I0729 08:04:29.853169 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0729 08:04:29.853365 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0729 08:04:29.858386 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0729 08:04:29.858428 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0729 08:04:29.858444 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0729 08:04:29.858981 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0729 08:04:29.859027 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0729 08:04:29.859086 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0729 08:04:29.863687 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0729 08:04:29.880137 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0729 08:04:29.883394 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0729 08:04:29.886089 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0729 08:04:29.888302 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0729 08:04:29.892261 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0729 08:04:29.896325 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0729 08:04:29.899709 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0729 08:04:29.902043 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0729 08:04:29.904218 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0729 08:04:29.904295 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0729 08:04:29.906129 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0729 08:04:29.909491 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0729 08:04:29.913651 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0729 08:04:29.917165 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0729 08:04:29.920177 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0729 08:04:29.921868 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0729 08:04:29.921896 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0729 08:04:29.921902 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0729 08:04:29.921908 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0729 08:04:29.921913 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0729 08:04:29.923875 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0729 08:04:29.925930 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0729 08:04:29.927877 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0729 08:04:29.929540 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0729 08:04:29.931043 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0729 08:04:29.935413 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 08:04:29.935600 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 08:04:29.936187 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 08:04:29.936410 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 08:04:29.936649 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 08:04:29.936824 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 08:04:29.949802 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 08:04:29.966213 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 08:04:29.985436 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 08:04:30.002535 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 08:04:30.024749 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0729 08:04:50.967199 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-29 08:04:50.967172446 +0000 UTC m=+21.138118774 I0729 08:04:51.660972 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 08:04:51.661329 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-29 08:04:51.661316494 +0000 UTC m=+21.832262832 I0729 08:04:51.661406 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-29 08:04:51.661399887 +0000 UTC m=+21.832346215 I0729 08:04:51.672430 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:04:51.672497 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 08:04:51.672843 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-29 08:04:51.67283449 +0000 UTC m=+21.843780818 E0729 08:04:51.673712 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0729 08:04:51.673828 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-29 08:04:51.673817758 +0000 UTC m=+21.844764086 E0729 08:04:51.673864 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 08:04:51.681581 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0729 08:04:51.681663 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 08:04:51.681689 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0729 08:04:51.681717 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0729 08:04:51.704050 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:04:51.717633 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-29 08:04:51.717619246 +0000 UTC m=+21.888565574 I0729 08:04:51.737597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-29 08:04:51.737575891 +0000 UTC m=+21.908522229 I0729 08:04:51.757297 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 08:04:51.757282258 +0000 UTC m=+21.928228596 I0729 08:04:51.771855 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:04:51.772356 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 08:04:51.772348164 +0000 UTC m=+21.943294472 I0729 08:04:51.782065 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:04:56.682789 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 08:04:56.682775596 +0000 UTC m=+26.853721934 I0729 08:05:17.047284 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 08:05:17.047336 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-29 08:05:17.047283953 +0000 UTC m=+47.218230271 I0729 08:05:17.047361 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-29 08:05:17.047351785 +0000 UTC m=+47.218298093 I0729 08:05:17.056201 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-29 08:05:17.056183815 +0000 UTC m=+47.227130123 I0729 08:05:17.063459 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:05:17.063551 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-29 08:05:17.063541392 +0000 UTC m=+47.234487700 I0729 08:05:17.214607 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:05:17.247151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-29 08:05:17.247130144 +0000 UTC m=+47.418076462 I0729 08:05:17.274335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-29 08:05:17.274317142 +0000 UTC m=+47.445263460 I0729 08:05:17.295856 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 08:05:17.295834801 +0000 UTC m=+47.466781119 I0729 08:05:17.311423 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:05:17.312561 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 08:05:17.312545193 +0000 UTC m=+47.483491511 I0729 08:05:17.323350 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:05:17.329483 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:16:13.198442 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-102.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 08:16:13.198494 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-102.nip.io-tls" condition "Issuing" to 2026-07-29 08:16:13.198488128 +0000 UTC m=+703.369434426 I0729 08:16:13.198566 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-102.nip.io-tls" condition "Ready" to 2026-07-29 08:16:13.198544389 +0000 UTC m=+703.369490717 I0729 08:16:13.211116 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-102.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-102.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:16:13.211198 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-102.nip.io-tls" condition "Ready" to 2026-07-29 08:16:13.211190071 +0000 UTC m=+703.382136369 I0729 08:16:13.452313 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-102.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-102.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:16:13.490928 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-102.nip.io-tls-1" condition "Approved" to 2026-07-29 08:16:13.490915297 +0000 UTC m=+703.661861635 I0729 08:16:13.512308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-102.nip.io-tls-1" condition "Ready" to 2026-07-29 08:16:13.512291847 +0000 UTC m=+703.683238185 I0729 08:16:13.539940 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-102.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 08:16:13.539927575 +0000 UTC m=+703.710873883 I0729 08:16:13.563028 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-102.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-102.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:16:13.564466 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-102.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 08:16:13.564454904 +0000 UTC m=+703.735401242 I0729 08:16:13.582140 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-102.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-102.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:20:05.851958 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-29 08:20:05.851946 +0000 UTC m=+936.022892338 I0729 08:20:05.852284 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 08:20:05.852374 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-29 08:20:05.852363132 +0000 UTC m=+936.023309470 I0729 08:20:05.864126 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:20:05.864254 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 08:20:05.864300 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-29 08:20:05.864288276 +0000 UTC m=+936.035234604 I0729 08:20:06.134678 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:20:06.152580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-29 08:20:06.152566952 +0000 UTC m=+936.323513290 I0729 08:20:06.168987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-29 08:20:06.168978044 +0000 UTC m=+936.339924352 I0729 08:20:06.190204 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 08:20:06.190190194 +0000 UTC m=+936.361136502 I0729 08:20:06.204418 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:20:06.205320 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 08:20:06.205292408 +0000 UTC m=+936.376238736 I0729 08:20:06.216269 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:24:08.720127 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 08:24:08.720174 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-29 08:24:08.720167305 +0000 UTC m=+1178.891113603 I0729 08:24:08.720336 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-29 08:24:08.720330471 +0000 UTC m=+1178.891276769 I0729 08:24:08.732291 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0729 08:24:08.732395 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0729 08:24:08.732428 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-29 08:24:08.732421125 +0000 UTC m=+1178.903367413 I0729 08:24:09.121364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Approved" to 2026-07-29 08:24:09.121344994 +0000 UTC m=+1179.292291332 I0729 08:24:09.142251 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Ready" to 2026-07-29 08:24:09.142232719 +0000 UTC m=+1179.313179057 I0729 08:24:09.169235 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 08:24:09.169217899 +0000 UTC m=+1179.340164237 I0729 08:24:09.182986 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"