTC m=+2203.487341230 I0609 10:02:01.831840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:02:01.832153 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:02:01.832144689 +0000 UTC m=+2203.509781776 I0609 10:02:59.972790 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ndsx6-vnc" condition "Ready" to 2026-06-09 10:02:59.97274265 +0000 UTC m=+2261.650379737 I0609 10:02:59.973242 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-ndsx6-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:02:59.973265 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ndsx6-vnc" condition "Issuing" to 2026-06-09 10:02:59.973261167 +0000 UTC m=+2261.650898254 I0609 10:02:59.974020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-ndsx6-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:02:59.974046 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ndsx6-api" condition "Issuing" to 2026-06-09 10:02:59.974040742 +0000 UTC m=+2261.651677829 I0609 10:02:59.974414 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ndsx6-api" condition "Ready" to 2026-06-09 10:02:59.974408643 +0000 UTC m=+2261.652045730 I0609 10:02:59.997018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-ndsx6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndsx6-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:02:59.997128 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ndsx6-vnc" condition "Ready" to 2026-06-09 10:02:59.997119558 +0000 UTC m=+2261.674756655 I0609 10:02:59.997548 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-ndsx6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndsx6-api\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:02:59.997639 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ndsx6-api" condition "Ready" to 2026-06-09 10:02:59.997632834 +0000 UTC m=+2261.675269921 I0609 10:03:00.198818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-ndsx6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndsx6-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:03:00.253282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-ndsx6-vnc-74bcq" condition "Approved" to 2026-06-09 10:03:00.253268268 +0000 UTC m=+2261.930905365 I0609 10:03:00.290034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-ndsx6-vnc-74bcq" condition "Ready" to 2026-06-09 10:03:00.29001498 +0000 UTC m=+2261.967652067 I0609 10:03:00.319955 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ndsx6-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:03:00.319905563 +0000 UTC m=+2261.997542650 I0609 10:03:00.341944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-ndsx6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndsx6-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:03:00.342295 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ndsx6-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:03:00.342286777 +0000 UTC m=+2262.019923874 I0609 10:03:00.362890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-ndsx6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndsx6-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:03:00.395942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-ndsx6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndsx6-api\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:03:00.424948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-ndsx6-api-zz2tt" condition "Approved" to 2026-06-09 10:03:00.424932323 +0000 UTC m=+2262.102569420 I0609 10:03:00.445364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-ndsx6-api-zz2tt" condition "Ready" to 2026-06-09 10:03:00.445332544 +0000 UTC m=+2262.122969671 I0609 10:03:00.479525 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ndsx6-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:03:00.479508014 +0000 UTC m=+2262.157145141 I0609 10:03:00.509431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-ndsx6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndsx6-api\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:03:00.510107 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ndsx6-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:03:00.510053729 +0000 UTC m=+2262.187690816 I0609 10:03:00.533806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-ndsx6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndsx6-api\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:06:57.449520 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:06:57.449595 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-06-09 10:06:57.449558743 +0000 UTC m=+2499.127195840 I0609 10:06:57.450192 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-06-09 10:06:57.450186563 +0000 UTC m=+2499.127823650 I0609 10:06:57.470852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:06:57.471216 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:06:57.471253 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-06-09 10:06:57.471242724 +0000 UTC m=+2499.148879851 I0609 10:06:57.680035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-gxn76" condition "Approved" to 2026-06-09 10:06:57.680021894 +0000 UTC m=+2499.357658991 I0609 10:06:57.701025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-gxn76" condition "Ready" to 2026-06-09 10:06:57.701014264 +0000 UTC m=+2499.378651371 I0609 10:06:57.745461 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:06:57.745442061 +0000 UTC m=+2499.423079198 I0609 10:06:57.771928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:06:59.205271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:06:59.205315 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-06-09 10:06:59.205300598 +0000 UTC m=+2500.882937695 I0609 10:06:59.205341 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-06-09 10:06:59.205326338 +0000 UTC m=+2500.882963475 I0609 10:06:59.224412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:06:59.224577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:06:59.224679 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-06-09 10:06:59.224668775 +0000 UTC m=+2500.902305892 I0609 10:07:00.064219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-w45jl" condition "Approved" to 2026-06-09 10:07:00.064201564 +0000 UTC m=+2501.741838691 I0609 10:07:00.090016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-w45jl" condition "Ready" to 2026-06-09 10:07:00.090002557 +0000 UTC m=+2501.767639654 I0609 10:07:00.113702 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:07:00.113694803 +0000 UTC m=+2501.791331890 I0609 10:07:00.147306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:07:00.203007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" E0609 10:09:09.273296 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out I0609 10:10:13.270173 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:10:13.270257 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-06-09 10:10:13.27024015 +0000 UTC m=+2694.947877267 I0609 10:10:13.270339 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-06-09 10:10:13.270320562 +0000 UTC m=+2694.947957689 E0609 10:10:13.284968 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 10:10:13.285053 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-06-09 10:10:13.285041452 +0000 UTC m=+2694.962678569 I0609 10:10:13.285108 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 10:10:13.285451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:13.285565 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-06-09 10:10:13.285555778 +0000 UTC m=+2694.963192885 E0609 10:10:13.298614 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0609 10:10:13.298724 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 10:10:13.298764 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0609 10:10:13.298800 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0609 10:10:13.304018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:13.332475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-7kjbt" condition "Approved" to 2026-06-09 10:10:13.332466493 +0000 UTC m=+2695.010103570 I0609 10:10:13.348310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-7kjbt" condition "Ready" to 2026-06-09 10:10:13.348299278 +0000 UTC m=+2695.025936375 I0609 10:10:13.372500 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:10:13.372483169 +0000 UTC m=+2695.050120286 I0609 10:10:13.430166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:13.438613 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:10:13.438592037 +0000 UTC m=+2695.116229164 I0609 10:10:13.481823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:14.029863 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:10:14.029901 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-06-09 10:10:14.029893754 +0000 UTC m=+2695.707530851 I0609 10:10:14.030408 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-09 10:10:14.03039957 +0000 UTC m=+2695.708036717 E0609 10:10:14.043853 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 10:10:14.043890 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-06-09 10:10:14.04388372 +0000 UTC m=+2695.721520807 I0609 10:10:14.043927 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0609 10:10:14.051494 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0609 10:10:14.051740 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 10:10:14.051777 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0609 10:10:14.051823 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0609 10:10:14.051999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:14.052052 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:10:14.052068 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-06-09 10:10:14.052063541 +0000 UTC m=+2695.729700628 I0609 10:10:14.099535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:14.100904 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-lxjhl" condition "Approved" to 2026-06-09 10:10:14.100896148 +0000 UTC m=+2695.778533235 I0609 10:10:14.131503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-lxjhl" condition "Ready" to 2026-06-09 10:10:14.131493093 +0000 UTC m=+2695.809130180 I0609 10:10:14.157297 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:10:14.157282916 +0000 UTC m=+2695.834920013 I0609 10:10:14.176802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:14.176926 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:10:14.176920052 +0000 UTC m=+2695.854557139 I0609 10:10:14.185194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:14.212728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:14.834139 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-09 10:10:14.83412396 +0000 UTC m=+2696.511761057 I0609 10:10:14.834173 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:10:14.834226 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-06-09 10:10:14.834212853 +0000 UTC m=+2696.511849980 I0609 10:10:14.864049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:14.864163 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:10:14.864191 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-06-09 10:10:14.864185889 +0000 UTC m=+2696.541822986 I0609 10:10:14.928235 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:14.931339 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-km2jc" condition "Approved" to 2026-06-09 10:10:14.9313271 +0000 UTC m=+2696.608964197 I0609 10:10:14.949814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-km2jc" condition "Ready" to 2026-06-09 10:10:14.949806289 +0000 UTC m=+2696.627443376 I0609 10:10:18.299679 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:10:18.299667803 +0000 UTC m=+2699.977304890 I0609 10:10:18.314105 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-km2jc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:10:18.314091743 +0000 UTC m=+2699.991728830 I0609 10:10:18.338527 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:10:18.338514542 +0000 UTC m=+2700.016151629 I0609 10:10:18.356800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:18.357215 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:10:18.357201547 +0000 UTC m=+2700.034838674 I0609 10:10:18.373080 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:18.373265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:10:19.052856 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:10:19.052838991 +0000 UTC m=+2700.730476108 I0609 10:12:52.539966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:12:52.540034 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-06-09 10:12:52.539996331 +0000 UTC m=+2854.217633418 I0609 10:12:52.540205 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-06-09 10:12:52.540193227 +0000 UTC m=+2854.217830344 I0609 10:12:52.570662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:12:52.570912 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-06-09 10:12:52.570903616 +0000 UTC m=+2854.248540703 I0609 10:12:52.737690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:12:52.771501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-2ktxm" condition "Approved" to 2026-06-09 10:12:52.771485203 +0000 UTC m=+2854.449122300 I0609 10:12:52.789938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-2ktxm" condition "Ready" to 2026-06-09 10:12:52.789928331 +0000 UTC m=+2854.467565418 I0609 10:12:52.818469 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:12:52.81843681 +0000 UTC m=+2854.496073897 I0609 10:12:52.848160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:39.557073 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-09 10:13:39.557054021 +0000 UTC m=+2901.234691108 I0609 10:13:39.575851 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-09 10:13:39.57583556 +0000 UTC m=+2901.253472657 I0609 10:13:39.576014 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:13:39.576183 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-09 10:13:39.57616842 +0000 UTC m=+2901.253805537 I0609 10:13:39.590002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:39.590107 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:13:39.590143 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-09 10:13:39.590135326 +0000 UTC m=+2901.267772423 E0609 10:13:39.619537 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0609 10:13:39.674751 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-09 10:13:39.674735584 +0000 UTC m=+2901.352372691 I0609 10:13:39.694517 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:13:39.694557 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-09 10:13:39.694548616 +0000 UTC m=+2901.372185723 I0609 10:13:39.694553 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-09 10:13:39.694535625 +0000 UTC m=+2901.372172742 I0609 10:13:39.720242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:39.720313 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-09 10:13:39.720308167 +0000 UTC m=+2901.397945244 E0609 10:13:39.767610 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0609 10:13:39.918778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:39.963656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-whkbs" condition "Approved" to 2026-06-09 10:13:39.963644207 +0000 UTC m=+2901.641281304 I0609 10:13:39.987699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-whkbs" condition "Ready" to 2026-06-09 10:13:39.987688763 +0000 UTC m=+2901.665325850 I0609 10:13:40.025839 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:13:40.025798249 +0000 UTC m=+2901.703435336 I0609 10:13:40.059202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:40.059409 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:13:40.059403251 +0000 UTC m=+2901.737040338 I0609 10:13:40.084878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:40.746085 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-09 10:13:40.746055127 +0000 UTC m=+2902.423692214 I0609 10:13:40.764297 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-09 10:13:40.764286769 +0000 UTC m=+2902.441923856 I0609 10:13:40.764846 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:13:40.764870 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-09 10:13:40.764865237 +0000 UTC m=+2902.442502334 I0609 10:13:40.793531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:40.793587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:13:40.793602 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-09 10:13:40.793597603 +0000 UTC m=+2902.471234700 I0609 10:13:41.156756 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-09 10:13:41.156743393 +0000 UTC m=+2902.834380480 I0609 10:13:41.175313 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:13:41.175361 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-09 10:13:41.175351226 +0000 UTC m=+2902.852988323 I0609 10:13:41.175435 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-09 10:13:41.175419858 +0000 UTC m=+2902.853056955 I0609 10:13:41.198983 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:41.199097 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-09 10:13:41.199088663 +0000 UTC m=+2902.876725750 I0609 10:13:41.205193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:41.211424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8t7wk" condition "Approved" to 2026-06-09 10:13:41.211409956 +0000 UTC m=+2902.889047043 I0609 10:13:41.248575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8t7wk" condition "Ready" to 2026-06-09 10:13:41.248560681 +0000 UTC m=+2902.926197768 I0609 10:13:41.295014 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:13:41.294998072 +0000 UTC m=+2902.972635159 I0609 10:13:41.334207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:41.334549 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:13:41.334540633 +0000 UTC m=+2903.012177720 I0609 10:13:41.363412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:41.363829 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:13:41.363821516 +0000 UTC m=+2903.041458603 I0609 10:13:41.371803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:41.427984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-86nkb" condition "Approved" to 2026-06-09 10:13:41.427973082 +0000 UTC m=+2903.105610169 I0609 10:13:41.458071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-86nkb" condition "Ready" to 2026-06-09 10:13:41.458061272 +0000 UTC m=+2903.135698359 I0609 10:13:41.533358 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:13:41.533345712 +0000 UTC m=+2903.210982799 I0609 10:13:41.585429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:41.651074 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-09 10:13:41.651057826 +0000 UTC m=+2903.328694913 I0609 10:13:41.664327 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:41.675317 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-09 10:13:41.675300679 +0000 UTC m=+2903.352937776 I0609 10:13:41.675384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:13:41.675410 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-09 10:13:41.675403073 +0000 UTC m=+2903.353040160 I0609 10:13:41.819490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:41.819580 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:13:41.819606 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-09 10:13:41.819598491 +0000 UTC m=+2903.497235608 I0609 10:13:42.516552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-2sth4" condition "Approved" to 2026-06-09 10:13:42.516536006 +0000 UTC m=+2904.194173123 I0609 10:13:42.552646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-2sth4" condition "Ready" to 2026-06-09 10:13:42.552630067 +0000 UTC m=+2904.230267164 I0609 10:13:42.720786 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:13:42.720770208 +0000 UTC m=+2904.398407295 I0609 10:13:42.813243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:42.813648 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:13:42.8136394 +0000 UTC m=+2904.491276497 I0609 10:13:43.244212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:13:43.244528 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:13:43.244519711 +0000 UTC m=+2904.922156798 E0609 10:16:07.905401 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out I0609 10:18:32.150567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:18:32.150649 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-06-09 10:18:32.150608866 +0000 UTC m=+3193.828245973 I0609 10:18:32.150852 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-06-09 10:18:32.150833543 +0000 UTC m=+3193.828470670 I0609 10:18:32.178334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:18:32.178457 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-06-09 10:18:32.178448034 +0000 UTC m=+3193.856085151 I0609 10:18:32.292811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:18:32.327698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-87bqn" condition "Approved" to 2026-06-09 10:18:32.327687255 +0000 UTC m=+3194.005324342 I0609 10:18:32.347453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-87bqn" condition "Ready" to 2026-06-09 10:18:32.347442325 +0000 UTC m=+3194.025079412 I0609 10:18:32.377308 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:18:32.377296797 +0000 UTC m=+3194.054933894 I0609 10:18:32.399355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:18:34.968090 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 10:18:34.968117 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-06-09 10:18:34.968110834 +0000 UTC m=+3196.645747921 I0609 10:18:34.970147 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-09 10:18:34.970122439 +0000 UTC m=+3196.647759536 I0609 10:18:34.991415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:18:34.991543 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-09 10:18:34.991534552 +0000 UTC m=+3196.669171679 I0609 10:18:35.358540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 10:18:35.390606 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-97nhn" condition "Approved" to 2026-06-09 10:18:35.390596482 +0000 UTC m=+3197.068233569 I0609 10:18:35.414953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-97nhn" condition "Ready" to 2026-06-09 10:18:35.414943949 +0000 UTC m=+3197.092581036 I0609 10:18:35.446070 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 10:18:35.446055821 +0000 UTC m=+3197.123692908 I0609 10:18:35.484573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0609 10:19:20.839707 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0609 10:19:41.737967 1 leaderelection.go:369] Failed to update lock: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0609 10:19:41.738026 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0609 10:19:42.770043 1 leaderelection.go:308] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again I0609 10:19:42.770304 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0609 10:19:42.770390 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0609 10:19:42.770429 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0609 10:19:42.770466 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0609 10:19:42.770497 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0609 10:19:42.770580 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0609 10:19:42.770835 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0609 10:19:42.770894 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0609 10:19:42.771046 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0609 10:19:42.771090 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0609 10:19:42.771118 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0609 10:19:42.771156 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0609 10:19:42.773733 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0609 10:19:42.779529 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0609 10:19:42.779569 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0609 10:19:42.779624 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0609 10:19:42.779652 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0609 10:19:42.770333 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" E0609 10:19:42.779884 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"