I0428 05:03:34.088391       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0428 05:03:34.088544       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0428 05:03:34.088740       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0428 05:03:34.093300       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0428 05:03:34.093732       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0428 05:03:34.093769       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0428 05:03:34.093796       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0428 05:03:34.096529       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0428 05:03:34.114678       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0428 05:03:34.119203       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0428 05:03:34.119227       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0428 05:03:34.119303       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0428 05:03:34.123379       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0428 05:03:34.126274       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0428 05:03:34.129463       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0428 05:03:34.131782       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0428 05:03:34.137236       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0428 05:03:34.144220       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0428 05:03:34.144268       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0428 05:03:34.144290       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0428 05:03:34.148945       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0428 05:03:34.149048       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0428 05:03:34.149899       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0428 05:03:34.151887       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0428 05:03:34.153593       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0428 05:03:34.155307       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0428 05:03:34.157104       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0428 05:03:34.158948       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0428 05:03:34.160755       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0428 05:03:34.160883       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0428 05:03:34.166991       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0428 05:03:34.177386       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0428 05:03:34.179762       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0428 05:03:34.183135       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 05:03:34.183770       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 05:03:34.186927       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 05:03:34.188289       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 05:03:34.188863       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 05:03:34.189402       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 05:03:34.189832       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 05:03:34.190354       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 05:03:34.190862       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 05:03:34.309463       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0428 05:04:06.919380       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-28 05:04:06.919364535 +0000 UTC m=+32.880343476
I0428 05:04:07.693110       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-28 05:04:07.693095096 +0000 UTC m=+33.654074067
I0428 05:04:07.693888       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:04:07.693959       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 05:04:07.693949801 +0000 UTC m=+33.654928762
E0428 05:04:07.707984       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0428 05:04:07.708037       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-28 05:04:07.708031751 +0000 UTC m=+33.669010702
E0428 05:04:07.708058       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0428 05:04:07.713262       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:07.713339       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:04:07.713363       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-28 05:04:07.713357012 +0000 UTC m=+33.674335953
E0428 05:04:07.726593       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0428 05:04:07.727673       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0428 05:04:07.727712       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0428 05:04:07.727831       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0428 05:04:07.752336       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:07.755694       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kbsf6" condition "Approved" to 2026-04-28 05:04:07.755684361 +0000 UTC m=+33.716663292
I0428 05:04:07.768630       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-kbsf6" condition "Ready" to 2026-04-28 05:04:07.768621474 +0000 UTC m=+33.729600425
I0428 05:04:07.796018       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:04:07.79600529 +0000 UTC m=+33.756984231
I0428 05:04:07.816988       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:12.727821       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:04:12.727811896 +0000 UTC m=+38.688790837
I0428 05:04:14.623171       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-28 05:04:14.623153492 +0000 UTC m=+40.584132453
I0428 05:04:14.623219       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:04:14.623263       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 05:04:14.623253432 +0000 UTC m=+40.584232383
I0428 05:04:14.640917       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-28 05:04:14.640906322 +0000 UTC m=+40.601885273
I0428 05:04:14.649984       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:14.650060       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:04:14.650085       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-28 05:04:14.650079105 +0000 UTC m=+40.611058046
I0428 05:04:14.936703       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:14.952215       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-x559n" condition "Approved" to 2026-04-28 05:04:14.952204569 +0000 UTC m=+40.913183540
I0428 05:04:14.984660       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-x559n" condition "Ready" to 2026-04-28 05:04:14.984646453 +0000 UTC m=+40.945625434
I0428 05:04:15.072148       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:04:15.072131649 +0000 UTC m=+41.033110620
I0428 05:04:15.194771       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:15.196251       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:04:15.196241794 +0000 UTC m=+41.157220735
I0428 05:04:15.309284       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:18.377490       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-28 05:04:18.377473426 +0000 UTC m=+44.338452387
I0428 05:04:18.377613       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:04:18.377666       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-28 05:04:18.377651187 +0000 UTC m=+44.338630158
I0428 05:04:18.421746       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:18.421878       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:04:18.421912       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-28 05:04:18.421904178 +0000 UTC m=+44.382883149
I0428 05:04:18.478460       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-k24b2" condition "Approved" to 2026-04-28 05:04:18.478445769 +0000 UTC m=+44.439424750
I0428 05:04:18.508741       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-k24b2" condition "Ready" to 2026-04-28 05:04:18.508729521 +0000 UTC m=+44.469708472
I0428 05:04:18.537637       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:04:18.537622695 +0000 UTC m=+44.498601646
I0428 05:04:18.556723       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:18.557058       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:04:18.557049445 +0000 UTC m=+44.518028426
I0428 05:04:18.602341       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:19.105678       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:04:19.105732       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-28 05:04:19.105722248 +0000 UTC m=+45.066701229
I0428 05:04:19.105809       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-28 05:04:19.105779829 +0000 UTC m=+45.066758800
I0428 05:04:19.121378       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:19.121482       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:04:19.121502       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-28 05:04:19.121493388 +0000 UTC m=+45.082472339
I0428 05:04:19.187367       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-5lb4k" condition "Approved" to 2026-04-28 05:04:19.187346251 +0000 UTC m=+45.148325242
I0428 05:04:19.204470       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-5lb4k" condition "Ready" to 2026-04-28 05:04:19.20446036 +0000 UTC m=+45.165439311
I0428 05:04:19.262715       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:04:19.262700849 +0000 UTC m=+45.223679830
I0428 05:04:19.289620       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:19.344631       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:04:19.820520       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-28 05:04:19.820506924 +0000 UTC m=+45.781485875
I0428 05:04:20.509671       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-28 05:04:20.509657145 +0000 UTC m=+46.470636116
I0428 05:07:33.143323       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:07:33.143365       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-28 05:07:33.143351014 +0000 UTC m=+239.104329955
I0428 05:07:33.143810       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-28 05:07:33.143805305 +0000 UTC m=+239.104784246
E0428 05:07:33.161034       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0428 05:07:33.161104       1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-28 05:07:33.161094357 +0000 UTC m=+239.122073328
I0428 05:07:33.161130       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0428 05:07:33.162058       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:07:33.162193       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-28 05:07:33.162184783 +0000 UTC m=+239.123163734
E0428 05:07:33.174045       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
I0428 05:07:33.174076       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-28 05:07:33.174061365 +0000 UTC m=+239.135040306
I0428 05:07:33.174164       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:07:33.174198       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-28 05:07:33.174190718 +0000 UTC m=+239.135169669
E0428 05:07:33.174728       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0428 05:07:33.174758       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0428 05:07:33.174789       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
I0428 05:07:33.186777       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:07:33.186911       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-28 05:07:33.18686025 +0000 UTC m=+239.147839201
I0428 05:07:33.374349       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:07:33.377233       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:07:33.406367       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-f9s8g" condition "Approved" to 2026-04-28 05:07:33.406356362 +0000 UTC m=+239.367335303
I0428 05:07:33.416635       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zlbw9" condition "Approved" to 2026-04-28 05:07:33.416616356 +0000 UTC m=+239.377595307
I0428 05:07:33.423563       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-f9s8g" condition "Ready" to 2026-04-28 05:07:33.423551151 +0000 UTC m=+239.384530112
I0428 05:07:33.434135       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-zlbw9" condition "Ready" to 2026-04-28 05:07:33.434127673 +0000 UTC m=+239.395106614
I0428 05:07:33.453939       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:07:33.453929504 +0000 UTC m=+239.414908455
I0428 05:07:33.470924       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:07:33.471154       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:07:33.471143243 +0000 UTC m=+239.432122184
I0428 05:07:33.502900       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:07:38.175354       1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:07:38.175342602 +0000 UTC m=+244.136321543
I0428 05:07:38.188853       1 conditions.go:252] Found status change for CertificateRequest "valkey-server-zlbw9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:07:38.188822704 +0000 UTC m=+244.149801655
I0428 05:07:38.215309       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:07:38.215296634 +0000 UTC m=+244.176275575
I0428 05:07:38.259092       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:07:38.262243       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:07:38.26222319 +0000 UTC m=+244.223202151
I0428 05:07:38.275252       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:07:38.278824       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:07:38.279261       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:07:38.279252396 +0000 UTC m=+244.240231377
I0428 05:11:59.055591       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-205.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:11:59.055630       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Issuing" to 2026-04-28 05:11:59.055620606 +0000 UTC m=+505.016599577
I0428 05:11:59.056414       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-28 05:11:59.056405915 +0000 UTC m=+505.017384896
I0428 05:11:59.073324       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:11:59.073461       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready" to 2026-04-28 05:11:59.073453341 +0000 UTC m=+505.034432322
I0428 05:11:59.281017       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:11:59.313989       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-w8g5d" condition "Approved" to 2026-04-28 05:11:59.313971995 +0000 UTC m=+505.274950976
I0428 05:11:59.333868       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-205.nip.io-tls-w8g5d" condition "Ready" to 2026-04-28 05:11:59.333851289 +0000 UTC m=+505.294830270
I0428 05:11:59.361083       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:11:59.361068196 +0000 UTC m=+505.322047147
I0428 05:11:59.380037       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:11:59.380500       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:11:59.380493219 +0000 UTC m=+505.341472170
I0428 05:11:59.386336       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:11:59.400076       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-205.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-205.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:11:59.400345       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-205.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:11:59.400335431 +0000 UTC m=+505.361314392
I0428 05:14:16.563602       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:14:16.563666       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-28 05:14:16.563659183 +0000 UTC m=+642.524638134
I0428 05:14:16.563770       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 05:14:16.563749735 +0000 UTC m=+642.524728706
I0428 05:14:16.578817       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:14:16.578885       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-28 05:14:16.578877837 +0000 UTC m=+642.539856778
I0428 05:14:16.715699       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:14:16.748676       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xf4z9" condition "Approved" to 2026-04-28 05:14:16.74865838 +0000 UTC m=+642.709637361
I0428 05:14:16.766214       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xf4z9" condition "Ready" to 2026-04-28 05:14:16.766198839 +0000 UTC m=+642.727177820
I0428 05:14:16.788962       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:16.788952583 +0000 UTC m=+642.749931534
I0428 05:14:16.811135       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:14:16.811470       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:16.811463251 +0000 UTC m=+642.772442192
I0428 05:14:16.826600       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:14:16.826921       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:16.826913919 +0000 UTC m=+642.787892870
I0428 05:14:16.830741       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:14:59.128647       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-28 05:14:59.128631826 +0000 UTC m=+685.089610777
I0428 05:14:59.128895       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:14:59.128917       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 05:14:59.128912763 +0000 UTC m=+685.089891724
I0428 05:14:59.143597       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:14:59.143665       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:14:59.143757       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-28 05:14:59.143750528 +0000 UTC m=+685.104729479
I0428 05:14:59.273977       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:14:59.282057       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5smwh" condition "Approved" to 2026-04-28 05:14:59.282040775 +0000 UTC m=+685.243019736
I0428 05:14:59.308663       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-5smwh" condition "Ready" to 2026-04-28 05:14:59.308649952 +0000 UTC m=+685.269628903
I0428 05:14:59.333438       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:59.333428365 +0000 UTC m=+685.294407306
I0428 05:14:59.360909       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:14:59.361102       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:59.361096265 +0000 UTC m=+685.322075196
I0428 05:14:59.376895       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:14:59.377217       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:14:59.377210141 +0000 UTC m=+685.338189092
I0428 05:14:59.379647       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:15:25.996728       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-28 05:15:25.996716674 +0000 UTC m=+711.957695625
I0428 05:15:25.996988       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:15:25.997042       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-04-28 05:15:25.997031712 +0000 UTC m=+711.958010673
I0428 05:15:26.017220       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:15:26.017296       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-04-28 05:15:26.017288587 +0000 UTC m=+711.978267568
I0428 05:15:26.128094       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:15:26.155752       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-p4tbm" condition "Approved" to 2026-04-28 05:15:26.155737358 +0000 UTC m=+712.116716309
I0428 05:15:26.173259       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-p4tbm" condition "Ready" to 2026-04-28 05:15:26.173247707 +0000 UTC m=+712.134226658
I0428 05:15:26.203549       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:26.203533731 +0000 UTC m=+712.164512722
I0428 05:15:26.231166       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:15:26.231489       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:26.231481959 +0000 UTC m=+712.192460910
I0428 05:15:26.239031       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:15:26.239289       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:26.239282746 +0000 UTC m=+712.200261697
I0428 05:15:30.970989       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:15:30.971042       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 05:15:30.97102917 +0000 UTC m=+716.932008151
I0428 05:15:30.971699       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-04-28 05:15:30.971687835 +0000 UTC m=+716.932666826
E0428 05:15:30.982611       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0428 05:15:30.982649       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-04-28 05:15:30.982641427 +0000 UTC m=+716.943620378
E0428 05:15:30.982711       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0428 05:15:30.985228       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:15:30.985300       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:15:30.985315       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-04-28 05:15:30.985311031 +0000 UTC m=+716.946289982
E0428 05:15:30.995123       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
E0428 05:15:30.995185       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0428 05:15:30.995207       1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0428 05:15:30.995235       1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack"
I0428 05:15:31.023093       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:15:31.025455       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fl9tl" condition "Approved" to 2026-04-28 05:15:31.025434271 +0000 UTC m=+716.986413242
I0428 05:15:31.037381       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fl9tl" condition "Ready" to 2026-04-28 05:15:31.037372017 +0000 UTC m=+716.998350958
I0428 05:15:31.056219       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:31.056208877 +0000 UTC m=+717.017187828
I0428 05:15:31.070107       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:15:31.070542       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:31.07053557 +0000 UTC m=+717.031514521
I0428 05:15:31.087513       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:15:31.088056       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:31.088044689 +0000 UTC m=+717.049023640
I0428 05:15:31.090042       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:15:35.997149       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:15:35.997140004 +0000 UTC m=+721.958118945
I0428 05:16:13.309026       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-04-28 05:16:13.308997341 +0000 UTC m=+759.269976282
I0428 05:16:13.309348       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:13.309386       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-28 05:16:13.309378991 +0000 UTC m=+759.270357962
I0428 05:16:13.326207       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:13.326264       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:13.326281       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-04-28 05:16:13.326275034 +0000 UTC m=+759.287253985
I0428 05:16:13.665462       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-stszk" condition "Approved" to 2026-04-28 05:16:13.665445539 +0000 UTC m=+759.626424490
I0428 05:16:13.682369       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-stszk" condition "Ready" to 2026-04-28 05:16:13.682359524 +0000 UTC m=+759.643338465
I0428 05:16:13.719717       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:13.719704505 +0000 UTC m=+759.680683446
I0428 05:16:13.735156       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:13.735446       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:13.735439572 +0000 UTC m=+759.696418523
I0428 05:16:13.750858       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:18.100317       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:18.100347       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 05:16:18.100340058 +0000 UTC m=+764.061318999
I0428 05:16:18.100313       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-04-28 05:16:18.100301108 +0000 UTC m=+764.061280039
I0428 05:16:18.109098       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-04-28 05:16:18.109084527 +0000 UTC m=+764.070063468
I0428 05:16:18.109420       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:18.109436       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 05:16:18.109433266 +0000 UTC m=+764.070412207
I0428 05:16:18.121606       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-04-28 05:16:18.121595976 +0000 UTC m=+764.082574917
I0428 05:16:18.121823       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:18.123493       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 05:16:18.123484051 +0000 UTC m=+764.084462992
I0428 05:16:18.143749       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:18.143814       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:18.143831       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-04-28 05:16:18.143824657 +0000 UTC m=+764.104803608
I0428 05:16:18.144131       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:18.148808       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:18.149834       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-04-28 05:16:18.149825761 +0000 UTC m=+764.110804712
I0428 05:16:18.156393       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:18.156459       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:18.156479       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-04-28 05:16:18.15647415 +0000 UTC m=+764.117453091
I0428 05:16:18.454452       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hnzvg" condition "Approved" to 2026-04-28 05:16:18.45443939 +0000 UTC m=+764.415418331
I0428 05:16:18.490320       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-hnzvg" condition "Ready" to 2026-04-28 05:16:18.490311708 +0000 UTC m=+764.451290649
I0428 05:16:18.543983       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:18.54397102 +0000 UTC m=+764.504949961
I0428 05:16:18.576348       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:18.576636       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:18.57662976 +0000 UTC m=+764.537608711
I0428 05:16:18.600079       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lrngg" condition "Approved" to 2026-04-28 05:16:18.600043029 +0000 UTC m=+764.561021970
I0428 05:16:18.622537       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lrngg" condition "Ready" to 2026-04-28 05:16:18.622527127 +0000 UTC m=+764.583506078
I0428 05:16:18.669943       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:18.66993317 +0000 UTC m=+764.630912111
I0428 05:16:18.679720       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gqnph" condition "Approved" to 2026-04-28 05:16:18.679708514 +0000 UTC m=+764.640687455
I0428 05:16:18.702363       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-gqnph" condition "Ready" to 2026-04-28 05:16:18.702354565 +0000 UTC m=+764.663333506
I0428 05:16:18.725179       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:18.725670       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:18.725661452 +0000 UTC m=+764.686640403
I0428 05:16:19.099623       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls" condition "Ready" to 2026-04-28 05:16:19.099608547 +0000 UTC m=+765.060587498
I0428 05:16:19.099781       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:19.099798       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls" condition "Issuing" to 2026-04-28 05:16:19.099794793 +0000 UTC m=+765.060773744
E0428 05:16:19.280670       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-4pq8q\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls"
I0428 05:16:19.293070       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:19.405249       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:19.405329       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:19.405345       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls" condition "Issuing" to 2026-04-28 05:16:19.405340224 +0000 UTC m=+765.366319165
I0428 05:16:19.454125       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:19.454116049 +0000 UTC m=+765.415094990
I0428 05:16:19.498849       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:19.702604       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:19.702837       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:19.702831383 +0000 UTC m=+765.663810324
I0428 05:16:20.164182       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:20.189953       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:20.236318       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:20.557197       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lnhrv-x6kdk" condition "Approved" to 2026-04-28 05:16:20.557182729 +0000 UTC m=+766.518161670
I0428 05:16:20.762642       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lnhrv-x6kdk" condition "Ready" to 2026-04-28 05:16:20.762630798 +0000 UTC m=+766.723609759
I0428 05:16:21.088691       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:21.08867579 +0000 UTC m=+767.049654731
I0428 05:16:21.189667       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:21.190168       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:21.190158045 +0000 UTC m=+767.151136996
I0428 05:16:21.387820       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lnhrv-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:28.589390       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-04-28 05:16:28.589375102 +0000 UTC m=+774.550354053
I0428 05:16:28.589723       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:28.589742       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 05:16:28.58973729 +0000 UTC m=+774.550716251
I0428 05:16:28.605736       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:28.605820       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:28.605838       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-04-28 05:16:28.605831655 +0000 UTC m=+774.566810606
I0428 05:16:29.021606       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2m5pw" condition "Approved" to 2026-04-28 05:16:29.02159076 +0000 UTC m=+774.982569701
I0428 05:16:29.043738       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-2m5pw" condition "Ready" to 2026-04-28 05:16:29.043715659 +0000 UTC m=+775.004694600
I0428 05:16:29.081972       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:29.081962243 +0000 UTC m=+775.042941194
I0428 05:16:29.104763       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:29.105192       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:29.105184188 +0000 UTC m=+775.066163129
I0428 05:16:29.131293       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:29.141142       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:57.150856       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:57.150889       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-28 05:16:57.150882218 +0000 UTC m=+803.111861159
I0428 05:16:57.151314       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-04-28 05:16:57.151309088 +0000 UTC m=+803.112288029
I0428 05:16:57.165337       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:57.165405       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:16:57.165417       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-04-28 05:16:57.165413225 +0000 UTC m=+803.126392166
I0428 05:16:57.373964       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-v4fkb" condition "Approved" to 2026-04-28 05:16:57.373952912 +0000 UTC m=+803.334931853
I0428 05:16:57.391380       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-v4fkb" condition "Ready" to 2026-04-28 05:16:57.391366228 +0000 UTC m=+803.352345169
I0428 05:16:57.419660       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:57.419567732 +0000 UTC m=+803.380546683
I0428 05:16:57.443169       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:57.443673       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:57.443664749 +0000 UTC m=+803.404643690
I0428 05:16:57.461342       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:57.463313       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:16:57.463635       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:16:57.463627076 +0000 UTC m=+803.424606037
I0428 05:17:23.568101       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:17:23.568141       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-04-28 05:17:23.568134379 +0000 UTC m=+829.529113320
I0428 05:17:23.568188       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-28 05:17:23.568035456 +0000 UTC m=+829.529014398
I0428 05:17:23.593858       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:17:23.593966       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-04-28 05:17:23.593957896 +0000 UTC m=+829.554936837
I0428 05:17:23.769143       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:17:23.807550       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7h6tz" condition "Approved" to 2026-04-28 05:17:23.807533613 +0000 UTC m=+829.768512564
I0428 05:17:23.831988       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7h6tz" condition "Ready" to 2026-04-28 05:17:23.831972338 +0000 UTC m=+829.792951289
I0428 05:17:23.864278       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:17:23.86426473 +0000 UTC m=+829.825243681
I0428 05:17:23.888096       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:17:23.935622       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:13.639649       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-04-28 05:18:13.639635839 +0000 UTC m=+879.600614780
I0428 05:18:13.711725       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:18:13.711759       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-04-28 05:18:13.711750504 +0000 UTC m=+879.672729465
I0428 05:18:13.711943       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-28 05:18:13.711928548 +0000 UTC m=+879.672907489
I0428 05:18:13.732469       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:18:13.732511       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-04-28 05:18:13.732504401 +0000 UTC m=+879.693483342
I0428 05:18:13.732776       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-28 05:18:13.732762217 +0000 UTC m=+879.693741158
I0428 05:18:13.769705       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:13.769781       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-04-28 05:18:13.769775993 +0000 UTC m=+879.730754934
I0428 05:18:13.798529       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:13.798609       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-04-28 05:18:13.798603392 +0000 UTC m=+879.759582333
E0428 05:18:13.811550       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers"
I0428 05:18:13.933459       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-04-28 05:18:13.933441848 +0000 UTC m=+879.894420789
I0428 05:18:13.977185       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:18:13.977216       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-28 05:18:13.977208306 +0000 UTC m=+879.938187247
I0428 05:18:13.977512       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-04-28 05:18:13.977508673 +0000 UTC m=+879.938487614
I0428 05:18:14.021906       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:14.021977       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:18:14.022000       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-04-28 05:18:14.021994328 +0000 UTC m=+879.982973259
E0428 05:18:14.313634       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert"
I0428 05:18:14.546648       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:14.555046       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-xf7ws" condition "Approved" to 2026-04-28 05:18:14.555034632 +0000 UTC m=+880.516013593
I0428 05:18:14.578929       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-xf7ws" condition "Ready" to 2026-04-28 05:18:14.578918714 +0000 UTC m=+880.539897655
I0428 05:18:14.619378       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:18:14.619358071 +0000 UTC m=+880.580337052
I0428 05:18:14.645142       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:14.645418       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:18:14.645413435 +0000 UTC m=+880.606392366
I0428 05:18:14.670741       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:14.848604       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-04-28 05:18:14.848588626 +0000 UTC m=+880.809567557
I0428 05:18:14.885620       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:18:14.885667       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-04-28 05:18:14.885656583 +0000 UTC m=+880.846635564
I0428 05:18:14.885684       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-28 05:18:14.885665753 +0000 UTC m=+880.846644724
I0428 05:18:14.910165       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:14.910213       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-04-28 05:18:14.910207011 +0000 UTC m=+880.871185952
I0428 05:18:14.958862       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:15.021758       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-6p9z7" condition "Approved" to 2026-04-28 05:18:15.021749459 +0000 UTC m=+880.982728400
I0428 05:18:15.044355       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-6p9z7" condition "Ready" to 2026-04-28 05:18:15.04434547 +0000 UTC m=+881.005324411
I0428 05:18:15.099412       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:18:15.099399808 +0000 UTC m=+881.060378769
I0428 05:18:15.130868       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:15.131674       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:18:15.131666479 +0000 UTC m=+881.092645420
I0428 05:18:15.169683       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:15.170153       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:18:15.17014759 +0000 UTC m=+881.131126531
I0428 05:18:15.172343       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:15.210141       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:15.250906       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-j66d7" condition "Approved" to 2026-04-28 05:18:15.250895143 +0000 UTC m=+881.211874104
I0428 05:18:15.285212       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-j66d7" condition "Ready" to 2026-04-28 05:18:15.285200364 +0000 UTC m=+881.246179305
I0428 05:18:15.368568       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-04-28 05:18:15.368554518 +0000 UTC m=+881.329533479
I0428 05:18:15.391086       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0428 05:18:15.391124       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-04-28 05:18:15.391116258 +0000 UTC m=+881.352095199
I0428 05:18:15.391162       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-28 05:18:15.391153029 +0000 UTC m=+881.352131970
I0428 05:18:15.440900       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:18:15.440879909 +0000 UTC m=+881.401858870
I0428 05:18:15.596640       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:15.596728       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-04-28 05:18:15.596720197 +0000 UTC m=+881.557699138
I0428 05:18:15.675692       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:15.675968       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:18:15.675962563 +0000 UTC m=+881.636941504
I0428 05:18:16.028522       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:16.070074       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:16.276600       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ljcgv" condition "Approved" to 2026-04-28 05:18:16.276580915 +0000 UTC m=+882.237559896
I0428 05:18:16.638078       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-ljcgv" condition "Ready" to 2026-04-28 05:18:16.638068305 +0000 UTC m=+882.599047246
I0428 05:18:16.826664       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:18:16.826649657 +0000 UTC m=+882.787628598
I0428 05:18:16.920717       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:16.921049       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-28 05:18:16.921044075 +0000 UTC m=+882.882023016
I0428 05:18:17.169238       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0428 05:18:17.229306       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"