I0910 11:14:03.434331 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0910 11:14:03.434573 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0910 11:14:03.434731 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0910 11:14:03.439105 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0910 11:14:03.439555 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0910 11:14:03.439697 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0910 11:14:03.439734 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0910 11:14:03.441942 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0910 11:14:03.457141 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0910 11:14:03.464578 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0910 11:14:03.470441 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0910 11:14:03.477029 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0910 11:14:03.477218 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0910 11:14:03.481924 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0910 11:14:03.486690 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0910 11:14:03.490613 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0910 11:14:03.494387 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0910 11:14:03.498327 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0910 11:14:03.503472 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0910 11:14:03.503541 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0910 11:14:03.504088 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0910 11:14:03.508851 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0910 11:14:03.511141 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0910 11:14:03.511167 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0910 11:14:03.511175 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0910 11:14:03.513343 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0910 11:14:03.515436 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0910 11:14:03.517345 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0910 11:14:03.519345 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0910 11:14:03.521398 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0910 11:14:03.523112 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0910 11:14:03.525851 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0910 11:14:03.526345 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0910 11:14:03.530797 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:14:03.530806 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:14:03.531506 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:14:03.554378 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:14:03.571128 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:14:03.587248 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:14:03.607186 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:14:03.618833 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:14:03.625552 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:14:03.635581 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:14:16.482411 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-10 11:14:16.482397811 +0000 UTC m=+13.080344383 I0910 11:14:17.277176 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:14:17.277224 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 11:14:17.277215954 +0000 UTC m=+13.875162536 I0910 11:14:17.278201 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 11:14:17.278181873 +0000 UTC m=+13.876128465 E0910 11:14:17.294603 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:14:17.294681 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-10 11:14:17.294673939 +0000 UTC m=+13.892620491 E0910 11:14:17.294708 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:14:17.295552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:17.295740 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 11:14:17.295731492 +0000 UTC m=+13.893678074 E0910 11:14:17.309893 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0910 11:14:17.310148 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:14:17.310285 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:14:17.310546 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0910 11:14:17.316027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:17.340722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-t9m28" condition "Approved" to 2026-09-10 11:14:17.340710841 +0000 UTC m=+13.938657393 I0910 11:14:17.355373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-t9m28" condition "Ready" to 2026-09-10 11:14:17.35534843 +0000 UTC m=+13.953294982 I0910 11:14:17.377211 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:14:17.37719931 +0000 UTC m=+13.975145862 I0910 11:14:17.395272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:17.397436 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:14:17.397429401 +0000 UTC m=+13.995375953 I0910 11:14:17.416315 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:17.418805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:22.311395 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:14:22.311371026 +0000 UTC m=+18.909317608 I0910 11:14:45.208492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:14:45.208533 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 11:14:45.208523344 +0000 UTC m=+41.806469906 I0910 11:14:45.208989 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 11:14:45.208983628 +0000 UTC m=+41.806930190 I0910 11:14:45.228158 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-10 11:14:45.228141645 +0000 UTC m=+41.826088197 I0910 11:14:45.239684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:45.239829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:14:45.239880 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 11:14:45.239869265 +0000 UTC m=+41.837815828 I0910 11:14:45.437216 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7k7dj" condition "Approved" to 2026-09-10 11:14:45.437198737 +0000 UTC m=+42.035145329 I0910 11:14:45.479255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-7k7dj" condition "Ready" to 2026-09-10 11:14:45.479238456 +0000 UTC m=+42.077185038 I0910 11:14:45.521805 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:14:45.52178947 +0000 UTC m=+42.119736022 I0910 11:14:45.558135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:45.652395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:20.977527 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:16:20.977543 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-10 11:16:20.977529056 +0000 UTC m=+137.575475648 I0910 11:16:20.977574 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-10 11:16:20.977566617 +0000 UTC m=+137.575513209 E0910 11:16:20.994097 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:16:20.994184 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-10 11:16:20.994176842 +0000 UTC m=+137.592123414 I0910 11:16:20.994206 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:16:20.997174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:20.997251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:16:20.997279 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-10 11:16:20.997270407 +0000 UTC m=+137.595216959 E0910 11:16:21.007273 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0910 11:16:21.007532 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:16:21.007594 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 11:16:21.007643 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0910 11:16:21.014240 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:16:21.014297 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-10 11:16:21.014284745 +0000 UTC m=+137.612231317 I0910 11:16:21.014673 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-10 11:16:21.014645996 +0000 UTC m=+137.612592578 I0910 11:16:21.037709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:21.037970 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:16:21.038077 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-10 11:16:21.038008298 +0000 UTC m=+137.635954860 I0910 11:16:21.256659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-plhph" condition "Approved" to 2026-09-10 11:16:21.256638597 +0000 UTC m=+137.854585149 I0910 11:16:21.272561 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-plhph" condition "Ready" to 2026-09-10 11:16:21.272545091 +0000 UTC m=+137.870491643 I0910 11:16:21.283669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-l5mnx" condition "Approved" to 2026-09-10 11:16:21.283640589 +0000 UTC m=+137.881587241 I0910 11:16:21.319211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-l5mnx" condition "Ready" to 2026-09-10 11:16:21.319187263 +0000 UTC m=+137.917133855 I0910 11:16:21.358714 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:21.358693316 +0000 UTC m=+137.956639868 I0910 11:16:21.387640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:21.388433 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:21.388422551 +0000 UTC m=+137.986369133 I0910 11:16:21.427573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:26.008443 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:26.008429654 +0000 UTC m=+142.606376236 I0910 11:16:26.029107 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-plhph" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:26.029091574 +0000 UTC m=+142.627038166 I0910 11:16:26.084892 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:26.08486987 +0000 UTC m=+142.682816482 I0910 11:16:26.117438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:19:37.738156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-72.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:19:37.738443 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-72.nip.io-tls" condition "Ready" to 2026-09-10 11:19:37.738246291 +0000 UTC m=+334.336192873 I0910 11:19:37.738991 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-72.nip.io-tls" condition "Issuing" to 2026-09-10 11:19:37.73821514 +0000 UTC m=+334.336161722 I0910 11:19:37.760705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:19:37.760925 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-72.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:19:37.761014 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-72.nip.io-tls" condition "Issuing" to 2026-09-10 11:19:37.76100006 +0000 UTC m=+334.358946662 I0910 11:19:38.069236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-72.nip.io-tls-x9qfc" condition "Approved" to 2026-09-10 11:19:38.069208957 +0000 UTC m=+334.667155539 I0910 11:19:38.092762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-72.nip.io-tls-x9qfc" condition "Ready" to 2026-09-10 11:19:38.092751061 +0000 UTC m=+334.690697613 I0910 11:19:38.128508 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:19:38.128487954 +0000 UTC m=+334.726434536 I0910 11:19:38.157763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:19:38.158059 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:19:38.158052639 +0000 UTC m=+334.755999191 I0910 11:19:38.162301 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:19:38.176132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:19:38.176747 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-72.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:19:38.176733875 +0000 UTC m=+334.774680457 I0910 11:19:38.179270 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-72.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-72.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:20:53.367869 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 11:20:53.367849197 +0000 UTC m=+409.965795789 I0910 11:20:53.367896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:20:53.367963 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 11:20:53.36795271 +0000 UTC m=+409.965899302 E0910 11:20:53.383233 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:20:53.383268 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-10 11:20:53.383261786 +0000 UTC m=+409.981208338 E0910 11:20:53.383312 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:20:53.385714 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:20:53.385793 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:20:53.385824 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 11:20:53.385815093 +0000 UTC m=+409.983761675 E0910 11:20:53.399229 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0910 11:20:53.399413 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:20:53.399460 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:20:53.399537 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0910 11:20:53.433547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pwxtp" condition "Approved" to 2026-09-10 11:20:53.433519385 +0000 UTC m=+410.031465957 I0910 11:20:53.447441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-pwxtp" condition "Ready" to 2026-09-10 11:20:53.447419048 +0000 UTC m=+410.045365640 I0910 11:20:53.473631 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:20:53.473608646 +0000 UTC m=+410.071555208 I0910 11:20:53.500696 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:20:53.501010 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:20:53.501005439 +0000 UTC m=+410.098952001 I0910 11:20:53.512556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:20:53.515700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:20:53.516104 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:20:53.516092339 +0000 UTC m=+410.114038901 I0910 11:20:58.400157 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:20:58.400141761 +0000 UTC m=+414.998088343 I0910 11:21:40.952962 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:21:40.953061 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 11:21:40.953051624 +0000 UTC m=+457.550998206 I0910 11:21:40.952985 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 11:21:40.952856788 +0000 UTC m=+457.550803390 I0910 11:21:40.965012 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 11:21:40.964995208 +0000 UTC m=+457.562941860 I0910 11:21:40.965642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:21:40.965694 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 11:21:40.965687828 +0000 UTC m=+457.563634420 I0910 11:21:40.966006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:21:40.966032 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 11:21:40.966026518 +0000 UTC m=+457.563973110 I0910 11:21:40.966157 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 11:21:40.966136271 +0000 UTC m=+457.564082873 I0910 11:21:40.993737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:40.993850 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:21:40.993893 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 11:21:40.993885176 +0000 UTC m=+457.591831758 I0910 11:21:41.002136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:41.002646 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 11:21:41.002632263 +0000 UTC m=+457.600578845 I0910 11:21:41.011553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:41.011615 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 11:21:41.011607466 +0000 UTC m=+457.609554038 I0910 11:21:41.162427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:41.165874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:41.166148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-q4xhp" condition "Approved" to 2026-09-10 11:21:41.166123749 +0000 UTC m=+457.764070311 I0910 11:21:41.169459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:41.196810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-q4xhp" condition "Ready" to 2026-09-10 11:21:41.196799552 +0000 UTC m=+457.794746104 I0910 11:21:41.216753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rqbbn" condition "Approved" to 2026-09-10 11:21:41.216738879 +0000 UTC m=+457.814685461 I0910 11:21:41.220691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ck4fg" condition "Approved" to 2026-09-10 11:21:41.220666689 +0000 UTC m=+457.818613281 I0910 11:21:41.246331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-rqbbn" condition "Ready" to 2026-09-10 11:21:41.2463104 +0000 UTC m=+457.844256962 I0910 11:21:41.246796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-ck4fg" condition "Ready" to 2026-09-10 11:21:41.246779094 +0000 UTC m=+457.844725666 I0910 11:21:41.348925 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:21:41.348906012 +0000 UTC m=+457.946852574 I0910 11:21:41.657224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:41.658203 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:21:41.658192036 +0000 UTC m=+458.256138618 I0910 11:21:41.744562 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:21:41.744546274 +0000 UTC m=+458.342492826 I0910 11:21:41.852138 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:21:41.852109198 +0000 UTC m=+458.450055780 I0910 11:21:42.095375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:42.096022 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:21:42.096011881 +0000 UTC m=+458.693958463 I0910 11:21:42.194217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:42.194832 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:21:42.194820029 +0000 UTC m=+458.792766611 I0910 11:21:42.247704 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:42.695657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:42.751068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:42.795774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:50.124018 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls" condition "Ready" to 2026-09-10 11:21:50.124001431 +0000 UTC m=+466.721947993 I0910 11:21:50.124365 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:21:50.124420 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls" condition "Issuing" to 2026-09-10 11:21:50.124408143 +0000 UTC m=+466.722354705 I0910 11:21:50.141855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:50.141916 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:21:50.141933 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls" condition "Issuing" to 2026-09-10 11:21:50.14192735 +0000 UTC m=+466.739873912 I0910 11:21:50.578030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tgf4q-2sg9l" condition "Approved" to 2026-09-10 11:21:50.578017503 +0000 UTC m=+467.175964065 I0910 11:21:50.597827 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tgf4q-2sg9l" condition "Ready" to 2026-09-10 11:21:50.59781661 +0000 UTC m=+467.195763162 I0910 11:21:50.632554 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:21:50.632534261 +0000 UTC m=+467.230480853 I0910 11:21:50.657785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:50.661395 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:21:50.661385435 +0000 UTC m=+467.259331997 I0910 11:21:50.678529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:21:50.678864 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tgf4q-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:21:50.678853499 +0000 UTC m=+467.276800041 I0910 11:22:18.250197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:22:18.250231 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 11:22:18.250224131 +0000 UTC m=+494.848170693 I0910 11:22:18.250561 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 11:22:18.250535451 +0000 UTC m=+494.848482013 I0910 11:22:18.278521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:22:18.278573 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:22:18.278584 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 11:22:18.278579819 +0000 UTC m=+494.876526361 I0910 11:22:18.447111 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8m55f" condition "Approved" to 2026-09-10 11:22:18.447091776 +0000 UTC m=+495.045038358 I0910 11:22:18.472366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-8m55f" condition "Ready" to 2026-09-10 11:22:18.472334278 +0000 UTC m=+495.070280860 I0910 11:22:18.513196 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:22:18.513178608 +0000 UTC m=+495.111125190 I0910 11:22:18.537171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:25:45.778341 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:25:45.778535 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 11:25:45.778484298 +0000 UTC m=+702.376430880 I0910 11:25:45.778640 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 11:25:45.778624812 +0000 UTC m=+702.376571394 I0910 11:25:45.815921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:25:45.816074 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 11:25:45.816058943 +0000 UTC m=+702.414005565 I0910 11:25:45.910698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:25:45.958338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-49d7s" condition "Approved" to 2026-09-10 11:25:45.958301913 +0000 UTC m=+702.556248475 I0910 11:25:45.986021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-49d7s" condition "Ready" to 2026-09-10 11:25:45.986011064 +0000 UTC m=+702.583957616 I0910 11:25:46.014306 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:25:46.014289463 +0000 UTC m=+702.612236015 I0910 11:25:46.038507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:28:25.089879 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:28:25.089944 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-10 11:28:25.08992383 +0000 UTC m=+861.687870382 I0910 11:28:25.089963 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-10 11:28:25.089952351 +0000 UTC m=+861.687898943 I0910 11:28:25.110881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:28:25.111137 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-10 11:28:25.111126759 +0000 UTC m=+861.709073351 I0910 11:28:25.302649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:28:25.350863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-gj92h" condition "Approved" to 2026-09-10 11:28:25.350849893 +0000 UTC m=+861.948796455 I0910 11:28:25.374254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-gj92h" condition "Ready" to 2026-09-10 11:28:25.374243468 +0000 UTC m=+861.972190030 I0910 11:28:25.403863 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:28:25.403850272 +0000 UTC m=+862.001796834 I0910 11:28:25.428455 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:28:25.428811 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:28:25.428804264 +0000 UTC m=+862.026750826 I0910 11:28:25.456325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:28:25.456855 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:28:25.456844302 +0000 UTC m=+862.054790884 I0910 11:28:25.457500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:29:50.740348 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-10 11:29:50.740324836 +0000 UTC m=+947.338271428 I0910 11:29:50.740642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:29:50.741008 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-10 11:29:50.740930344 +0000 UTC m=+947.338876996 I0910 11:29:50.761627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:29:50.761770 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-10 11:29:50.761755612 +0000 UTC m=+947.359702204 I0910 11:29:50.999321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:29:51.043751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-87hh5" condition "Approved" to 2026-09-10 11:29:51.04373256 +0000 UTC m=+947.641679112 I0910 11:29:51.080290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-87hh5" condition "Ready" to 2026-09-10 11:29:51.080275069 +0000 UTC m=+947.678221651 I0910 11:29:51.121470 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:29:51.121448539 +0000 UTC m=+947.719395091 I0910 11:29:51.147865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:29:51.148720 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:29:51.148708423 +0000 UTC m=+947.746654975 I0910 11:29:51.191891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:33:03.127250 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:33:03.127417 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-10 11:33:03.127362115 +0000 UTC m=+1139.725308687 I0910 11:33:03.127522 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-10 11:33:03.127341365 +0000 UTC m=+1139.725287957 I0910 11:33:03.150647 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:33:03.150960 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:33:03.151100 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-10 11:33:03.150997593 +0000 UTC m=+1139.748944155 I0910 11:33:03.327447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:33:03.336952 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-9p6wj" condition "Approved" to 2026-09-10 11:33:03.33693348 +0000 UTC m=+1139.934880072 I0910 11:33:03.357882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-9p6wj" condition "Ready" to 2026-09-10 11:33:03.357872755 +0000 UTC m=+1139.955819307 I0910 11:33:03.396085 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:33:03.396060511 +0000 UTC m=+1139.994007073 I0910 11:33:03.420764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:33:03.421203 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:33:03.421194555 +0000 UTC m=+1140.019141107 I0910 11:33:03.426092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:33:03.440546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:33:03.440884 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:33:03.440876391 +0000 UTC m=+1140.038822943 I0910 11:33:03.445759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:41:14.557198 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-10 11:41:14.557013169 +0000 UTC m=+1631.154959781 I0910 11:41:14.557514 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:41:14.557543 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-10 11:41:14.557538644 +0000 UTC m=+1631.155485206 I0910 11:41:14.576578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:41:14.576719 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:41:14.576753 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-10 11:41:14.576743302 +0000 UTC m=+1631.174689894 I0910 11:41:15.055326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:41:15.063483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-r4knp" condition "Approved" to 2026-09-10 11:41:15.063466286 +0000 UTC m=+1631.661412888 I0910 11:41:15.081151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-r4knp" condition "Ready" to 2026-09-10 11:41:15.081139517 +0000 UTC m=+1631.679086069 I0910 11:41:15.108497 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:41:15.108485755 +0000 UTC m=+1631.706432307 I0910 11:41:15.129555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:42:52.821066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:42:52.821066 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-10 11:42:52.821040565 +0000 UTC m=+1729.418987127 I0910 11:42:52.821181 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-10 11:42:52.821170059 +0000 UTC m=+1729.419116641 I0910 11:42:52.840571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:42:52.840676 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-10 11:42:52.840668583 +0000 UTC m=+1729.438615135 I0910 11:42:52.996599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:42:53.042537 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-7x2tk" condition "Approved" to 2026-09-10 11:42:53.042525524 +0000 UTC m=+1729.640472076 I0910 11:42:53.066575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-7x2tk" condition "Ready" to 2026-09-10 11:42:53.066564576 +0000 UTC m=+1729.664511128 I0910 11:42:53.097546 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:42:53.097533278 +0000 UTC m=+1729.695479830 I0910 11:42:53.120524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:42:53.120948 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:42:53.120936279 +0000 UTC m=+1729.718882831 I0910 11:42:53.141934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:42:53.142505 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:42:53.142494225 +0000 UTC m=+1729.740440777 I0910 11:43:55.711536 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-10 11:43:55.711492262 +0000 UTC m=+1792.309438814 I0910 11:43:55.711568 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:43:55.711638 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-10 11:43:55.711627946 +0000 UTC m=+1792.309574518 I0910 11:43:55.740807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:43:55.740942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:43:55.740969 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-10 11:43:55.740964139 +0000 UTC m=+1792.338910691 I0910 11:43:55.790024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-d747k" condition "Approved" to 2026-09-10 11:43:55.790012041 +0000 UTC m=+1792.387958593 I0910 11:43:55.807975 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-d747k" condition "Ready" to 2026-09-10 11:43:55.807956188 +0000 UTC m=+1792.405902850 I0910 11:43:55.835722 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:43:55.835682071 +0000 UTC m=+1792.433628623 I0910 11:43:55.855586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:43:55.855903 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:43:55.855895546 +0000 UTC m=+1792.453842108 I0910 11:43:55.879831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:43:56.427194 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:43:56.427229 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-10 11:43:56.427202747 +0000 UTC m=+1793.025149309 I0910 11:43:56.427245 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-10 11:43:56.427236818 +0000 UTC m=+1793.025183380 I0910 11:43:56.455317 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:43:56.455459 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:43:56.455491 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-10 11:43:56.455483688 +0000 UTC m=+1793.053430240 I0910 11:43:56.515705 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-n7tmf" condition "Approved" to 2026-09-10 11:43:56.51568759 +0000 UTC m=+1793.113634142 I0910 11:43:56.532394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-n7tmf" condition "Ready" to 2026-09-10 11:43:56.532379267 +0000 UTC m=+1793.130325839 I0910 11:43:56.563898 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:43:56.563884296 +0000 UTC m=+1793.161830848 I0910 11:43:56.583598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:43:56.583888 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:43:56.583880984 +0000 UTC m=+1793.181827526 I0910 11:43:56.608328 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:43:57.222722 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-10 11:43:57.222707769 +0000 UTC m=+1793.820654321 I0910 11:43:57.849483 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-10 11:43:57.849467187 +0000 UTC m=+1794.447413740 I0910 11:44:46.602421 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-10 11:44:46.602409284 +0000 UTC m=+1843.200355846 I0910 11:44:46.602823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:44:46.602882 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-10 11:44:46.602875248 +0000 UTC m=+1843.200821800 I0910 11:44:46.638179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:44:46.638245 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-10 11:44:46.638238246 +0000 UTC m=+1843.236184798 I0910 11:44:47.677031 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:44:47.720875 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-gljjm" condition "Approved" to 2026-09-10 11:44:47.720859977 +0000 UTC m=+1844.318806539 I0910 11:44:47.739583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-gljjm" condition "Ready" to 2026-09-10 11:44:47.739571827 +0000 UTC m=+1844.337518379 I0910 11:44:47.776040 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:44:47.776025197 +0000 UTC m=+1844.373971739 I0910 11:44:47.796707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:44:47.798088 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:44:47.798081599 +0000 UTC m=+1844.396028151 I0910 11:44:47.821183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:47:52.322193 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:47:52.322295 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-10 11:47:52.322286077 +0000 UTC m=+2028.920232659 I0910 11:47:52.322158 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-10 11:47:52.322144563 +0000 UTC m=+2028.920091125 I0910 11:47:52.344063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:47:52.344439 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-10 11:47:52.344423043 +0000 UTC m=+2028.942369695 I0910 11:47:52.475398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:47:52.519385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-slcwr" condition "Approved" to 2026-09-10 11:47:52.519372396 +0000 UTC m=+2029.117318978 I0910 11:47:52.538149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-slcwr" condition "Ready" to 2026-09-10 11:47:52.538139469 +0000 UTC m=+2029.136086011 I0910 11:47:52.567931 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:47:52.567919858 +0000 UTC m=+2029.165866410 I0910 11:47:52.608778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:47:53.868214 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-10 11:47:53.86819637 +0000 UTC m=+2030.466142932 I0910 11:47:53.868487 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:47:53.868556 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-10 11:47:53.86854228 +0000 UTC m=+2030.466488842 I0910 11:47:53.891238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:47:53.891555 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-10 11:47:53.891539693 +0000 UTC m=+2030.489486265 I0910 11:47:54.237415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:47:54.276815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-dkbmd" condition "Approved" to 2026-09-10 11:47:54.276794009 +0000 UTC m=+2030.874740561 I0910 11:47:54.295334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-dkbmd" condition "Ready" to 2026-09-10 11:47:54.295320004 +0000 UTC m=+2030.893266556 I0910 11:47:54.325257 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:47:54.325239798 +0000 UTC m=+2030.923186350 I0910 11:47:54.348886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:47:54.406336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:08.970851 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-10 11:52:08.970834533 +0000 UTC m=+2285.568781085 I0910 11:52:08.970939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:52:08.970988 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-10 11:52:08.970981947 +0000 UTC m=+2285.568928499 I0910 11:52:08.998132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:08.998207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:52:08.998247 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-10 11:52:08.998239778 +0000 UTC m=+2285.596186360 I0910 11:52:09.321490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:09.327296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-7hsjz" condition "Approved" to 2026-09-10 11:52:09.327287026 +0000 UTC m=+2285.925233568 I0910 11:52:09.359899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-7hsjz" condition "Ready" to 2026-09-10 11:52:09.359888918 +0000 UTC m=+2285.957835470 I0910 11:52:09.393597 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:52:09.393561142 +0000 UTC m=+2285.991507704 I0910 11:52:09.413035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:09.413403 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:52:09.413396849 +0000 UTC m=+2286.011343411 I0910 11:52:09.433459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:09.187987 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-zkmsw-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:53:09.188074 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zkmsw-vnc" condition "Issuing" to 2026-09-10 11:53:09.188051819 +0000 UTC m=+2345.785998371 I0910 11:53:09.188075 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zkmsw-vnc" condition "Ready" to 2026-09-10 11:53:09.188027848 +0000 UTC m=+2345.785974400 I0910 11:53:09.190651 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-zkmsw-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:53:09.190679 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zkmsw-api" condition "Issuing" to 2026-09-10 11:53:09.190671939 +0000 UTC m=+2345.788618491 I0910 11:53:09.190769 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zkmsw-api" condition "Ready" to 2026-09-10 11:53:09.190744161 +0000 UTC m=+2345.788690713 I0910 11:53:09.222012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-zkmsw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zkmsw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:09.222133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-zkmsw-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:53:09.222158 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zkmsw-vnc" condition "Issuing" to 2026-09-10 11:53:09.222151818 +0000 UTC m=+2345.820098380 I0910 11:53:09.224731 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-zkmsw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zkmsw-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:09.224778 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-zkmsw-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:53:09.224794 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zkmsw-api" condition "Issuing" to 2026-09-10 11:53:09.224790168 +0000 UTC m=+2345.822736730 I0910 11:53:09.365675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-zkmsw-api-c98fs" condition "Approved" to 2026-09-10 11:53:09.365662606 +0000 UTC m=+2345.963609178 I0910 11:53:09.391955 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-zkmsw-api-c98fs" condition "Ready" to 2026-09-10 11:53:09.391936876 +0000 UTC m=+2345.989883428 I0910 11:53:09.420380 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-zkmsw-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:53:09.420368961 +0000 UTC m=+2346.018315513 I0910 11:53:09.440790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-zkmsw-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zkmsw-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:09.483331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-zkmsw-vnc-l9c77" condition "Approved" to 2026-09-10 11:53:09.483316167 +0000 UTC m=+2346.081262719 I0910 11:53:09.504786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-zkmsw-vnc-l9c77" condition "Ready" to 2026-09-10 11:53:09.504774331 +0000 UTC m=+2346.102720873 I0910 11:53:09.533148 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-zkmsw-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:53:09.533131174 +0000 UTC m=+2346.131077726 I0910 11:53:09.549476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-zkmsw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zkmsw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:09.549863 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-zkmsw-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:53:09.549855753 +0000 UTC m=+2346.147802305 I0910 11:53:09.577275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-zkmsw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zkmsw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:53:09.577472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-zkmsw-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zkmsw-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:57:18.889643 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:57:18.889712 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-10 11:57:18.889705864 +0000 UTC m=+2595.487652416 I0910 11:57:18.889824 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-10 11:57:18.889808037 +0000 UTC m=+2595.487754599 I0910 11:57:18.908558 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:57:18.908636 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:57:18.908656 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-10 11:57:18.90865091 +0000 UTC m=+2595.506597452 I0910 11:57:19.270770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-44nj7" condition "Approved" to 2026-09-10 11:57:19.270734621 +0000 UTC m=+2595.868681173 I0910 11:57:19.291982 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-44nj7" condition "Ready" to 2026-09-10 11:57:19.291967106 +0000 UTC m=+2595.889913658 I0910 11:57:19.319305 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:57:19.319266127 +0000 UTC m=+2595.917212679 I0910 11:57:19.340472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:57:20.433988 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-10 11:57:20.433961893 +0000 UTC m=+2597.031908455 I0910 11:57:20.434064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:57:20.434338 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-10 11:57:20.434133298 +0000 UTC m=+2597.032079850 I0910 11:57:20.455469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:57:20.455605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:57:20.455656 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-10 11:57:20.455647872 +0000 UTC m=+2597.053594424 I0910 11:57:20.754378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-zkzzx" condition "Approved" to 2026-09-10 11:57:20.754359164 +0000 UTC m=+2597.352305716 I0910 11:57:20.781693 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-zkzzx" condition "Ready" to 2026-09-10 11:57:20.781669926 +0000 UTC m=+2597.379616488 I0910 11:57:20.814927 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:57:20.814892316 +0000 UTC m=+2597.412838868 I0910 11:57:20.839274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:57:20.839732 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:57:20.83972118 +0000 UTC m=+2597.437667732 I0910 11:57:20.873081 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:59:57.617508 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:59:57.617590 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-10 11:59:57.617557747 +0000 UTC m=+2754.215504329 I0910 11:59:57.618404 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-10 11:59:57.618392562 +0000 UTC m=+2754.216339184 E0910 11:59:57.635592 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:59:57.636055 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-10 11:59:57.635825665 +0000 UTC m=+2754.233772247 I0910 11:59:57.636140 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:59:57.641920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:59:57.642103 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-10 11:59:57.642082406 +0000 UTC m=+2754.240028988 E0910 11:59:57.652787 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0910 11:59:57.652959 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:59:57.653019 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 11:59:57.653083 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0910 11:59:57.671373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:59:57.696617 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-2wzw2" condition "Approved" to 2026-09-10 11:59:57.696601744 +0000 UTC m=+2754.294548306 I0910 11:59:57.715637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-2wzw2" condition "Ready" to 2026-09-10 11:59:57.715625776 +0000 UTC m=+2754.313572338 I0910 11:59:57.745276 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:59:57.745254613 +0000 UTC m=+2754.343201205 I0910 11:59:57.764728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:59:58.445966 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:59:58.446001 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-10 11:59:58.445993407 +0000 UTC m=+2755.043939959 I0910 11:59:58.446352 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-10 11:59:58.446346509 +0000 UTC m=+2755.044293061 E0910 11:59:58.460524 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:59:58.460569 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-10 11:59:58.460560143 +0000 UTC m=+2755.058506705 I0910 11:59:58.460657 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:59:58.466902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:59:58.466977 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-10 11:59:58.466968229 +0000 UTC m=+2755.064914781 E0910 11:59:58.492268 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0910 11:59:58.492470 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:59:58.492527 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 11:59:58.492555 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0910 11:59:58.494707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:59:58.515218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-zkgcs" condition "Approved" to 2026-09-10 11:59:58.515207685 +0000 UTC m=+2755.113154237 I0910 11:59:58.532668 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-zkgcs" condition "Ready" to 2026-09-10 11:59:58.532659428 +0000 UTC m=+2755.130605980 I0910 11:59:58.556911 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:59:58.556899081 +0000 UTC m=+2755.154845643 I0910 11:59:58.576290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:59:58.576595 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:59:58.576588323 +0000 UTC m=+2755.174534865 I0910 11:59:58.604428 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:59:59.320428 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-10 11:59:59.320409286 +0000 UTC m=+2755.918355868 I0910 11:59:59.320526 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:59:59.320603 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-10 11:59:59.320589721 +0000 UTC m=+2755.918536273 I0910 11:59:59.337206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:59:59.337363 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-10 11:59:59.337352244 +0000 UTC m=+2755.935298796 I0910 11:59:59.359724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:59:59.361418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:59:59.361501 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-10 11:59:59.361492672 +0000 UTC m=+2755.959439234 I0910 11:59:59.367634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-g7zph" condition "Approved" to 2026-09-10 11:59:59.36761918 +0000 UTC m=+2755.965565732 I0910 11:59:59.390109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-g7zph" condition "Ready" to 2026-09-10 11:59:59.390091988 +0000 UTC m=+2755.988038550 I0910 12:00:02.653189 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:00:02.653179573 +0000 UTC m=+2759.251126125 I0910 12:00:02.689907 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-g7zph" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:00:02.689891405 +0000 UTC m=+2759.287837957 I0910 12:00:02.775887 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:00:02.775874476 +0000 UTC m=+2759.373821028 I0910 12:00:02.812419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:00:03.492674 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:00:03.492659112 +0000 UTC m=+2760.090605664 I0910 12:03:07.979875 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:03:07.979918 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-10 12:03:07.979913551 +0000 UTC m=+2944.577860123 I0910 12:03:07.979911 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-10 12:03:07.979904981 +0000 UTC m=+2944.577851533 I0910 12:03:08.003127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:08.003226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:03:08.003246 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-10 12:03:08.003240875 +0000 UTC m=+2944.601187427 I0910 12:03:08.171487 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-k8pps" condition "Approved" to 2026-09-10 12:03:08.171470841 +0000 UTC m=+2944.769417393 I0910 12:03:08.197495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-k8pps" condition "Ready" to 2026-09-10 12:03:08.197476627 +0000 UTC m=+2944.795423179 I0910 12:03:08.238331 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:03:08.238306636 +0000 UTC m=+2944.836253188 I0910 12:03:08.269469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:08.269760 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:03:08.269755117 +0000 UTC m=+2944.867701659 I0910 12:03:08.297833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:56.059161 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-10 12:03:56.059142251 +0000 UTC m=+2992.657088823 I0910 12:03:56.084064 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:03:56.084107 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-10 12:03:56.084087252 +0000 UTC m=+2992.682033804 I0910 12:03:56.084141 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-10 12:03:56.084128553 +0000 UTC m=+2992.682075105 I0910 12:03:56.096003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:56.096110 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-10 12:03:56.096101547 +0000 UTC m=+2992.694048099 E0910 12:03:56.118912 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0910 12:03:56.175030 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-10 12:03:56.175012403 +0000 UTC m=+2992.772958955 I0910 12:03:56.200531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:03:56.200550 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-10 12:03:56.200533351 +0000 UTC m=+2992.798479923 I0910 12:03:56.200562 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-10 12:03:56.200555462 +0000 UTC m=+2992.798502014 I0910 12:03:56.220397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:56.220490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:03:56.220515 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-10 12:03:56.22050901 +0000 UTC m=+2992.818455562 E0910 12:03:56.283920 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0910 12:03:56.511726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-sd299" condition "Approved" to 2026-09-10 12:03:56.511716617 +0000 UTC m=+2993.109663169 I0910 12:03:56.543624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-sd299" condition "Ready" to 2026-09-10 12:03:56.543615769 +0000 UTC m=+2993.141562321 I0910 12:03:56.586396 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:03:56.586387193 +0000 UTC m=+2993.184333745 I0910 12:03:56.616350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:56.616739 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:03:56.616730768 +0000 UTC m=+2993.214677320 I0910 12:03:56.660866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:57.321664 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-10 12:03:57.321646957 +0000 UTC m=+2993.919593529 I0910 12:03:57.341526 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:03:57.341559 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-10 12:03:57.341553713 +0000 UTC m=+2993.939500265 I0910 12:03:57.341818 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-10 12:03:57.341814471 +0000 UTC m=+2993.939761023 I0910 12:03:57.355141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:57.355191 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-10 12:03:57.355185479 +0000 UTC m=+2993.953132041 I0910 12:03:57.760851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:57.933852 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-2l6z9" condition "Approved" to 2026-09-10 12:03:57.933837538 +0000 UTC m=+2994.531784090 I0910 12:03:57.971899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-2l6z9" condition "Ready" to 2026-09-10 12:03:57.971887478 +0000 UTC m=+2994.569834030 I0910 12:03:58.058594 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:03:58.058583441 +0000 UTC m=+2994.656529993 I0910 12:03:58.089549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:58.089927 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:03:58.089921685 +0000 UTC m=+2994.687868237 I0910 12:03:58.101766 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:58.121055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:58.351058 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-10 12:03:58.351042246 +0000 UTC m=+2994.948988798 I0910 12:03:58.375215 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-10 12:03:58.375200282 +0000 UTC m=+2994.973146844 I0910 12:03:58.375705 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:03:58.375724 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-10 12:03:58.375720537 +0000 UTC m=+2994.973667089 I0910 12:03:58.398721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:58.398881 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:03:58.398924 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-10 12:03:58.398899485 +0000 UTC m=+2994.996846037 I0910 12:03:58.590629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-xgk7w" condition "Approved" to 2026-09-10 12:03:58.590591838 +0000 UTC m=+2995.188538390 I0910 12:03:58.611512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-xgk7w" condition "Ready" to 2026-09-10 12:03:58.611496505 +0000 UTC m=+2995.209443057 I0910 12:03:58.694161 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:03:58.694145955 +0000 UTC m=+2995.292092507 I0910 12:03:58.729040 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:58.729421 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:03:58.72941341 +0000 UTC m=+2995.327359962 I0910 12:03:58.764463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:58.923264 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-10 12:03:58.923248058 +0000 UTC m=+2995.521194610 I0910 12:03:58.950644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:03:58.950656 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-10 12:03:58.950641573 +0000 UTC m=+2995.548588135 I0910 12:03:58.950677 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-10 12:03:58.950671364 +0000 UTC m=+2995.548617906 I0910 12:03:58.969698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:03:58.969772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:03:58.969905 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-10 12:03:58.969897841 +0000 UTC m=+2995.567844393 I0910 12:03:59.419497 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-4x2cn" condition "Approved" to 2026-09-10 12:03:59.419481855 +0000 UTC m=+2996.017428417 I0910 12:03:59.505280 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-4x2cn" condition "Ready" to 2026-09-10 12:03:59.50526902 +0000 UTC m=+2996.103215582 I0910 12:03:59.603393 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:03:59.603380721 +0000 UTC m=+2996.201327273 I0910 12:03:59.622498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:07:31.823359 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:07:31.823433 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-09-10 12:07:31.823389974 +0000 UTC m=+3208.421336536 I0910 12:07:31.823631 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-09-10 12:07:31.823615891 +0000 UTC m=+3208.421562453 I0910 12:07:31.839144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:07:31.839227 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-09-10 12:07:31.839220347 +0000 UTC m=+3208.437166909 I0910 12:07:32.034167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:07:32.095461 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-tr6mc" condition "Approved" to 2026-09-10 12:07:32.095450837 +0000 UTC m=+3208.693397389 I0910 12:07:32.129713 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-tr6mc" condition "Ready" to 2026-09-10 12:07:32.129701382 +0000 UTC m=+3208.727647934 I0910 12:07:32.156489 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:07:32.156474658 +0000 UTC m=+3208.754421230 I0910 12:07:32.178143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:07:32.243001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:07:34.884767 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:07:34.884812 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-09-10 12:07:34.884805166 +0000 UTC m=+3211.482751708 I0910 12:07:34.885077 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-09-10 12:07:34.885064604 +0000 UTC m=+3211.483011156 I0910 12:07:34.914964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:07:34.915059 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-09-10 12:07:34.915053349 +0000 UTC m=+3211.512999891 I0910 12:07:35.135882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:07:35.171033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-tb45w" condition "Approved" to 2026-09-10 12:07:35.171011381 +0000 UTC m=+3211.768957933 I0910 12:07:35.206168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-tb45w" condition "Ready" to 2026-09-10 12:07:35.206157723 +0000 UTC m=+3211.804104275 I0910 12:07:35.252736 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:07:35.252723892 +0000 UTC m=+3211.850670434 I0910 12:07:35.282901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:07:35.286168 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:07:35.286154581 +0000 UTC m=+3211.884101143 I0910 12:07:35.315094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:12:17.631532 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:12:17.631574 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-09-10 12:12:17.631564289 +0000 UTC m=+3494.229510831 I0910 12:12:17.631938 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-09-10 12:12:17.63192795 +0000 UTC m=+3494.229874502 I0910 12:12:17.647559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:12:17.647665 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-09-10 12:12:17.647657828 +0000 UTC m=+3494.245604390 I0910 12:12:17.864480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:12:17.907959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-2nw4x" condition "Approved" to 2026-09-10 12:12:17.90794797 +0000 UTC m=+3494.505894522 I0910 12:12:17.933274 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-2nw4x" condition "Ready" to 2026-09-10 12:12:17.93325668 +0000 UTC m=+3494.531203222 I0910 12:12:17.973367 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:12:17.973354091 +0000 UTC m=+3494.571300633 I0910 12:12:18.000915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:12:18.001258 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:12:18.00125037 +0000 UTC m=+3494.599196922 I0910 12:12:18.028503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:12:53.546586 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-09-10 12:12:53.546575561 +0000 UTC m=+3530.144522113 I0910 12:12:53.546635 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:12:53.546738 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-10 12:12:53.546674604 +0000 UTC m=+3530.144621186 I0910 12:12:53.563803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:12:53.563898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 12:12:53.563922 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-09-10 12:12:53.563914989 +0000 UTC m=+3530.161861541 I0910 12:12:53.668429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:12:53.680402 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-djzlv" condition "Approved" to 2026-09-10 12:12:53.680387307 +0000 UTC m=+3530.278333859 I0910 12:12:53.699430 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-djzlv" condition "Ready" to 2026-09-10 12:12:53.699419497 +0000 UTC m=+3530.297366059 I0910 12:12:53.729739 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:12:53.72972721 +0000 UTC m=+3530.327673762 I0910 12:12:53.748612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:12:53.748949 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 12:12:53.748941215 +0000 UTC m=+3530.346887767 I0910 12:12:53.761474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 12:12:53.767437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"