I0609 16:56:12.581822 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0609 16:56:12.581988 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0609 16:56:12.582162 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0609 16:56:12.588958 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0609 16:56:12.589678 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0609 16:56:12.589784 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0609 16:56:12.589793 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0609 16:56:12.592541 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0609 16:56:17.778539 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0609 16:56:17.785604 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0609 16:56:17.789800 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0609 16:56:17.794838 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0609 16:56:17.794864 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0609 16:56:17.794982 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0609 16:56:17.797137 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0609 16:56:17.799410 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0609 16:56:17.801103 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0609 16:56:17.802976 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0609 16:56:17.804782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0609 16:56:17.807169 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0609 16:56:17.812564 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0609 16:56:17.812606 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0609 16:56:17.812619 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0609 16:56:17.812710 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0609 16:56:17.816259 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0609 16:56:17.818042 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0609 16:56:17.818199 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0609 16:56:17.819956 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0609 16:56:17.821851 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0609 16:56:17.823633 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0609 16:56:17.825252 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0609 16:56:17.826992 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0609 16:56:17.832945 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0609 16:56:17.835565 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:56:17.835667 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:56:17.835710 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:56:17.835872 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:56:17.836145 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:56:17.837276 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:56:17.837498 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:56:17.837573 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:56:17.837741 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:56:17.923453 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0609 16:57:29.766130 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-06-09 16:57:29.766118245 +0000 UTC m=+77.216046548 I0609 16:57:30.550471 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:57:30.550482 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-09 16:57:30.550468561 +0000 UTC m=+78.000396884 I0609 16:57:30.550511 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-06-09 16:57:30.550504021 +0000 UTC m=+78.000432344 E0609 16:57:30.568399 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 16:57:30.568439 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-06-09 16:57:30.56843187 +0000 UTC m=+78.018360173 E0609 16:57:30.568478 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 16:57:30.569993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:57:30.570151 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-06-09 16:57:30.57014194 +0000 UTC m=+78.020070283 E0609 16:57:30.583241 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0609 16:57:30.583708 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 16:57:30.583763 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 16:57:30.583844 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0609 16:57:30.593225 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:57:30.627057 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-frxbr" condition "Approved" to 2026-06-09 16:57:30.627039107 +0000 UTC m=+78.076967490 I0609 16:57:30.654890 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-frxbr" condition "Ready" to 2026-06-09 16:57:30.654869417 +0000 UTC m=+78.104797750 I0609 16:57:30.703558 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:57:30.703543534 +0000 UTC m=+78.153471837 I0609 16:57:30.734006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:57:35.584436 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:57:35.584422528 +0000 UTC m=+83.034350851 I0609 16:58:02.163257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 16:58:02.163299 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-09 16:58:02.163281113 +0000 UTC m=+109.613209406 I0609 16:58:02.163496 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-06-09 16:58:02.163426687 +0000 UTC m=+109.613355010 I0609 16:58:02.174086 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-06-09 16:58:02.174070315 +0000 UTC m=+109.623998628 I0609 16:58:02.186494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:58:02.186626 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-06-09 16:58:02.186613407 +0000 UTC m=+109.636541710 I0609 16:58:02.531645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 16:58:02.603054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w8lfv" condition "Approved" to 2026-06-09 16:58:02.603032487 +0000 UTC m=+110.052960820 I0609 16:58:02.651025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-w8lfv" condition "Ready" to 2026-06-09 16:58:02.651007046 +0000 UTC m=+110.100935369 I0609 16:58:02.689037 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 16:58:02.689020684 +0000 UTC m=+110.138949017 I0609 16:58:02.719465 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:00:50.472133 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:00:50.472204 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-06-09 17:00:50.472194755 +0000 UTC m=+277.922123058 I0609 17:00:50.472209 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-06-09 17:00:50.472200385 +0000 UTC m=+277.922128688 E0609 17:00:50.491091 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 17:00:50.491169 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-06-09 17:00:50.491160428 +0000 UTC m=+277.941088731 I0609 17:00:50.491211 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 17:00:50.494869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:00:50.494953 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-06-09 17:00:50.494944705 +0000 UTC m=+277.944873008 E0609 17:00:50.511480 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0609 17:00:50.511553 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 17:00:50.511575 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0609 17:00:50.511595 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0609 17:00:50.519227 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-06-09 17:00:50.519216509 +0000 UTC m=+277.969144832 I0609 17:00:50.519236 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:00:50.519583 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-06-09 17:00:50.519564428 +0000 UTC m=+277.969492761 I0609 17:00:50.544725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:00:50.544961 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:00:50.545053 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-06-09 17:00:50.54503771 +0000 UTC m=+277.994966083 I0609 17:00:50.676085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:00:50.715306 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-tfbfm" condition "Approved" to 2026-06-09 17:00:50.715290091 +0000 UTC m=+278.165218414 I0609 17:00:50.754570 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-tfbfm" condition "Ready" to 2026-06-09 17:00:50.754549699 +0000 UTC m=+278.204478042 I0609 17:00:50.862926 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:00:50.862911117 +0000 UTC m=+278.312839420 I0609 17:00:50.891875 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-5krq8" condition "Approved" to 2026-06-09 17:00:50.891854209 +0000 UTC m=+278.341782542 I0609 17:00:50.892198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:00:50.897104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:00:50.897730 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:00:50.897721033 +0000 UTC m=+278.347649336 I0609 17:00:50.953533 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-5krq8" condition "Ready" to 2026-06-09 17:00:50.953521559 +0000 UTC m=+278.403449862 I0609 17:00:50.979436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:00:55.512210 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:00:55.51219172 +0000 UTC m=+282.962120023 I0609 17:00:55.690031 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-5krq8" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:00:55.690017025 +0000 UTC m=+283.139945328 I0609 17:00:55.764699 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:00:55.764678162 +0000 UTC m=+283.214606495 I0609 17:00:55.791845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:00:55.792180 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:00:55.792171671 +0000 UTC m=+283.242099974 I0609 17:00:55.820351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:04:34.971154 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-145.nip.io-tls" condition "Ready" to 2026-06-09 17:04:34.971139637 +0000 UTC m=+502.421067960 I0609 17:04:34.971685 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-145.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:04:34.971708 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-145.nip.io-tls" condition "Issuing" to 2026-06-09 17:04:34.971705 +0000 UTC m=+502.421633293 I0609 17:04:34.993392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-145.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-145.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:04:34.993490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-145.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:04:34.993506 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-145.nip.io-tls" condition "Issuing" to 2026-06-09 17:04:34.993501056 +0000 UTC m=+502.443429359 I0609 17:04:35.217958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-145.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-145.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:04:35.260578 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-145.nip.io-tls-l8fgl" condition "Approved" to 2026-06-09 17:04:35.260561274 +0000 UTC m=+502.710489597 I0609 17:04:35.291296 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-145.nip.io-tls-l8fgl" condition "Ready" to 2026-06-09 17:04:35.291274552 +0000 UTC m=+502.741202885 I0609 17:04:35.335363 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-145.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:04:35.335348326 +0000 UTC m=+502.785276629 I0609 17:04:35.365425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-19-213-145.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-145.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:06:00.907478 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:06:00.907592 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-06-09 17:06:00.907579036 +0000 UTC m=+588.357507359 I0609 17:06:00.907757 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-09 17:06:00.907734189 +0000 UTC m=+588.357662512 I0609 17:06:01.009698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:06:01.009904 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-06-09 17:06:01.009866964 +0000 UTC m=+588.459795307 E0609 17:06:01.022560 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0609 17:06:01.022638 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-06-09 17:06:01.022622904 +0000 UTC m=+588.472551237 E0609 17:06:01.022756 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 17:06:01.171455 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0609 17:06:01.171564 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 17:06:01.171598 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0609 17:06:01.171636 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0609 17:06:01.175604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:06:01.419949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-22whl" condition "Approved" to 2026-06-09 17:06:01.419902264 +0000 UTC m=+588.869830677 I0609 17:06:01.461642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-22whl" condition "Ready" to 2026-06-09 17:06:01.461622113 +0000 UTC m=+588.911550416 I0609 17:06:01.528696 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:06:01.528681029 +0000 UTC m=+588.978609312 I0609 17:06:01.691719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:06:01.692058 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:06:01.692050986 +0000 UTC m=+589.141979289 I0609 17:06:02.145867 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:06:02.145851292 +0000 UTC m=+589.595779625 I0609 17:06:02.405392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:06:02.406001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:06:06.172691 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:06:06.172678761 +0000 UTC m=+593.622607074 I0609 17:07:03.917723 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-06-09 17:07:03.917710674 +0000 UTC m=+651.367638977 I0609 17:07:03.917857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:07:03.917889 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-09 17:07:03.917882168 +0000 UTC m=+651.367810491 I0609 17:07:03.918111 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-06-09 17:07:03.918106203 +0000 UTC m=+651.368034516 I0609 17:07:03.918446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:07:03.918468 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-09 17:07:03.918463281 +0000 UTC m=+651.368391584 I0609 17:07:03.918594 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:07:03.918605 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-09 17:07:03.918601724 +0000 UTC m=+651.368530027 I0609 17:07:03.919103 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-06-09 17:07:03.919056704 +0000 UTC m=+651.368985037 I0609 17:07:04.025385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:04.025385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:04.025552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:04.025622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:07:04.025675 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-06-09 17:07:04.0256684 +0000 UTC m=+651.475596693 I0609 17:07:04.026015 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:07:04.027177 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-06-09 17:07:04.027170865 +0000 UTC m=+651.477099148 I0609 17:07:04.026008 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:07:04.027363 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-06-09 17:07:04.027332628 +0000 UTC m=+651.477260921 I0609 17:07:04.483994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:04.484044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g56br" condition "Approved" to 2026-06-09 17:07:04.4840278 +0000 UTC m=+651.933956093 I0609 17:07:04.538498 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6g2hp" condition "Approved" to 2026-06-09 17:07:04.538476849 +0000 UTC m=+651.988405212 I0609 17:07:04.542798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-g56br" condition "Ready" to 2026-06-09 17:07:04.542790697 +0000 UTC m=+651.992719000 I0609 17:07:04.607030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-6g2hp" condition "Ready" to 2026-06-09 17:07:04.607015209 +0000 UTC m=+652.056943512 I0609 17:07:04.646837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:04.647646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-956v7" condition "Approved" to 2026-06-09 17:07:04.647626502 +0000 UTC m=+652.097554805 I0609 17:07:04.671585 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:07:04.671562597 +0000 UTC m=+652.121490920 I0609 17:07:04.685689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-956v7" condition "Ready" to 2026-06-09 17:07:04.685669629 +0000 UTC m=+652.135597962 I0609 17:07:04.705136 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:07:04.705110051 +0000 UTC m=+652.155038374 I0609 17:07:04.709132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:04.709695 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:07:04.709684824 +0000 UTC m=+652.159613117 I0609 17:07:04.921555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:04.922162 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:07:04.922149679 +0000 UTC m=+652.372078012 I0609 17:07:05.032526 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:07:05.032507711 +0000 UTC m=+652.482436004 I0609 17:07:05.234005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:05.450332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:05.450657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:05.451023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:05.451771 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:07:05.45176244 +0000 UTC m=+652.901690723 I0609 17:07:05.874988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:28.402641 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-flm6g-tls" condition "Ready" to 2026-06-09 17:07:28.402625308 +0000 UTC m=+675.852553611 I0609 17:07:28.403131 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-flm6g-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:07:28.403146 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-flm6g-tls" condition "Issuing" to 2026-06-09 17:07:28.40314255 +0000 UTC m=+675.853070853 I0609 17:07:28.447584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-flm6g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-flm6g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:07:28.447816 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-flm6g-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:07:28.447865 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-flm6g-tls" condition "Issuing" to 2026-06-09 17:07:28.447854237 +0000 UTC m=+675.897782570 I0609 17:07:28.733133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-flm6g-68xx6" condition "Approved" to 2026-06-09 17:07:28.733120308 +0000 UTC m=+676.183048611 I0609 17:07:28.779508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-flm6g-68xx6" condition "Ready" to 2026-06-09 17:07:28.779496534 +0000 UTC m=+676.229424837 I0609 17:07:28.833030 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-flm6g-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:07:28.833019562 +0000 UTC m=+676.282947875 I0609 17:07:28.871560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-flm6g-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-flm6g-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:08:58.826475 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:08:58.826515 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-09 17:08:58.826507874 +0000 UTC m=+766.276436177 I0609 17:08:58.827012 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-06-09 17:08:58.827004456 +0000 UTC m=+766.276932769 I0609 17:08:58.851624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:08:58.851726 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:08:58.851752 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-06-09 17:08:58.85174263 +0000 UTC m=+766.301670943 I0609 17:09:00.088538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:09:00.103819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hs97m" condition "Approved" to 2026-06-09 17:09:00.103804735 +0000 UTC m=+767.553733058 I0609 17:09:00.135082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-hs97m" condition "Ready" to 2026-06-09 17:09:00.135066929 +0000 UTC m=+767.584995222 I0609 17:09:00.563530 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:09:00.563508034 +0000 UTC m=+768.013436357 I0609 17:09:00.730893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:09:00.742603 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:09:00.742591523 +0000 UTC m=+768.192519826 I0609 17:09:00.980824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:12:41.941600 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:12:41.941675 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-09 17:12:41.941664778 +0000 UTC m=+989.391593101 I0609 17:12:41.942104 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-06-09 17:12:41.942095859 +0000 UTC m=+989.392024192 I0609 17:12:41.965575 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:12:41.965638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:12:41.965653 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-06-09 17:12:41.965647333 +0000 UTC m=+989.415575636 I0609 17:12:42.096358 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-djtd5" condition "Approved" to 2026-06-09 17:12:42.096349963 +0000 UTC m=+989.546278256 I0609 17:12:42.119680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-djtd5" condition "Ready" to 2026-06-09 17:12:42.119667613 +0000 UTC m=+989.569595916 I0609 17:12:42.148017 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:12:42.148003697 +0000 UTC m=+989.597932000 I0609 17:12:42.172303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:12:42.172722 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:12:42.172712988 +0000 UTC m=+989.622641291 I0609 17:12:42.188283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:12:42.198793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:15:30.596169 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:15:30.596258 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-06-09 17:15:30.59624803 +0000 UTC m=+1158.046176353 I0609 17:15:30.596575 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-06-09 17:15:30.596531066 +0000 UTC m=+1158.046459439 I0609 17:15:30.631097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:15:30.631218 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-06-09 17:15:30.631207753 +0000 UTC m=+1158.081136076 I0609 17:15:30.765093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:15:30.799031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8xxgd" condition "Approved" to 2026-06-09 17:15:30.799007397 +0000 UTC m=+1158.248935730 I0609 17:15:30.830988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8xxgd" condition "Ready" to 2026-06-09 17:15:30.830973042 +0000 UTC m=+1158.280901345 I0609 17:15:30.877851 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:15:30.877829347 +0000 UTC m=+1158.327757670 I0609 17:15:30.917166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:15:30.975104 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:17:24.264095 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:17:24.264143 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-06-09 17:17:24.264133083 +0000 UTC m=+1271.714061406 I0609 17:17:24.264267 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-06-09 17:17:24.264251946 +0000 UTC m=+1271.714180259 I0609 17:17:24.283060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:17:24.283375 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-06-09 17:17:24.28336456 +0000 UTC m=+1271.733292913 I0609 17:17:24.566620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:17:24.602921 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bhmbq" condition "Approved" to 2026-06-09 17:17:24.602903701 +0000 UTC m=+1272.052832034 I0609 17:17:24.626350 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-bhmbq" condition "Ready" to 2026-06-09 17:17:24.626338254 +0000 UTC m=+1272.076266557 I0609 17:17:24.660040 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:17:24.660029528 +0000 UTC m=+1272.109957821 I0609 17:17:24.716913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:17:24.717439 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:17:24.717432271 +0000 UTC m=+1272.167360574 I0609 17:17:24.743393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:20:53.763166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:20:53.763383 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-06-09 17:20:53.763368665 +0000 UTC m=+1481.213296998 I0609 17:20:53.763436 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-06-09 17:20:53.763424216 +0000 UTC m=+1481.213352519 I0609 17:20:53.812193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:20:53.812415 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-06-09 17:20:53.812406427 +0000 UTC m=+1481.262334730 I0609 17:20:54.037442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:20:54.084261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rmrtq" condition "Approved" to 2026-06-09 17:20:54.084252477 +0000 UTC m=+1481.534180770 I0609 17:20:54.107338 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-rmrtq" condition "Ready" to 2026-06-09 17:20:54.107327991 +0000 UTC m=+1481.557256284 I0609 17:20:54.136823 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:20:54.13681084 +0000 UTC m=+1481.586739133 I0609 17:20:54.159166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:20:54.159430 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:20:54.159425023 +0000 UTC m=+1481.609353316 I0609 17:20:54.188344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:20:54.191155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:20:54.191607 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:20:54.191598874 +0000 UTC m=+1481.641527177 I0609 17:28:45.215043 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:28:45.215101 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-06-09 17:28:45.215095741 +0000 UTC m=+1952.665024034 I0609 17:28:45.215225 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-06-09 17:28:45.215210963 +0000 UTC m=+1952.665139286 I0609 17:28:45.263404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:28:45.263466 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:28:45.263486 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-06-09 17:28:45.26347941 +0000 UTC m=+1952.713407713 I0609 17:28:45.788286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-ntd7z" condition "Approved" to 2026-06-09 17:28:45.788270028 +0000 UTC m=+1953.238198331 I0609 17:28:45.826508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-ntd7z" condition "Ready" to 2026-06-09 17:28:45.826489146 +0000 UTC m=+1953.276417449 I0609 17:28:45.865995 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:28:45.865978613 +0000 UTC m=+1953.315906936 I0609 17:28:45.894949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:28:45.895305 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:28:45.89529909 +0000 UTC m=+1953.345227403 I0609 17:28:45.930338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:28:45.930747 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:28:45.930738215 +0000 UTC m=+1953.380666518 I0609 17:30:25.299838 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:30:25.299940 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-06-09 17:30:25.299930551 +0000 UTC m=+2052.749858874 I0609 17:30:25.300005 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-06-09 17:30:25.299985262 +0000 UTC m=+2052.749913635 I0609 17:30:25.401920 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:30:25.402006 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-06-09 17:30:25.401997441 +0000 UTC m=+2052.851925744 I0609 17:30:25.742600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:30:25.806786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-bcrjd" condition "Approved" to 2026-06-09 17:30:25.806774269 +0000 UTC m=+2053.256702592 I0609 17:30:26.017204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-bcrjd" condition "Ready" to 2026-06-09 17:30:26.0171823 +0000 UTC m=+2053.467110643 I0609 17:30:26.063134 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:30:26.063119135 +0000 UTC m=+2053.513047438 I0609 17:30:26.090343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:31:32.223678 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-06-09 17:31:32.223662365 +0000 UTC m=+2119.673590678 I0609 17:31:32.223839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:31:32.223927 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-06-09 17:31:32.223916351 +0000 UTC m=+2119.673844674 I0609 17:31:32.352492 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:31:32.352577 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-06-09 17:31:32.352562154 +0000 UTC m=+2119.802490447 I0609 17:31:32.521258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:31:32.636079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-z9lmv" condition "Approved" to 2026-06-09 17:31:32.636062896 +0000 UTC m=+2120.085991229 I0609 17:31:32.774859 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-z9lmv" condition "Ready" to 2026-06-09 17:31:32.77484809 +0000 UTC m=+2120.224776383 I0609 17:31:32.909084 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:31:32.90907122 +0000 UTC m=+2120.358999513 I0609 17:31:33.084739 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-06-09 17:31:33.084718482 +0000 UTC m=+2120.534646815 I0609 17:31:33.084902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:31:33.084950 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-06-09 17:31:33.084937327 +0000 UTC m=+2120.534865650 I0609 17:31:33.090995 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:31:33.197694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:31:33.197804 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-06-09 17:31:33.197793911 +0000 UTC m=+2120.647722244 I0609 17:31:33.244726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:31:33.398312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hcqql" condition "Approved" to 2026-06-09 17:31:33.398293488 +0000 UTC m=+2120.848221811 I0609 17:31:33.440024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:31:33.441585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hcqql" condition "Ready" to 2026-06-09 17:31:33.441575351 +0000 UTC m=+2120.891503664 I0609 17:31:33.515898 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:31:33.51588293 +0000 UTC m=+2120.965811253 I0609 17:31:33.569226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:31:33.569733 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:31:33.569724643 +0000 UTC m=+2121.019652946 I0609 17:31:33.626500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:31:33.845546 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-06-09 17:31:33.845536081 +0000 UTC m=+2121.295464384 I0609 17:31:34.483037 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-06-09 17:31:34.483022427 +0000 UTC m=+2121.932950760 I0609 17:32:22.948724 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:32:22.948789 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-06-09 17:32:22.948776534 +0000 UTC m=+2170.398704867 I0609 17:32:22.949355 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-06-09 17:32:22.949336127 +0000 UTC m=+2170.399264460 I0609 17:32:22.994912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:32:22.994984 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-06-09 17:32:22.994977433 +0000 UTC m=+2170.444905736 I0609 17:32:27.132980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:32:27.408468 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-tk8wv" condition "Approved" to 2026-06-09 17:32:27.408454717 +0000 UTC m=+2174.858383020 I0609 17:32:27.551364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-tk8wv" condition "Ready" to 2026-06-09 17:32:27.551348925 +0000 UTC m=+2175.001277258 I0609 17:32:27.721682 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:32:27.721665685 +0000 UTC m=+2175.171593988 I0609 17:32:27.907747 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:32:27.908818 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:32:27.908805488 +0000 UTC m=+2175.358733821 I0609 17:32:28.193307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:35:44.528466 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-06-09 17:35:44.528453716 +0000 UTC m=+2371.978382019 I0609 17:35:44.528558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:35:44.528623 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-06-09 17:35:44.528615329 +0000 UTC m=+2371.978543632 I0609 17:35:44.548262 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:35:44.548382 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-06-09 17:35:44.548372149 +0000 UTC m=+2371.998300472 I0609 17:35:44.760884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:35:44.799984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-c6298" condition "Approved" to 2026-06-09 17:35:44.799969826 +0000 UTC m=+2372.249898129 I0609 17:35:44.826168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-c6298" condition "Ready" to 2026-06-09 17:35:44.826157812 +0000 UTC m=+2372.276086115 I0609 17:35:44.858532 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:35:44.858517376 +0000 UTC m=+2372.308445679 I0609 17:35:44.881217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:35:44.881598 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:35:44.88159026 +0000 UTC m=+2372.331518553 I0609 17:35:44.905660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:35:46.100168 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:35:46.100226 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-06-09 17:35:46.100214343 +0000 UTC m=+2373.550142666 I0609 17:35:46.100340 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-09 17:35:46.100320196 +0000 UTC m=+2373.550248519 I0609 17:35:46.122553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:35:46.122675 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-06-09 17:35:46.122663913 +0000 UTC m=+2373.572592216 I0609 17:35:46.618452 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:35:46.650623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-xj2rp" condition "Approved" to 2026-06-09 17:35:46.650608281 +0000 UTC m=+2374.100536604 I0609 17:35:46.674010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-xj2rp" condition "Ready" to 2026-06-09 17:35:46.673999112 +0000 UTC m=+2374.123927415 I0609 17:35:46.714661 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:35:46.714645756 +0000 UTC m=+2374.164574059 I0609 17:35:46.743074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:35:46.744299 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:35:46.744286779 +0000 UTC m=+2374.194215072 I0609 17:35:46.768219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:35:46.775605 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:40:01.751442 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:40:01.751493 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-06-09 17:40:01.751480886 +0000 UTC m=+2629.201409249 I0609 17:40:01.752021 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-06-09 17:40:01.752011198 +0000 UTC m=+2629.201939521 I0609 17:40:01.826450 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:40:01.826531 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-06-09 17:40:01.826524123 +0000 UTC m=+2629.276452416 I0609 17:40:01.968572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:40:02.378654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-g4qqw" condition "Approved" to 2026-06-09 17:40:02.378641016 +0000 UTC m=+2629.828569339 I0609 17:40:02.532823 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-g4qqw" condition "Ready" to 2026-06-09 17:40:02.532814102 +0000 UTC m=+2629.982742395 I0609 17:40:02.646031 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:40:02.646006376 +0000 UTC m=+2630.095934679 I0609 17:40:02.710853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:41:44.051399 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pdcsf-api" condition "Ready" to 2026-06-09 17:41:44.051382483 +0000 UTC m=+2731.501310786 I0609 17:41:44.052114 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pdcsf-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:41:44.052142 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pdcsf-api" condition "Issuing" to 2026-06-09 17:41:44.05213643 +0000 UTC m=+2731.502064743 I0609 17:41:44.052640 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pdcsf-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:41:44.052667 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pdcsf-vnc" condition "Issuing" to 2026-06-09 17:41:44.052661642 +0000 UTC m=+2731.502589945 I0609 17:41:44.052917 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pdcsf-vnc" condition "Ready" to 2026-06-09 17:41:44.052910677 +0000 UTC m=+2731.502838980 I0609 17:41:44.130525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-pdcsf-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pdcsf-api\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:41:44.130598 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pdcsf-api" condition "Ready" to 2026-06-09 17:41:44.130591244 +0000 UTC m=+2731.580519537 I0609 17:41:44.130629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pdcsf-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pdcsf-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:41:44.131013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-pdcsf-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:41:44.131055 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-pdcsf-vnc" condition "Issuing" to 2026-06-09 17:41:44.131041904 +0000 UTC m=+2731.580970237 I0609 17:41:44.552871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-pdcsf-vnc-bz8qk" condition "Approved" to 2026-06-09 17:41:44.552857116 +0000 UTC m=+2732.002785419 I0609 17:41:44.645134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-pdcsf-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pdcsf-api\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:41:44.645839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-pdcsf-vnc-bz8qk" condition "Ready" to 2026-06-09 17:41:44.64582621 +0000 UTC m=+2732.095754523 I0609 17:41:44.695882 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-pdcsf-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:41:44.695866798 +0000 UTC m=+2732.145795131 I0609 17:41:44.703313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-pdcsf-api-nzzp5" condition "Approved" to 2026-06-09 17:41:44.703297446 +0000 UTC m=+2732.153225759 I0609 17:41:44.758806 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-pdcsf-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pdcsf-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:41:44.759188 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-pdcsf-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:41:44.759179887 +0000 UTC m=+2732.209108180 I0609 17:41:44.931420 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-pdcsf-api-nzzp5" condition "Ready" to 2026-06-09 17:41:44.931409893 +0000 UTC m=+2732.381338196 I0609 17:41:44.946528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-pdcsf-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pdcsf-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:41:45.013960 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-pdcsf-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:41:45.013944329 +0000 UTC m=+2732.463872642 I0609 17:41:45.049971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-pdcsf-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-pdcsf-api\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:46:41.735269 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:46:41.735320 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-06-09 17:46:41.735309886 +0000 UTC m=+3029.185238219 I0609 17:46:41.735358 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-06-09 17:46:41.735345727 +0000 UTC m=+3029.185274050 I0609 17:46:41.752631 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:46:41.752715 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-06-09 17:46:41.752709451 +0000 UTC m=+3029.202637784 I0609 17:46:41.898969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:46:41.944231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-g28g6" condition "Approved" to 2026-06-09 17:46:41.944212756 +0000 UTC m=+3029.394141089 I0609 17:46:41.968838 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-g28g6" condition "Ready" to 2026-06-09 17:46:41.968826286 +0000 UTC m=+3029.418754589 I0609 17:46:42.004457 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:46:42.004445516 +0000 UTC m=+3029.454373819 I0609 17:46:42.049323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:46:43.306277 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-06-09 17:46:43.306260986 +0000 UTC m=+3030.756189289 I0609 17:46:43.306290 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:46:43.306357 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-06-09 17:46:43.306342608 +0000 UTC m=+3030.756270941 I0609 17:46:43.325118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:46:43.325236 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-06-09 17:46:43.325226178 +0000 UTC m=+3030.775154491 I0609 17:46:43.478913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:46:43.519318 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-hbsbm" condition "Approved" to 2026-06-09 17:46:43.519308141 +0000 UTC m=+3030.969236444 I0609 17:46:43.541197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-hbsbm" condition "Ready" to 2026-06-09 17:46:43.541186818 +0000 UTC m=+3030.991115121 I0609 17:46:43.578899 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:46:43.578883425 +0000 UTC m=+3031.028811728 I0609 17:46:43.604669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:46:43.605153 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:46:43.605142543 +0000 UTC m=+3031.055070876 I0609 17:46:43.628772 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:11.552010 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-06-09 17:49:11.551990476 +0000 UTC m=+3179.001918809 I0609 17:49:11.552163 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:49:11.552253 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-06-09 17:49:11.552242691 +0000 UTC m=+3179.002171024 E0609 17:49:11.566508 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 17:49:11.566582 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-06-09 17:49:11.566575767 +0000 UTC m=+3179.016504070 I0609 17:49:11.566603 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 17:49:11.567737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:11.567872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:49:11.567938 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-06-09 17:49:11.567930239 +0000 UTC m=+3179.017858542 E0609 17:49:11.577876 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0609 17:49:11.578024 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 17:49:11.578098 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0609 17:49:11.578315 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0609 17:49:11.610832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-lq8rp" condition "Approved" to 2026-06-09 17:49:11.610815664 +0000 UTC m=+3179.060743957 I0609 17:49:11.629953 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-lq8rp" condition "Ready" to 2026-06-09 17:49:11.629939009 +0000 UTC m=+3179.079867312 I0609 17:49:11.660040 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:49:11.660022883 +0000 UTC m=+3179.109951186 I0609 17:49:11.677443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:11.677940 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:49:11.677930171 +0000 UTC m=+3179.127858504 I0609 17:49:11.701180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:12.206803 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:49:12.206836 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-06-09 17:49:12.206829863 +0000 UTC m=+3179.656758156 I0609 17:49:12.206943 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-06-09 17:49:12.206938395 +0000 UTC m=+3179.656866698 E0609 17:49:12.220446 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 17:49:12.220480 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-06-09 17:49:12.220475042 +0000 UTC m=+3179.670403335 I0609 17:49:12.221096 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 17:49:12.225218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:12.225337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:49:12.225445 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-06-09 17:49:12.225440905 +0000 UTC m=+3179.675369218 E0609 17:49:12.230756 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0609 17:49:12.231296 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0609 17:49:12.231456 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0609 17:49:12.232303 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0609 17:49:12.279536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-44fql" condition "Approved" to 2026-06-09 17:49:12.279516236 +0000 UTC m=+3179.729444569 I0609 17:49:12.292840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-44fql" condition "Ready" to 2026-06-09 17:49:12.292825118 +0000 UTC m=+3179.742753441 I0609 17:49:12.315935 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:49:12.315917304 +0000 UTC m=+3179.765845637 I0609 17:49:12.332024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:12.332431 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:49:12.332421619 +0000 UTC m=+3179.782349922 I0609 17:49:12.352883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:12.361625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:12.976765 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:49:12.976801 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-06-09 17:49:12.976793717 +0000 UTC m=+3180.426722020 I0609 17:49:12.977195 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-09 17:49:12.977186757 +0000 UTC m=+3180.427115090 I0609 17:49:12.998390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:12.998529 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-09 17:49:12.998519101 +0000 UTC m=+3180.448447394 I0609 17:49:13.055825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-5x9ch" condition "Approved" to 2026-06-09 17:49:13.055813015 +0000 UTC m=+3180.505741298 I0609 17:49:13.059297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:13.059377 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-09 17:49:13.059370526 +0000 UTC m=+3180.509298819 I0609 17:49:13.075247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-5x9ch" condition "Ready" to 2026-06-09 17:49:13.075231687 +0000 UTC m=+3180.525159990 I0609 17:49:13.077544 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-06-09 17:49:13.077538399 +0000 UTC m=+3180.527466702 I0609 17:49:13.262003 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:16.578930 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:49:16.57891978 +0000 UTC m=+3184.028848083 I0609 17:49:16.594558 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-5x9ch" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:49:16.594546515 +0000 UTC m=+3184.044474818 I0609 17:49:16.623861 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:49:16.623850092 +0000 UTC m=+3184.073778395 I0609 17:49:16.664813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:16.665477 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:49:16.665467348 +0000 UTC m=+3184.115395651 I0609 17:49:16.679717 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:16.692223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:49:17.231754 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:49:17.23174053 +0000 UTC m=+3184.681668823 I0609 17:52:01.484337 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:52:01.484425 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-06-09 17:52:01.48441349 +0000 UTC m=+3348.934341813 I0609 17:52:01.484720 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-06-09 17:52:01.484700916 +0000 UTC m=+3348.934629239 I0609 17:52:01.748739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:01.749010 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-06-09 17:52:01.748997459 +0000 UTC m=+3349.198925792 I0609 17:52:02.193358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:02.348808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-hvd2m" condition "Approved" to 2026-06-09 17:52:02.348795203 +0000 UTC m=+3349.798723506 I0609 17:52:02.531804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-hvd2m" condition "Ready" to 2026-06-09 17:52:02.531791446 +0000 UTC m=+3349.981719749 I0609 17:52:02.620119 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:52:02.620104955 +0000 UTC m=+3350.070033258 I0609 17:52:02.676105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:02.676640 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:52:02.676634191 +0000 UTC m=+3350.126562494 I0609 17:52:02.707588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:02.711733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:48.513997 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-06-09 17:52:48.513976962 +0000 UTC m=+3395.963905295 I0609 17:52:48.532947 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:52:48.532986 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-09 17:52:48.532979124 +0000 UTC m=+3395.982907427 I0609 17:52:48.533314 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-06-09 17:52:48.533308002 +0000 UTC m=+3395.983236305 I0609 17:52:48.553695 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:48.553774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:52:48.553793 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-06-09 17:52:48.553787498 +0000 UTC m=+3396.003715811 E0609 17:52:48.561337 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0609 17:52:48.641016 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-06-09 17:52:48.640997122 +0000 UTC m=+3396.090925445 I0609 17:52:48.661272 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-09 17:52:48.661258293 +0000 UTC m=+3396.111186586 I0609 17:52:48.661301 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:52:48.661385 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-06-09 17:52:48.661369445 +0000 UTC m=+3396.111297778 E0609 17:52:48.672575 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0609 17:52:48.679191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:48.679242 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-06-09 17:52:48.679236671 +0000 UTC m=+3396.129164954 I0609 17:52:48.944357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:48.985455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-qbp9v" condition "Approved" to 2026-06-09 17:52:48.985443878 +0000 UTC m=+3396.435372181 I0609 17:52:49.026524 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-qbp9v" condition "Ready" to 2026-06-09 17:52:49.026512691 +0000 UTC m=+3396.476440994 I0609 17:52:49.054817 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:52:49.054754494 +0000 UTC m=+3396.504682797 I0609 17:52:49.086988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:49.087413 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:52:49.087403837 +0000 UTC m=+3396.537332140 I0609 17:52:49.110739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:49.111108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:49.476570 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-06-09 17:52:49.476555489 +0000 UTC m=+3396.926483782 I0609 17:52:49.497164 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:52:49.497218 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-09 17:52:49.497207319 +0000 UTC m=+3396.947135652 I0609 17:52:49.497396 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-06-09 17:52:49.497382383 +0000 UTC m=+3396.947310686 I0609 17:52:49.520077 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:49.520227 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:52:49.520432 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-06-09 17:52:49.520420238 +0000 UTC m=+3396.970348561 I0609 17:52:49.771134 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-qs2qp" condition "Approved" to 2026-06-09 17:52:49.77112442 +0000 UTC m=+3397.221052713 I0609 17:52:49.793381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-qs2qp" condition "Ready" to 2026-06-09 17:52:49.793369566 +0000 UTC m=+3397.243297859 I0609 17:52:49.848659 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:52:49.848645974 +0000 UTC m=+3397.298574277 I0609 17:52:49.878649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:49.883256 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:52:49.883243101 +0000 UTC m=+3397.333171394 I0609 17:52:49.918408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:49.949882 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-06-09 17:52:49.949869947 +0000 UTC m=+3397.399798240 I0609 17:52:49.970762 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:52:49.970798 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-09 17:52:49.970788492 +0000 UTC m=+3397.420716785 I0609 17:52:49.971003 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-06-09 17:52:49.970988346 +0000 UTC m=+3397.420916679 I0609 17:52:49.990337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:49.990415 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:52:49.990437 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-06-09 17:52:49.990431609 +0000 UTC m=+3397.440359902 I0609 17:52:50.217527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-bj8t9" condition "Approved" to 2026-06-09 17:52:50.217517184 +0000 UTC m=+3397.667445477 I0609 17:52:50.235986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-bj8t9" condition "Ready" to 2026-06-09 17:52:50.235973335 +0000 UTC m=+3397.685901638 I0609 17:52:50.291288 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:52:50.291272283 +0000 UTC m=+3397.741200586 I0609 17:52:50.319095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:50.319344 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:52:50.319339732 +0000 UTC m=+3397.769268025 I0609 17:52:50.452510 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-06-09 17:52:50.45249644 +0000 UTC m=+3397.902424743 I0609 17:52:50.471078 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-06-09 17:52:50.471061183 +0000 UTC m=+3397.920989496 I0609 17:52:50.471320 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:52:50.471608 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-09 17:52:50.471601205 +0000 UTC m=+3397.921529548 I0609 17:52:50.471842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:50.634307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:50.634373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:52:50.634388 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-06-09 17:52:50.634383648 +0000 UTC m=+3398.084311941 I0609 17:52:50.985818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-cjfmh" condition "Approved" to 2026-06-09 17:52:50.985801823 +0000 UTC m=+3398.435730126 I0609 17:52:51.091628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-cjfmh" condition "Ready" to 2026-06-09 17:52:51.091613389 +0000 UTC m=+3398.541541692 I0609 17:52:51.527015 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:52:51.526988053 +0000 UTC m=+3398.976916356 I0609 17:52:51.673587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:51.674038 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:52:51.674027368 +0000 UTC m=+3399.123955671 I0609 17:52:52.250811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:52:52.266793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:56:08.186508 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-06-09 17:56:08.186485328 +0000 UTC m=+3595.636413661 I0609 17:56:08.186786 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:56:08.186840 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-06-09 17:56:08.186829986 +0000 UTC m=+3595.636758319 I0609 17:56:08.203592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:56:08.203701 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:56:08.203727 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-06-09 17:56:08.20371968 +0000 UTC m=+3595.653647983 I0609 17:56:08.574196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:56:08.575320 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-ww86p" condition "Approved" to 2026-06-09 17:56:08.575305471 +0000 UTC m=+3596.025233844 I0609 17:56:08.595465 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-ww86p" condition "Ready" to 2026-06-09 17:56:08.59545076 +0000 UTC m=+3596.045379093 I0609 17:56:08.628327 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:56:08.628311229 +0000 UTC m=+3596.078239552 I0609 17:56:08.659725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:56:08.660400 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:56:08.660394229 +0000 UTC m=+3596.110322532 I0609 17:56:08.722553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:56:08.730533 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:56:08.734590 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:56:08.734574308 +0000 UTC m=+3596.184502611 I0609 17:56:11.144032 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0609 17:56:11.144067 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-06-09 17:56:11.144059191 +0000 UTC m=+3598.593987494 I0609 17:56:11.144519 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-09 17:56:11.144504851 +0000 UTC m=+3598.594433154 I0609 17:56:11.166138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:56:11.166242 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-06-09 17:56:11.166234686 +0000 UTC m=+3598.616162989 I0609 17:56:11.701055 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:56:11.748648 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-xnkdv" condition "Approved" to 2026-06-09 17:56:11.748630057 +0000 UTC m=+3599.198558380 I0609 17:56:11.775908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-xnkdv" condition "Ready" to 2026-06-09 17:56:11.775895367 +0000 UTC m=+3599.225823670 I0609 17:56:11.804692 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:56:11.804679773 +0000 UTC m=+3599.254608066 I0609 17:56:11.827408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:56:11.827785 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:56:11.827776559 +0000 UTC m=+3599.277704842 I0609 17:56:11.845840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0609 17:56:11.846235 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-06-09 17:56:11.846226848 +0000 UTC m=+3599.296155151 E0609 17:58:24.150061 1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out E0609 17:59:27.248795 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: i/o timeout I0609 17:59:37.247668 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition I0609 17:59:52.715626 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0609 17:59:52.715644 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0609 17:59:52.715698 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0609 17:59:52.715721 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0609 17:59:52.715748 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0609 17:59:52.715772 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0609 17:59:52.715793 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" I0609 17:59:52.715816 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0609 17:59:52.715835 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0609 17:59:52.716034 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0609 17:59:52.716051 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0609 17:59:52.716062 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0609 17:59:52.716071 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0609 17:59:52.716081 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0609 17:59:52.716089 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0609 17:59:52.716118 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0609 17:59:52.716128 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0609 17:59:52.716138 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" E0609 17:59:52.716956 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"