I0513 16:13:15.613517 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0513 16:13:15.613723 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0513 16:13:15.614130 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0513 16:13:15.621266 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0513 16:13:15.621768 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0513 16:13:15.621891 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0513 16:13:15.621889 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0513 16:13:15.624569 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0513 16:13:15.641102 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0513 16:13:15.648315 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0513 16:13:15.651975 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0513 16:13:15.658155 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0513 16:13:15.658204 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0513 16:13:15.658271 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0513 16:13:15.662434 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0513 16:13:15.662631 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0513 16:13:15.665256 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0513 16:13:15.667975 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0513 16:13:15.670595 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0513 16:13:15.673166 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0513 16:13:15.673190 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0513 16:13:15.673278 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0513 16:13:15.675536 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0513 16:13:15.681873 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0513 16:13:15.685712 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0513 16:13:15.688693 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0513 16:13:15.691844 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0513 16:13:15.695772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0513 16:13:15.698618 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0513 16:13:15.698733 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0513 16:13:15.701738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0513 16:13:15.704501 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0513 16:13:15.706951 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0513 16:13:15.711951 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 16:13:15.712279 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 16:13:15.712698 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 16:13:15.713153 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 16:13:15.730422 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 16:13:15.746811 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 16:13:15.761176 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 16:13:15.775567 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 16:13:15.793858 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 16:13:15.797817 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0513 16:13:36.736681 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-13 16:13:36.736666054 +0000 UTC m=+21.160450130 I0513 16:13:37.478376 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:13:37.478372 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-13 16:13:37.478355667 +0000 UTC m=+21.902139743 I0513 16:13:37.478437 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-13 16:13:37.47842512 +0000 UTC m=+21.902209196 E0513 16:13:37.538190 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0513 16:13:37.538294 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-13 16:13:37.538283034 +0000 UTC m=+21.962067110 E0513 16:13:37.538329 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0513 16:13:37.542623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:13:37.542899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:13:37.542943 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-13 16:13:37.542932516 +0000 UTC m=+21.966716622 E0513 16:13:37.631302 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0513 16:13:37.631637 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0513 16:13:37.631712 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0513 16:13:37.631782 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0513 16:13:37.865495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:13:37.887069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sflnl" condition "Approved" to 2026-05-13 16:13:37.88705615 +0000 UTC m=+22.310840236 I0513 16:13:37.960796 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sflnl" condition "Ready" to 2026-05-13 16:13:37.960782377 +0000 UTC m=+22.384566453 I0513 16:13:38.127165 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:13:38.127149488 +0000 UTC m=+22.550933534 I0513 16:13:38.208842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:13:38.448623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:13:42.632479 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:13:42.6324629 +0000 UTC m=+27.056246966 I0513 16:14:09.151024 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-13 16:14:09.150975764 +0000 UTC m=+53.574759820 I0513 16:14:09.151066 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:14:09.151136 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-13 16:14:09.151129219 +0000 UTC m=+53.574913265 I0513 16:14:09.165786 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-13 16:14:09.165775207 +0000 UTC m=+53.589559243 I0513 16:14:09.170849 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:14:09.170940 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:14:09.170966 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-13 16:14:09.170959236 +0000 UTC m=+53.594743292 I0513 16:14:09.475435 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:14:09.485655 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k4tn4" condition "Approved" to 2026-05-13 16:14:09.485639579 +0000 UTC m=+53.909423635 I0513 16:14:09.516587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k4tn4" condition "Ready" to 2026-05-13 16:14:09.516576059 +0000 UTC m=+53.940360105 I0513 16:14:09.548883 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:14:09.548868883 +0000 UTC m=+53.972652929 I0513 16:14:09.570129 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:14:09.618816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:17:02.762045 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-13 16:17:02.762017357 +0000 UTC m=+227.185801443 I0513 16:17:02.762433 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:17:02.762511 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-13 16:17:02.762496162 +0000 UTC m=+227.186280198 E0513 16:17:02.774215 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0513 16:17:02.774309 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-13 16:17:02.774301712 +0000 UTC m=+227.198085768 I0513 16:17:02.774336 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0513 16:17:02.775774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:17:02.775887 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:17:02.775979 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-13 16:17:02.775926043 +0000 UTC m=+227.199710099 E0513 16:17:02.783103 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0513 16:17:02.783230 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0513 16:17:02.783265 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0513 16:17:02.783315 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0513 16:17:02.792799 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-13 16:17:02.792785673 +0000 UTC m=+227.216569729 I0513 16:17:02.793434 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:17:02.793569 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-13 16:17:02.793557408 +0000 UTC m=+227.217341494 I0513 16:17:02.812624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:17:02.812708 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:17:02.812726 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-13 16:17:02.81271995 +0000 UTC m=+227.236504016 I0513 16:17:02.980402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:17:02.986997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-6jg4x" condition "Approved" to 2026-05-13 16:17:02.986977907 +0000 UTC m=+227.410761953 I0513 16:17:03.019656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-6jg4x" condition "Ready" to 2026-05-13 16:17:03.019642063 +0000 UTC m=+227.443426119 I0513 16:17:03.047944 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:17:03.047928552 +0000 UTC m=+227.471712618 I0513 16:17:03.065596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:17:03.066238 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:17:03.066227827 +0000 UTC m=+227.490011903 I0513 16:17:03.084661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:17:03.084930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:17:03.084962 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:17:03.084953996 +0000 UTC m=+227.508738052 I0513 16:17:03.160940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-crtpr" condition "Approved" to 2026-05-13 16:17:03.160926263 +0000 UTC m=+227.584710319 I0513 16:17:03.177351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-crtpr" condition "Ready" to 2026-05-13 16:17:03.177337079 +0000 UTC m=+227.601121135 I0513 16:17:07.783916 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:17:07.783900243 +0000 UTC m=+232.207684319 I0513 16:17:07.802275 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-crtpr" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:17:07.802240589 +0000 UTC m=+232.226024665 I0513 16:17:07.841171 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:17:07.841154812 +0000 UTC m=+232.264938888 I0513 16:17:07.862874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:19:41.277992 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-05-13 16:19:41.277942925 +0000 UTC m=+385.701726991 I0513 16:19:41.278289 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-248.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:19:41.278333 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Issuing" to 2026-05-13 16:19:41.278328507 +0000 UTC m=+385.702112573 I0513 16:19:41.299222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:19:41.299297 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready" to 2026-05-13 16:19:41.29928881 +0000 UTC m=+385.723072876 I0513 16:19:41.782279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:19:41.867231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-wwxw6" condition "Approved" to 2026-05-13 16:19:41.867216648 +0000 UTC m=+386.291000734 I0513 16:19:41.937511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-248.nip.io-tls-wwxw6" condition "Ready" to 2026-05-13 16:19:41.937499761 +0000 UTC m=+386.361283837 I0513 16:19:41.992308 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-248.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:19:41.992299734 +0000 UTC m=+386.416083780 I0513 16:19:42.037994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:19:42.108676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-248.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-248.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:20:53.520348 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-13 16:20:53.520307448 +0000 UTC m=+457.944091534 I0513 16:20:53.520923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:20:53.520951 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-13 16:20:53.520945748 +0000 UTC m=+457.944729824 E0513 16:20:53.532964 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0513 16:20:53.533029 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-13 16:20:53.53301714 +0000 UTC m=+457.956801226 E0513 16:20:53.533093 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0513 16:20:53.534592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:20:53.534666 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:20:53.534681 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-13 16:20:53.534675302 +0000 UTC m=+457.958459358 E0513 16:20:53.545591 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0513 16:20:53.545725 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0513 16:20:53.545769 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0513 16:20:53.545821 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0513 16:20:53.572976 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:20:53.578291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zmjk4" condition "Approved" to 2026-05-13 16:20:53.57824623 +0000 UTC m=+458.002030356 I0513 16:20:53.589470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-zmjk4" condition "Ready" to 2026-05-13 16:20:53.589456524 +0000 UTC m=+458.013240580 I0513 16:20:53.617534 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:20:53.617512671 +0000 UTC m=+458.041296757 I0513 16:20:53.633203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:20:53.633688 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:20:53.633675332 +0000 UTC m=+458.057459408 I0513 16:20:53.645420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:20:53.647300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:20:53.647664 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:20:53.647654714 +0000 UTC m=+458.071438770 I0513 16:20:58.546855 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:20:58.546817559 +0000 UTC m=+462.970601635 I0513 16:21:36.650213 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:21:36.650271 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-13 16:21:36.650244533 +0000 UTC m=+501.074028579 I0513 16:21:36.650402 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-13 16:21:36.650387657 +0000 UTC m=+501.074171693 I0513 16:21:36.655986 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:21:36.656039 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-13 16:21:36.656009985 +0000 UTC m=+501.079794021 I0513 16:21:36.656133 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-13 16:21:36.656122579 +0000 UTC m=+501.079906635 I0513 16:21:36.665936 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-13 16:21:36.665923039 +0000 UTC m=+501.089707135 I0513 16:21:36.666364 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:21:36.666391 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-13 16:21:36.666387443 +0000 UTC m=+501.090171499 I0513 16:21:36.674878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:21:36.674930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:21:36.674945 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-13 16:21:36.674939794 +0000 UTC m=+501.098723850 I0513 16:21:36.675240 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:21:36.675272 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:21:36.675289 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-13 16:21:36.675285744 +0000 UTC m=+501.099069800 I0513 16:21:36.703486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:21:36.703539 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:21:36.705435 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-13 16:21:36.705428227 +0000 UTC m=+501.129212293 I0513 16:21:36.874784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mzgfq" condition "Approved" to 2026-05-13 16:21:36.874771431 +0000 UTC m=+501.298555507 I0513 16:21:36.903765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mzgfq" condition "Ready" to 2026-05-13 16:21:36.903751778 +0000 UTC m=+501.327535834 I0513 16:21:36.987482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4n29r" condition "Approved" to 2026-05-13 16:21:36.987466085 +0000 UTC m=+501.411250141 I0513 16:21:36.994839 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:21:36.994825647 +0000 UTC m=+501.418609703 I0513 16:21:37.010170 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-4n29r" condition "Ready" to 2026-05-13 16:21:37.010161952 +0000 UTC m=+501.433945998 I0513 16:21:37.017706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:21:37.018238 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:21:37.018230407 +0000 UTC m=+501.442014463 I0513 16:21:37.033098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f8nhb" condition "Approved" to 2026-05-13 16:21:37.033083117 +0000 UTC m=+501.456867173 I0513 16:21:37.041044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:21:37.094028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:21:37.094469 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:21:37.094459857 +0000 UTC m=+501.518243913 I0513 16:21:37.193288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:21:37.439036 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-f8nhb" condition "Ready" to 2026-05-13 16:21:37.439024391 +0000 UTC m=+501.862808447 I0513 16:21:37.545203 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:21:37.545184787 +0000 UTC m=+501.968968873 I0513 16:21:37.845934 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:21:37.846471 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:21:37.846461432 +0000 UTC m=+502.270245508 I0513 16:21:37.917288 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:21:37.917277641 +0000 UTC m=+502.341061687 I0513 16:21:38.220615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:21:38.221098 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:21:38.221088956 +0000 UTC m=+502.644873032 I0513 16:21:38.224630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:21:38.970013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:21:38.979165 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:22:05.100531 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wxcls-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:22:05.100554 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wxcls-tls" condition "Ready" to 2026-05-13 16:22:05.100537981 +0000 UTC m=+529.524322037 I0513 16:22:05.100565 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wxcls-tls" condition "Issuing" to 2026-05-13 16:22:05.100557962 +0000 UTC m=+529.524342018 I0513 16:22:05.113150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wxcls-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wxcls-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:22:05.113218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wxcls-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:22:05.113235 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-wxcls-tls" condition "Issuing" to 2026-05-13 16:22:05.113229033 +0000 UTC m=+529.537013089 I0513 16:22:05.267372 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wxcls-6gltg" condition "Approved" to 2026-05-13 16:22:05.267360736 +0000 UTC m=+529.691144792 I0513 16:22:05.284964 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-wxcls-6gltg" condition "Ready" to 2026-05-13 16:22:05.284955292 +0000 UTC m=+529.708739338 I0513 16:22:05.312871 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-wxcls-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:22:05.312854874 +0000 UTC m=+529.736638960 I0513 16:22:05.330932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-wxcls-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-wxcls-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:22:33.439479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:22:33.439499 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-13 16:22:33.439472149 +0000 UTC m=+557.863256205 I0513 16:22:33.439532 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-13 16:22:33.43952029 +0000 UTC m=+557.863304366 I0513 16:22:33.455507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:22:33.455592 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-13 16:22:33.455582558 +0000 UTC m=+557.879366604 I0513 16:22:33.638813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:22:33.672680 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-r8g4g" condition "Approved" to 2026-05-13 16:22:33.672667722 +0000 UTC m=+558.096451778 I0513 16:22:33.690343 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-r8g4g" condition "Ready" to 2026-05-13 16:22:33.69032934 +0000 UTC m=+558.114113406 I0513 16:22:33.715700 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:22:33.715690402 +0000 UTC m=+558.139474448 I0513 16:22:33.736074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:22:33.736334 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:22:33.736326994 +0000 UTC m=+558.160111050 I0513 16:22:33.745889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:22:33.757794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:26:00.892642 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-13 16:26:00.892583179 +0000 UTC m=+765.316367315 I0513 16:26:00.892657 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:26:00.892762 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-13 16:26:00.892747124 +0000 UTC m=+765.316531270 I0513 16:26:00.908276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:26:00.908362 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-13 16:26:00.908355376 +0000 UTC m=+765.332139422 I0513 16:26:01.095960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:26:01.127329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pmvgs" condition "Approved" to 2026-05-13 16:26:01.127318282 +0000 UTC m=+765.551102348 I0513 16:26:01.151980 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-pmvgs" condition "Ready" to 2026-05-13 16:26:01.15196813 +0000 UTC m=+765.575752186 I0513 16:26:01.185568 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:26:01.185549209 +0000 UTC m=+765.609333275 I0513 16:26:01.212247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:26:01.212652 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:26:01.212644884 +0000 UTC m=+765.636428940 I0513 16:26:01.244620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:28:32.176631 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:28:32.176716 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-13 16:28:32.176706673 +0000 UTC m=+916.600490759 I0513 16:28:32.176785 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-13 16:28:32.176764014 +0000 UTC m=+916.600548090 I0513 16:28:32.190944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:28:32.191013 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-13 16:28:32.191003336 +0000 UTC m=+916.614787392 I0513 16:28:32.369820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:28:32.396957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zlxth" condition "Approved" to 2026-05-13 16:28:32.396945413 +0000 UTC m=+916.820729459 I0513 16:28:32.416581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-zlxth" condition "Ready" to 2026-05-13 16:28:32.416570096 +0000 UTC m=+916.840354152 I0513 16:28:32.453116 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:28:32.453101745 +0000 UTC m=+916.876885801 I0513 16:28:32.485148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:28:32.485519 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:28:32.485512284 +0000 UTC m=+916.909296340 I0513 16:28:32.505379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:28:32.508487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:28:32.508835 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:28:32.508825524 +0000 UTC m=+916.932609580 I0513 16:30:07.348507 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-13 16:30:07.348466338 +0000 UTC m=+1011.772250424 I0513 16:30:07.348500 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:30:07.348775 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-13 16:30:07.348590252 +0000 UTC m=+1011.772374348 I0513 16:30:07.368842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:30:07.368901 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:30:07.368916 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-13 16:30:07.368910116 +0000 UTC m=+1011.792694172 I0513 16:30:07.645819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-lbs9j" condition "Approved" to 2026-05-13 16:30:07.645800239 +0000 UTC m=+1012.069584325 I0513 16:30:07.665866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-lbs9j" condition "Ready" to 2026-05-13 16:30:07.665852274 +0000 UTC m=+1012.089636330 I0513 16:30:07.692642 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:30:07.692627784 +0000 UTC m=+1012.116411830 I0513 16:30:07.711525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:30:07.711897 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:30:07.711890525 +0000 UTC m=+1012.135674571 I0513 16:30:07.739183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:30:07.739751 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:30:07.739739388 +0000 UTC m=+1012.163523474 I0513 16:33:21.750490 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:33:21.750571 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-13 16:33:21.750561328 +0000 UTC m=+1206.174345414 I0513 16:33:21.751357 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-13 16:33:21.751347932 +0000 UTC m=+1206.175132018 I0513 16:33:21.773653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:33:21.773728 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-13 16:33:21.77372119 +0000 UTC m=+1206.197505246 I0513 16:33:22.171675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:33:22.202048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-kkshw" condition "Approved" to 2026-05-13 16:33:22.202035047 +0000 UTC m=+1206.625819113 I0513 16:33:22.227236 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-kkshw" condition "Ready" to 2026-05-13 16:33:22.227223884 +0000 UTC m=+1206.651007940 I0513 16:33:22.257802 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:33:22.257789911 +0000 UTC m=+1206.681573967 I0513 16:33:22.279210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:33:22.279603 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:33:22.2795838 +0000 UTC m=+1206.703367856 I0513 16:33:22.299223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:33:22.299686 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:33:22.299673285 +0000 UTC m=+1206.723457371 I0513 16:33:22.301338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:41:18.988151 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-13 16:41:18.988106972 +0000 UTC m=+1683.411891038 I0513 16:41:18.988559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:41:18.988579 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-13 16:41:18.988575897 +0000 UTC m=+1683.412359953 I0513 16:41:19.003438 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:41:19.003516 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-13 16:41:19.003507666 +0000 UTC m=+1683.427291732 I0513 16:41:19.107673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:41:19.136300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-tqh9c" condition "Approved" to 2026-05-13 16:41:19.136290269 +0000 UTC m=+1683.560074325 I0513 16:41:19.151148 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-tqh9c" condition "Ready" to 2026-05-13 16:41:19.151138065 +0000 UTC m=+1683.574922111 I0513 16:41:19.177572 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:41:19.177560295 +0000 UTC m=+1683.601344351 I0513 16:41:19.210192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:41:19.210721 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:41:19.210699517 +0000 UTC m=+1683.634483593 I0513 16:41:19.218495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:41:19.230407 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:41:19.230721 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:41:19.230711786 +0000 UTC m=+1683.654495832 I0513 16:42:57.039566 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-13 16:42:57.039548212 +0000 UTC m=+1781.463332288 I0513 16:42:57.039626 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:42:57.039710 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-13 16:42:57.039703487 +0000 UTC m=+1781.463487573 I0513 16:42:57.058975 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:42:57.059097 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-13 16:42:57.059084376 +0000 UTC m=+1781.482868452 I0513 16:42:57.270693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:42:57.349107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-q2272" condition "Approved" to 2026-05-13 16:42:57.349091879 +0000 UTC m=+1781.772875935 I0513 16:42:57.477026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-q2272" condition "Ready" to 2026-05-13 16:42:57.477016338 +0000 UTC m=+1781.900800384 I0513 16:42:57.638479 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:42:57.638464692 +0000 UTC m=+1782.062248768 I0513 16:42:57.692536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:42:57.692895 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:42:57.692887292 +0000 UTC m=+1782.116671348 I0513 16:42:57.761227 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:44:06.494450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:44:06.494489 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-13 16:44:06.494466659 +0000 UTC m=+1850.918250735 I0513 16:44:06.494541 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-13 16:44:06.494528221 +0000 UTC m=+1850.918312327 I0513 16:44:06.510205 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:44:06.510298 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-13 16:44:06.510290706 +0000 UTC m=+1850.934074752 I0513 16:44:06.541125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:44:06.541217 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-13 16:44:06.541208708 +0000 UTC m=+1850.964992764 I0513 16:44:06.545665 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-v5bzw" condition "Approved" to 2026-05-13 16:44:06.545649867 +0000 UTC m=+1850.969433953 I0513 16:44:06.557518 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-13 16:44:06.55750488 +0000 UTC m=+1850.981288936 I0513 16:44:06.564282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-v5bzw" condition "Ready" to 2026-05-13 16:44:06.564272993 +0000 UTC m=+1850.988057039 I0513 16:44:06.564858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:44:06.594226 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:44:06.594215253 +0000 UTC m=+1851.017999309 I0513 16:44:06.617071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:44:06.617624 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:44:06.617612189 +0000 UTC m=+1851.041396245 I0513 16:44:06.638196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:44:06.638576 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:44:06.638566117 +0000 UTC m=+1851.062350173 I0513 16:44:07.106576 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-13 16:44:07.106559083 +0000 UTC m=+1851.530343149 I0513 16:44:07.106624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:44:07.106655 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-13 16:44:07.106648386 +0000 UTC m=+1851.530432432 I0513 16:44:07.125010 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:44:07.125099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:44:07.125125 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-13 16:44:07.125116936 +0000 UTC m=+1851.548900992 I0513 16:44:07.189313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:44:07.196423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-qvmlf" condition "Approved" to 2026-05-13 16:44:07.196411407 +0000 UTC m=+1851.620195463 I0513 16:44:07.209197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-qvmlf" condition "Ready" to 2026-05-13 16:44:07.209184318 +0000 UTC m=+1851.632968374 I0513 16:44:07.232235 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:44:07.232218842 +0000 UTC m=+1851.656002908 I0513 16:44:07.262228 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:44:07.345305 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:44:07.896229 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-13 16:44:07.896216017 +0000 UTC m=+1852.320000063 I0513 16:44:08.535142 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-13 16:44:08.535126014 +0000 UTC m=+1852.958910070 I0513 16:44:53.148244 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:44:53.148240 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-13 16:44:53.148213431 +0000 UTC m=+1897.571997497 I0513 16:44:53.148286 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-13 16:44:53.148278343 +0000 UTC m=+1897.572062389 I0513 16:44:53.186924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:44:53.187028 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:44:53.187058 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-13 16:44:53.18705028 +0000 UTC m=+1897.610834326 I0513 16:44:54.463329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-sl8zd" condition "Approved" to 2026-05-13 16:44:54.463308927 +0000 UTC m=+1898.887092983 I0513 16:44:54.482707 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-sl8zd" condition "Ready" to 2026-05-13 16:44:54.482691516 +0000 UTC m=+1898.906475592 I0513 16:44:54.531569 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:44:54.53155677 +0000 UTC m=+1898.955340816 I0513 16:44:54.560531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:47:37.041550 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-13 16:47:37.041526184 +0000 UTC m=+2061.465310240 I0513 16:47:37.041630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:47:37.041706 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-13 16:47:37.041697089 +0000 UTC m=+2061.465481145 I0513 16:47:37.060247 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:47:37.060363 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:47:37.060390 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-13 16:47:37.060382126 +0000 UTC m=+2061.484166212 I0513 16:47:37.186833 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:47:37.192630 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-6qmt5" condition "Approved" to 2026-05-13 16:47:37.192622278 +0000 UTC m=+2061.616406334 I0513 16:47:37.208444 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-6qmt5" condition "Ready" to 2026-05-13 16:47:37.208435445 +0000 UTC m=+2061.632219491 I0513 16:47:37.233309 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:47:37.233296866 +0000 UTC m=+2061.657080932 I0513 16:47:37.254017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:47:37.254308 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:47:37.254301745 +0000 UTC m=+2061.678085791 I0513 16:47:37.263311 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:47:37.277147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:47:38.452025 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-13 16:47:38.452009125 +0000 UTC m=+2062.875793181 I0513 16:47:38.452224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:47:38.452299 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-13 16:47:38.452287294 +0000 UTC m=+2062.876071380 I0513 16:47:38.470473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:47:38.470604 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:47:38.470628 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-13 16:47:38.47062177 +0000 UTC m=+2062.894405836 I0513 16:47:38.615858 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-9hzmt" condition "Approved" to 2026-05-13 16:47:38.61584928 +0000 UTC m=+2063.039633326 I0513 16:47:38.631684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-9hzmt" condition "Ready" to 2026-05-13 16:47:38.631675547 +0000 UTC m=+2063.055459583 I0513 16:47:38.658352 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:47:38.658337275 +0000 UTC m=+2063.082121331 I0513 16:47:38.682442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:47:38.682756 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:47:38.682748101 +0000 UTC m=+2063.106532137 I0513 16:47:38.695164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:47:38.708891 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:50:52.515662 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0513 16:50:52.515716 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-13 16:50:52.515704413 +0000 UTC m=+2256.939488489 I0513 16:50:52.515865 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-13 16:50:52.515847307 +0000 UTC m=+2256.939631393 I0513 16:50:52.535388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:50:52.535697 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-13 16:50:52.53568522 +0000 UTC m=+2256.959469286 I0513 16:50:52.678992 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0513 16:50:52.724395 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-pprbv" condition "Approved" to 2026-05-13 16:50:52.724383094 +0000 UTC m=+2257.148167140 I0513 16:50:52.741346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-pprbv" condition "Ready" to 2026-05-13 16:50:52.741332856 +0000 UTC m=+2257.165116902 I0513 16:50:52.773184 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-13 16:50:52.773172586 +0000 UTC m=+2257.196956642 I0513 16:50:52.797640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" E0513 16:51:30.702029 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: etcdserver: request timed out E0513 16:51:57.922468 1 leaderelection.go:332] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": context deadline exceeded I0513 16:51:57.922588 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition I0513 16:52:01.625627 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges" I0513 16:52:01.625729 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager" I0513 16:52:01.625792 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics" I0513 16:52:01.625818 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim" I0513 16:52:01.625908 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca" I0513 16:52:01.626101 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager" I0513 16:52:01.626138 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi" I0513 16:52:01.626161 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers" I0513 16:52:01.626190 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned" I0513 16:52:01.626385 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme" I0513 16:52:01.626602 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager" I0513 16:52:01.626685 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness" I0513 16:52:01.626682 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger" I0513 16:52:01.626725 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault" I0513 16:52:01.626740 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver" I0513 16:52:01.626746 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers" I0513 16:52:01.626770 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders" I0513 16:52:01.626642 1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing" E0513 16:52:01.627186 1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"