I0728 20:09:03.451420 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0728 20:09:03.451614 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0728 20:09:03.456444 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0728 20:09:03.456477 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0728 20:09:03.456493 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0728 20:09:03.457315 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0728 20:09:03.457416 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0728 20:09:03.457577 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0728 20:09:03.461247 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0728 20:09:03.474816 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0728 20:09:03.480112 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0728 20:09:03.482736 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0728 20:09:03.485326 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0728 20:09:03.485359 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0728 20:09:03.485476 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0728 20:09:03.487989 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0728 20:09:03.491816 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0728 20:09:03.494486 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0728 20:09:03.496979 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0728 20:09:03.499179 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0728 20:09:03.501504 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0728 20:09:03.503850 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0728 20:09:03.503888 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0728 20:09:03.509461 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0728 20:09:03.512441 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0728 20:09:03.514835 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0728 20:09:03.517179 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0728 20:09:03.520508 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0728 20:09:03.524130 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0728 20:09:03.526621 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0728 20:09:03.530326 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0728 20:09:03.530358 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0728 20:09:03.530370 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0728 20:09:03.531294 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0728 20:09:03.533645 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:09:03.534070 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:09:03.534259 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:09:03.535483 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:09:03.536476 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:09:03.537512 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:09:03.537769 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:09:03.537958 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:09:03.538215 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:09:03.538411 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:09:03.538907 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0728 20:09:17.755870 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-28 20:09:17.755835812 +0000 UTC m=+14.330947170 I0728 20:09:18.448339 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 20:09:18.448328621 +0000 UTC m=+15.023439939 I0728 20:09:18.448613 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:09:18.448681 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-28 20:09:18.448668859 +0000 UTC m=+15.023780217 I0728 20:09:18.458608 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:09:18.458655 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-28 20:09:18.45865191 +0000 UTC m=+15.033763218 E0728 20:09:18.460423 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 20:09:18.460490 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-28 20:09:18.460482195 +0000 UTC m=+15.035593523 E0728 20:09:18.460512 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 20:09:18.470198 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0728 20:09:18.470254 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 20:09:18.470270 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 20:09:18.470293 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0728 20:09:18.473804 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:09:18.505591 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-28 20:09:18.505577833 +0000 UTC m=+15.080689191 I0728 20:09:18.528125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-28 20:09:18.528114167 +0000 UTC m=+15.103225495 I0728 20:09:18.560625 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:09:18.56060769 +0000 UTC m=+15.135719008 I0728 20:09:18.575320 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:09:18.607252 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:09:23.470972 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:09:23.470943007 +0000 UTC m=+20.046054365 I0728 20:09:43.398884 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-28 20:09:43.398845129 +0000 UTC m=+39.973956447 I0728 20:09:43.399229 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:09:43.399263 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-28 20:09:43.39926033 +0000 UTC m=+39.974371648 I0728 20:09:43.411785 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-28 20:09:43.411779735 +0000 UTC m=+39.986891053 I0728 20:09:43.421312 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:09:43.421741 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:09:43.421848 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-28 20:09:43.421773448 +0000 UTC m=+39.996884806 I0728 20:09:43.940327 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:09:43.950836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-28 20:09:43.950823772 +0000 UTC m=+40.525935100 I0728 20:09:43.973786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-28 20:09:43.973774063 +0000 UTC m=+40.548885391 I0728 20:09:44.005296 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:09:44.005284628 +0000 UTC m=+40.580395946 I0728 20:09:44.022094 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:09:44.022749 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:09:44.022737768 +0000 UTC m=+40.597849116 I0728 20:09:44.031520 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:09:44.042220 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:11:58.902084 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:11:58.902173 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-28 20:11:58.902160459 +0000 UTC m=+175.477271827 I0728 20:11:58.902804 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-28 20:11:58.902793555 +0000 UTC m=+175.477904913 E0728 20:11:58.914938 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 20:11:58.915171 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:11:58.915175 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-07-28 20:11:58.915166723 +0000 UTC m=+175.490278041 I0728 20:11:58.915343 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 20:11:58.915312 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-28 20:11:58.915302496 +0000 UTC m=+175.490413824 E0728 20:11:58.924487 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" E0728 20:11:58.924727 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 20:11:58.924777 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0728 20:11:58.924799 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" I0728 20:11:58.927123 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:11:58.927144 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-28 20:11:58.92713929 +0000 UTC m=+175.502250608 I0728 20:11:58.927216 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-28 20:11:58.927203612 +0000 UTC m=+175.502314940 I0728 20:11:58.943260 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:11:58.943366 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-28 20:11:58.943354379 +0000 UTC m=+175.518465737 I0728 20:11:59.055289 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:11:59.085831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-07-28 20:11:59.085815662 +0000 UTC m=+175.660926990 I0728 20:11:59.093903 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:11:59.101067 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-07-28 20:11:59.101056867 +0000 UTC m=+175.676168195 I0728 20:11:59.116621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-07-28 20:11:59.116602688 +0000 UTC m=+175.691714046 I0728 20:11:59.122407 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:11:59.122398071 +0000 UTC m=+175.697509399 I0728 20:11:59.128228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-07-28 20:11:59.128211385 +0000 UTC m=+175.703322703 I0728 20:11:59.136818 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:11:59.137646 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:11:59.137638446 +0000 UTC m=+175.712749774 I0728 20:11:59.146854 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:11:59.147330 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:11:59.147322151 +0000 UTC m=+175.722433469 I0728 20:12:03.925246 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:12:03.925219786 +0000 UTC m=+180.500331144 I0728 20:12:03.938092 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:12:03.938084337 +0000 UTC m=+180.513195665 I0728 20:12:03.961039 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:12:03.961028044 +0000 UTC m=+180.536139372 I0728 20:12:03.974113 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:20:06.889477 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-07-28 20:20:06.889437322 +0000 UTC m=+663.464548680 I0728 20:20:06.889552 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:20:06.889636 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Issuing" to 2026-07-28 20:20:06.889622926 +0000 UTC m=+663.464734284 I0728 20:20:06.904095 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:20:06.904214 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready" to 2026-07-28 20:20:06.904200615 +0000 UTC m=+663.479311963 I0728 20:20:07.165168 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:20:07.209726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-1" condition "Approved" to 2026-07-28 20:20:07.209708597 +0000 UTC m=+663.784819945 I0728 20:20:07.227470 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-223.nip.io-tls-1" condition "Ready" to 2026-07-28 20:20:07.227457466 +0000 UTC m=+663.802568804 I0728 20:20:07.249631 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:20:07.249608045 +0000 UTC m=+663.824719403 I0728 20:20:07.264156 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:20:07.264812 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-223.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:20:07.26480223 +0000 UTC m=+663.839913558 I0728 20:20:07.273267 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:20:07.283589 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-223.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-223.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:21:17.845722 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:21:17.845799 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-28 20:21:17.845789463 +0000 UTC m=+734.420900821 I0728 20:21:17.846359 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-28 20:21:17.846336747 +0000 UTC m=+734.421448105 E0728 20:21:17.854974 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 20:21:17.855025 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-28 20:21:17.855020156 +0000 UTC m=+734.430131484 E0728 20:21:17.855174 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0728 20:21:17.858584 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:21:17.858691 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-28 20:21:17.858679859 +0000 UTC m=+734.433791217 E0728 20:21:17.868161 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0728 20:21:17.868223 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 20:21:17.868245 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0728 20:21:17.868312 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0728 20:21:17.872533 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:21:17.891097 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-28 20:21:17.891084128 +0000 UTC m=+734.466195486 I0728 20:21:17.904582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-28 20:21:17.904571559 +0000 UTC m=+734.479682877 I0728 20:21:17.924357 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:21:17.924340408 +0000 UTC m=+734.499451766 I0728 20:21:17.939323 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:21:22.868731 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:21:22.868712869 +0000 UTC m=+739.443824227 I0728 20:22:02.730088 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:22:02.730141 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-28 20:22:02.73013306 +0000 UTC m=+779.305244388 I0728 20:22:02.730432 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-28 20:22:02.730426507 +0000 UTC m=+779.305537835 I0728 20:22:02.732580 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:22:02.732607 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 20:22:02.732601602 +0000 UTC m=+779.307712940 I0728 20:22:02.732884 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-28 20:22:02.732879469 +0000 UTC m=+779.307990797 I0728 20:22:02.740074 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-28 20:22:02.740056341 +0000 UTC m=+779.315167659 I0728 20:22:02.740409 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:22:02.740420 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-28 20:22:02.74041731 +0000 UTC m=+779.315528628 I0728 20:22:02.752751 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:02.752863 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:22:02.752904 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-28 20:22:02.752893945 +0000 UTC m=+779.328005273 I0728 20:22:02.753062 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:02.753065 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:02.753149 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-28 20:22:02.753141701 +0000 UTC m=+779.328253009 I0728 20:22:02.753160 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-28 20:22:02.753156171 +0000 UTC m=+779.328267489 I0728 20:22:02.990871 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-28 20:22:02.99085707 +0000 UTC m=+779.565968398 I0728 20:22:03.035115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-28 20:22:03.035106418 +0000 UTC m=+779.610217726 I0728 20:22:03.061290 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:03.061831 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:03.075047 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:22:03.075031377 +0000 UTC m=+779.650142705 I0728 20:22:03.094409 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:03.094945 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:22:03.09493776 +0000 UTC m=+779.670049088 I0728 20:22:03.095169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-28 20:22:03.095161515 +0000 UTC m=+779.670272843 I0728 20:22:03.095885 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-28 20:22:03.095867604 +0000 UTC m=+779.670978922 I0728 20:22:03.109728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-28 20:22:03.109714294 +0000 UTC m=+779.684825622 I0728 20:22:03.109815 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:03.110230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-28 20:22:03.110220416 +0000 UTC m=+779.685331744 I0728 20:22:03.730117 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:22:03.730101663 +0000 UTC m=+780.305212981 I0728 20:22:03.777770 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:22:03.777758237 +0000 UTC m=+780.352869565 I0728 20:22:03.926328 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:03.926808 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:22:03.926802354 +0000 UTC m=+780.501913662 I0728 20:22:04.025062 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:04.025955 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:22:04.02594575 +0000 UTC m=+780.601057098 I0728 20:22:04.526609 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:04.573494 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:04.626161 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:04.675730 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:10.710203 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-84wmd-tls" condition "Ready" to 2026-07-28 20:22:10.710187483 +0000 UTC m=+787.285298831 I0728 20:22:10.710289 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-84wmd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:22:10.710365 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-84wmd-tls" condition "Issuing" to 2026-07-28 20:22:10.710357867 +0000 UTC m=+787.285469195 I0728 20:22:10.721286 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-84wmd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-84wmd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:10.721369 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-84wmd-tls" condition "Ready" to 2026-07-28 20:22:10.721363285 +0000 UTC m=+787.296474633 I0728 20:22:10.808524 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-84wmd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-84wmd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:10.838005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-84wmd-tls-1" condition "Approved" to 2026-07-28 20:22:10.837988443 +0000 UTC m=+787.413099771 I0728 20:22:10.851758 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-84wmd-tls-1" condition "Ready" to 2026-07-28 20:22:10.85174344 +0000 UTC m=+787.426854768 I0728 20:22:10.871338 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-84wmd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:22:10.871326265 +0000 UTC m=+787.446437593 I0728 20:22:10.883786 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-84wmd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-84wmd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:10.884408 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-84wmd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:22:10.884398226 +0000 UTC m=+787.459509534 I0728 20:22:10.899170 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-84wmd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-84wmd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:10.899611 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-84wmd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-84wmd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:10.899836 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-84wmd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:22:10.899821445 +0000 UTC m=+787.474932803 I0728 20:22:36.310400 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:22:36.310447 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-28 20:22:36.310438266 +0000 UTC m=+812.885549594 I0728 20:22:36.310504 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-28 20:22:36.310483678 +0000 UTC m=+812.885595026 I0728 20:22:36.324299 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:36.324364 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-28 20:22:36.324357258 +0000 UTC m=+812.899468576 I0728 20:22:36.396893 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:22:36.419600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-28 20:22:36.419583625 +0000 UTC m=+812.994694953 I0728 20:22:36.433984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-28 20:22:36.433965878 +0000 UTC m=+813.009077206 I0728 20:22:36.457288 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:22:36.457268438 +0000 UTC m=+813.032379786 I0728 20:22:36.471104 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:26:08.186705 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-28 20:26:08.186663426 +0000 UTC m=+1024.761774784 I0728 20:26:08.187766 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:26:08.187837 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-28 20:26:08.187828665 +0000 UTC m=+1024.762939993 I0728 20:26:08.197177 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:26:08.197277 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:26:08.197312 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-28 20:26:08.197303725 +0000 UTC m=+1024.772415073 I0728 20:26:08.370886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-28 20:26:08.37087276 +0000 UTC m=+1024.945984118 I0728 20:26:08.384899 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-28 20:26:08.384886144 +0000 UTC m=+1024.959997472 I0728 20:26:08.408308 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:26:08.408297685 +0000 UTC m=+1024.983409013 I0728 20:26:08.423583 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:26:08.424195 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:26:08.424187816 +0000 UTC m=+1024.999299144 I0728 20:26:08.433516 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:26:08.436749 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:28:55.505441 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:28:55.505488 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-28 20:28:55.505475711 +0000 UTC m=+1192.080587059 I0728 20:28:55.505655 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-28 20:28:55.505574953 +0000 UTC m=+1192.080686291 I0728 20:28:55.517092 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:28:55.517217 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-28 20:28:55.517204298 +0000 UTC m=+1192.092315626 I0728 20:28:55.738658 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:28:55.777880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Approved" to 2026-07-28 20:28:55.777863141 +0000 UTC m=+1192.352974469 I0728 20:28:55.793863 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Ready" to 2026-07-28 20:28:55.793843904 +0000 UTC m=+1192.368955252 I0728 20:28:55.824426 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:28:55.824407987 +0000 UTC m=+1192.399519345 I0728 20:28:55.839224 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:28:55.840000 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:28:55.839990832 +0000 UTC m=+1192.415102180 I0728 20:28:55.857506 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:30:03.064202 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-28 20:30:03.064156436 +0000 UTC m=+1259.639267794 I0728 20:30:03.064251 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:30:03.065187 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-28 20:30:03.06514575 +0000 UTC m=+1259.640257228 I0728 20:30:03.077093 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:30:03.077218 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:30:03.077253 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-28 20:30:03.077243396 +0000 UTC m=+1259.652354734 I0728 20:30:03.468018 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:30:03.478283 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Approved" to 2026-07-28 20:30:03.478262789 +0000 UTC m=+1260.053374127 I0728 20:30:03.495905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Ready" to 2026-07-28 20:30:03.495892996 +0000 UTC m=+1260.071004324 I0728 20:30:03.526181 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:30:03.526170291 +0000 UTC m=+1260.101281609 I0728 20:30:03.543350 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:30:03.543989 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:30:03.543984262 +0000 UTC m=+1260.119095570 I0728 20:30:03.548371 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:30:03.560517 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:30:03.564458 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:33:55.882624 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-28 20:33:55.882604821 +0000 UTC m=+1492.457716179 I0728 20:33:55.882859 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:33:55.882959 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-28 20:33:55.882946929 +0000 UTC m=+1492.458058277 I0728 20:33:55.894708 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:33:55.894817 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-28 20:33:55.894805769 +0000 UTC m=+1492.469917127 I0728 20:33:56.070685 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:33:56.114555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Approved" to 2026-07-28 20:33:56.114538518 +0000 UTC m=+1492.689649866 I0728 20:33:56.133354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Ready" to 2026-07-28 20:33:56.133331734 +0000 UTC m=+1492.708443092 I0728 20:33:56.165845 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:33:56.165829837 +0000 UTC m=+1492.740941165 I0728 20:33:56.183785 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:41:26.855346 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-28 20:41:26.855300498 +0000 UTC m=+1943.430411826 I0728 20:41:26.855841 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:41:26.855922 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-28 20:41:26.855909124 +0000 UTC m=+1943.431020452 I0728 20:41:26.866962 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:41:26.867056 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:41:26.867077 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-28 20:41:26.867068897 +0000 UTC m=+1943.442180225 I0728 20:41:27.196475 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Approved" to 2026-07-28 20:41:27.196462021 +0000 UTC m=+1943.771573349 I0728 20:41:27.217391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Ready" to 2026-07-28 20:41:27.217376521 +0000 UTC m=+1943.792487869 I0728 20:41:27.245097 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:41:27.245086272 +0000 UTC m=+1943.820197580 I0728 20:41:27.258229 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:41:27.258830 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:41:27.258822759 +0000 UTC m=+1943.833934087 I0728 20:41:27.272408 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:41:27.275915 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:43:16.258474 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:43:16.258560 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-28 20:43:16.258548459 +0000 UTC m=+2052.833659787 I0728 20:43:16.258493 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-28 20:43:16.258474197 +0000 UTC m=+2052.833585535 I0728 20:43:16.272592 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:43:16.272815 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:43:16.272893 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-28 20:43:16.272880942 +0000 UTC m=+2052.847992300 I0728 20:43:16.444222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-07-28 20:43:16.444210042 +0000 UTC m=+2053.019321350 I0728 20:43:16.462411 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-07-28 20:43:16.462396622 +0000 UTC m=+2053.037507970 I0728 20:43:16.485986 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:43:16.48597267 +0000 UTC m=+2053.061083998 I0728 20:43:16.501192 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:44:13.644251 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:44:13.644334 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-28 20:44:13.644322672 +0000 UTC m=+2110.219434030 I0728 20:44:13.644650 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-28 20:44:13.64461961 +0000 UTC m=+2110.219730938 I0728 20:44:13.659266 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:44:13.659329 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:44:13.659345 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-28 20:44:13.659339713 +0000 UTC m=+2110.234451041 I0728 20:44:13.692209 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:44:13.697378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-07-28 20:44:13.697366246 +0000 UTC m=+2110.272477574 I0728 20:44:13.713373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-07-28 20:44:13.713353541 +0000 UTC m=+2110.288464889 I0728 20:44:13.732594 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:44:13.732581238 +0000 UTC m=+2110.307692556 I0728 20:44:13.749257 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:44:13.749512 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:44:13.749505287 +0000 UTC m=+2110.324616605 I0728 20:44:13.757511 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:44:13.762811 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:44:13.762991 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:44:13.762983709 +0000 UTC m=+2110.338095017 I0728 20:44:14.269415 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:44:14.269464 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-28 20:44:14.2694534 +0000 UTC m=+2110.844564758 I0728 20:44:14.271818 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-28 20:44:14.271650885 +0000 UTC m=+2110.846762213 I0728 20:44:14.283813 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:44:14.283997 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-28 20:44:14.283988587 +0000 UTC m=+2110.859099915 I0728 20:44:14.299506 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:44:14.330829 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-07-28 20:44:14.330815734 +0000 UTC m=+2110.905927062 I0728 20:44:14.343323 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-07-28 20:44:14.34331157 +0000 UTC m=+2110.918422888 I0728 20:44:14.366174 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:44:14.366150799 +0000 UTC m=+2110.941262157 I0728 20:44:14.379425 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:44:14.978171 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-28 20:44:14.978161054 +0000 UTC m=+2111.553272382 I0728 20:44:15.606599 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-28 20:44:15.606584954 +0000 UTC m=+2112.181696312 I0728 20:45:07.486425 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-28 20:45:07.486411565 +0000 UTC m=+2164.061522883 I0728 20:45:07.486884 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:45:07.486901 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-28 20:45:07.486898408 +0000 UTC m=+2164.062009726 I0728 20:45:07.507461 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:45:07.507538 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:45:07.507564 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-28 20:45:07.507557831 +0000 UTC m=+2164.082669139 I0728 20:45:09.027809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Approved" to 2026-07-28 20:45:09.027796715 +0000 UTC m=+2165.602908043 I0728 20:45:09.046215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Ready" to 2026-07-28 20:45:09.04620538 +0000 UTC m=+2165.621316698 I0728 20:45:09.074448 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:45:09.074436256 +0000 UTC m=+2165.649547584 I0728 20:45:09.092024 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:45:09.127023 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:50:50.044733 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:50:50.044805 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-28 20:50:50.044793773 +0000 UTC m=+2506.619905101 I0728 20:50:50.045207 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-28 20:50:50.04466983 +0000 UTC m=+2506.619781148 I0728 20:50:50.060251 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:50:50.060365 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-28 20:50:50.060350868 +0000 UTC m=+2506.635462226 I0728 20:50:50.373517 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:50:50.406459 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Approved" to 2026-07-28 20:50:50.406440388 +0000 UTC m=+2506.981551746 I0728 20:50:50.421779 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Ready" to 2026-07-28 20:50:50.421767287 +0000 UTC m=+2506.996878615 I0728 20:50:50.450855 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:50:50.450834703 +0000 UTC m=+2507.025946031 I0728 20:50:50.464810 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:50:50.465348 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:50:50.46533973 +0000 UTC m=+2507.040451058 I0728 20:50:50.479452 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:50:50.481018 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:50:51.507361 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-28 20:50:51.507341607 +0000 UTC m=+2508.082452935 I0728 20:50:51.507507 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:50:51.507586 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-28 20:50:51.507576434 +0000 UTC m=+2508.082687762 I0728 20:50:51.522166 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:50:51.522274 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:50:51.522305 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-28 20:50:51.522291666 +0000 UTC m=+2508.097403024 I0728 20:50:51.811328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Approved" to 2026-07-28 20:50:51.8113031 +0000 UTC m=+2508.386414458 I0728 20:50:51.826940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Ready" to 2026-07-28 20:50:51.826924686 +0000 UTC m=+2508.402036014 I0728 20:50:51.848950 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:50:51.848929563 +0000 UTC m=+2508.424040891 I0728 20:50:51.862954 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:50:51.863490 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:50:51.863480923 +0000 UTC m=+2508.438592231 I0728 20:50:51.879165 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:58:18.827489 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:58:18.827542 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-28 20:58:18.827537988 +0000 UTC m=+2955.402649306 I0728 20:58:18.828219 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-28 20:58:18.827459136 +0000 UTC m=+2955.402570464 I0728 20:58:18.839124 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:58:18.839241 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-28 20:58:18.839235074 +0000 UTC m=+2955.414346402 I0728 20:58:18.968836 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:58:19.002363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Approved" to 2026-07-28 20:58:19.002346137 +0000 UTC m=+2955.577457515 I0728 20:58:19.016765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Ready" to 2026-07-28 20:58:19.016755382 +0000 UTC m=+2955.591866710 I0728 20:58:19.042703 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:58:19.042691118 +0000 UTC m=+2955.617802446 I0728 20:58:19.056713 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:59:15.604186 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hxjvl-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:59:15.604372 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hxjvl-vnc" condition "Issuing" to 2026-07-28 20:59:15.604362715 +0000 UTC m=+3012.179474033 I0728 20:59:15.604877 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hxjvl-vnc" condition "Ready" to 2026-07-28 20:59:15.604871189 +0000 UTC m=+3012.179982507 I0728 20:59:15.611931 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hxjvl-api" condition "Ready" to 2026-07-28 20:59:15.611924477 +0000 UTC m=+3012.187035795 I0728 20:59:15.612153 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hxjvl-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 20:59:15.612205 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hxjvl-api" condition "Issuing" to 2026-07-28 20:59:15.612201124 +0000 UTC m=+3012.187312432 I0728 20:59:15.616180 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hxjvl-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hxjvl-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:59:15.616285 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hxjvl-vnc" condition "Ready" to 2026-07-28 20:59:15.616275218 +0000 UTC m=+3012.191386546 I0728 20:59:15.623778 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hxjvl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hxjvl-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:59:15.623934 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-hxjvl-api" condition "Ready" to 2026-07-28 20:59:15.623925261 +0000 UTC m=+3012.199036589 I0728 20:59:15.702623 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hxjvl-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hxjvl-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:59:15.704944 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hxjvl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hxjvl-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:59:15.733564 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-hxjvl-api-1" condition "Approved" to 2026-07-28 20:59:15.733548717 +0000 UTC m=+3012.308660045 I0728 20:59:15.743954 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-hxjvl-vnc-1" condition "Approved" to 2026-07-28 20:59:15.74393941 +0000 UTC m=+3012.319050738 I0728 20:59:15.762385 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-hxjvl-api-1" condition "Ready" to 2026-07-28 20:59:15.762372387 +0000 UTC m=+3012.337483715 I0728 20:59:15.763811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-hxjvl-vnc-1" condition "Ready" to 2026-07-28 20:59:15.763800663 +0000 UTC m=+3012.338911981 I0728 20:59:15.786072 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hxjvl-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:59:15.786059936 +0000 UTC m=+3012.361171244 I0728 20:59:15.789686 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hxjvl-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:59:15.789681679 +0000 UTC m=+3012.364792997 I0728 20:59:15.797625 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hxjvl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hxjvl-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:59:15.798096 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hxjvl-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:59:15.798088332 +0000 UTC m=+3012.373199660 I0728 20:59:15.808226 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hxjvl-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hxjvl-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:59:15.809928 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hxjvl-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:59:15.809920721 +0000 UTC m=+3012.385032049 I0728 20:59:15.815768 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hxjvl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hxjvl-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:59:15.816562 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hxjvl-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hxjvl-api\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:59:15.827053 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-hxjvl-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-hxjvl-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0728 20:59:15.827510 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-hxjvl-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 20:59:15.827500486 +0000 UTC m=+3012.402611804 I0728 21:03:24.150125 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:03:24.150141 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-28 21:03:24.150121955 +0000 UTC m=+3260.725233313 I0728 21:03:24.150187 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-28 21:03:24.150178987 +0000 UTC m=+3260.725290315 I0728 21:03:24.163896 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:03:24.164031 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-28 21:03:24.164017697 +0000 UTC m=+3260.739129055 I0728 21:03:24.411908 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:03:24.443771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Approved" to 2026-07-28 21:03:24.44375166 +0000 UTC m=+3261.018862988 I0728 21:03:24.471760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Ready" to 2026-07-28 21:03:24.471744569 +0000 UTC m=+3261.046855897 I0728 21:03:24.498348 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:03:24.498332272 +0000 UTC m=+3261.073443590 I0728 21:03:24.510554 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:03:24.556633 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:03:25.851324 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:03:25.851332 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-28 21:03:25.851312099 +0000 UTC m=+3262.426423457 I0728 21:03:25.851376 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-28 21:03:25.851368931 +0000 UTC m=+3262.426480259 I0728 21:03:25.861987 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:03:25.862403 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:03:25.862477 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-28 21:03:25.862466952 +0000 UTC m=+3262.437578280 I0728 21:03:26.003418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Approved" to 2026-07-28 21:03:26.003400661 +0000 UTC m=+3262.578511989 I0728 21:03:26.021048 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Ready" to 2026-07-28 21:03:26.021034927 +0000 UTC m=+3262.596146265 I0728 21:03:26.042335 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:03:26.042321866 +0000 UTC m=+3262.617433224 I0728 21:03:26.052476 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:03:26.052919 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:03:26.052912464 +0000 UTC m=+3262.628023792 I0728 21:03:26.062614 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:03:26.075547 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:17.134255 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-28 21:06:17.134241772 +0000 UTC m=+3433.709353100 I0728 21:06:17.134920 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:06:17.134957 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-28 21:06:17.13495294 +0000 UTC m=+3433.710064268 I0728 21:06:17.154514 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:17.154666 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:06:17.154711 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-28 21:06:17.15469618 +0000 UTC m=+3433.729807528 E0728 21:06:17.154722 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 21:06:17.155330 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-07-28 21:06:17.155316505 +0000 UTC m=+3433.730427853 I0728 21:06:17.155401 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0728 21:06:17.171262 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" E0728 21:06:17.171432 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 21:06:17.171490 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0728 21:06:17.171554 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" I0728 21:06:17.190265 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:17.204612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Approved" to 2026-07-28 21:06:17.204593504 +0000 UTC m=+3433.779704852 I0728 21:06:17.222227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Ready" to 2026-07-28 21:06:17.222214599 +0000 UTC m=+3433.797325927 I0728 21:06:17.246084 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:06:17.246051024 +0000 UTC m=+3433.821162352 I0728 21:06:17.263615 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:17.264143 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:06:17.26411601 +0000 UTC m=+3433.839227358 I0728 21:06:17.277636 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:17.784506 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:06:17.784548 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-28 21:06:17.784536308 +0000 UTC m=+3434.359647626 I0728 21:06:17.785045 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-28 21:06:17.78502779 +0000 UTC m=+3434.360139118 E0728 21:06:17.792158 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 21:06:17.792198 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-07-28 21:06:17.792193581 +0000 UTC m=+3434.367304899 I0728 21:06:17.792242 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0728 21:06:17.802412 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" E0728 21:06:17.802476 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0728 21:06:17.802500 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0728 21:06:17.802528 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" I0728 21:06:17.802943 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:17.803106 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-28 21:06:17.803095437 +0000 UTC m=+3434.378206765 I0728 21:06:17.818147 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:17.838157 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Approved" to 2026-07-28 21:06:17.838136365 +0000 UTC m=+3434.413247723 I0728 21:06:17.849631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Ready" to 2026-07-28 21:06:17.849615725 +0000 UTC m=+3434.424727043 I0728 21:06:17.875302 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:06:17.875284915 +0000 UTC m=+3434.450396243 I0728 21:06:17.888203 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:17.888849 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:06:17.888834309 +0000 UTC m=+3434.463945667 I0728 21:06:17.908062 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:18.492950 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:06:18.493006 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-28 21:06:18.492994586 +0000 UTC m=+3435.068105934 I0728 21:06:18.493093 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-28 21:06:18.492961945 +0000 UTC m=+3435.068073273 I0728 21:06:18.505446 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:18.505635 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:06:18.505669 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-28 21:06:18.505659976 +0000 UTC m=+3435.080771304 I0728 21:06:18.547035 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:18.555544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Approved" to 2026-07-28 21:06:18.555530849 +0000 UTC m=+3435.130642177 I0728 21:06:18.566110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Ready" to 2026-07-28 21:06:18.566088577 +0000 UTC m=+3435.141199905 I0728 21:06:22.172019 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:06:22.172002669 +0000 UTC m=+3438.747114027 I0728 21:06:22.201469 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:06:22.201454724 +0000 UTC m=+3438.776566052 I0728 21:06:22.225536 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:06:22.225518974 +0000 UTC m=+3438.800630302 I0728 21:06:22.246483 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:22.247036 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:06:22.247024199 +0000 UTC m=+3438.822135517 I0728 21:06:22.260132 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:06:22.260734 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:06:22.260723646 +0000 UTC m=+3438.835834974 I0728 21:06:22.802940 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:06:22.802930404 +0000 UTC m=+3439.378041732 I0728 21:11:17.694922 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-28 21:11:17.694910522 +0000 UTC m=+3734.270021850 I0728 21:11:17.696226 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:11:17.696298 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-28 21:11:17.696288756 +0000 UTC m=+3734.271400104 I0728 21:11:17.712387 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:11:17.712469 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:11:17.712492 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-28 21:11:17.712486466 +0000 UTC m=+3734.287597794 I0728 21:11:18.048124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Approved" to 2026-07-28 21:11:18.048113627 +0000 UTC m=+3734.623224945 I0728 21:11:18.070005 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Ready" to 2026-07-28 21:11:18.06999452 +0000 UTC m=+3734.645105848 I0728 21:11:18.094608 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:11:18.094596311 +0000 UTC m=+3734.669707639 I0728 21:11:18.105629 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:11:18.106186 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:11:18.106180614 +0000 UTC m=+3734.681291932 I0728 21:11:18.120413 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:04.979455 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-28 21:12:04.979438261 +0000 UTC m=+3781.554549609 I0728 21:12:05.001680 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-28 21:12:05.001660322 +0000 UTC m=+3781.576771670 I0728 21:12:05.001831 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:12:05.001931 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-28 21:12:05.001918529 +0000 UTC m=+3781.577029907 I0728 21:12:05.011496 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:05.011620 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:12:05.011660 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-28 21:12:05.011642084 +0000 UTC m=+3781.586753432 E0728 21:12:05.043612 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller" I0728 21:12:05.106996 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-28 21:12:05.106972493 +0000 UTC m=+3781.682083851 I0728 21:12:05.125123 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:12:05.125152 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-28 21:12:05.125145483 +0000 UTC m=+3781.700256811 I0728 21:12:05.125420 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-28 21:12:05.12541447 +0000 UTC m=+3781.700525798 I0728 21:12:05.141271 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:05.141369 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-28 21:12:05.141358863 +0000 UTC m=+3781.716470191 E0728 21:12:05.282720 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" I0728 21:12:05.401354 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:05.436346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-07-28 21:12:05.436334396 +0000 UTC m=+3782.011445724 I0728 21:12:05.459600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-07-28 21:12:05.459581523 +0000 UTC m=+3782.034692871 I0728 21:12:05.488898 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:12:05.488883034 +0000 UTC m=+3782.063994362 I0728 21:12:05.513531 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:05.514167 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:12:05.514154243 +0000 UTC m=+3782.089265571 I0728 21:12:05.543677 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:05.544286 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:12:05.544274613 +0000 UTC m=+3782.119385951 I0728 21:12:06.021206 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-28 21:12:06.021166074 +0000 UTC m=+3782.596277432 I0728 21:12:06.039305 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:12:06.039349 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-28 21:12:06.039341343 +0000 UTC m=+3782.614452671 I0728 21:12:06.039438 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-28 21:12:06.039422835 +0000 UTC m=+3782.614534163 I0728 21:12:06.053746 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:06.053808 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:12:06.053835 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-28 21:12:06.053829149 +0000 UTC m=+3782.628940477 I0728 21:12:06.403181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-07-28 21:12:06.403171456 +0000 UTC m=+3782.978282784 I0728 21:12:06.426915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-07-28 21:12:06.426907697 +0000 UTC m=+3783.002019005 I0728 21:12:06.504706 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:12:06.504694301 +0000 UTC m=+3783.079805609 I0728 21:12:06.544392 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:06.785690 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-28 21:12:06.785671132 +0000 UTC m=+3783.360782450 I0728 21:12:06.806270 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-28 21:12:06.806253072 +0000 UTC m=+3783.381364410 I0728 21:12:06.807022 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:12:06.807059 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-28 21:12:06.807053172 +0000 UTC m=+3783.382164500 I0728 21:12:06.817561 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:06.817647 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:12:06.817675 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-28 21:12:06.8176668 +0000 UTC m=+3783.392778148 I0728 21:12:06.987281 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-07-28 21:12:06.987264756 +0000 UTC m=+3783.562376084 I0728 21:12:07.003907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-07-28 21:12:07.003895125 +0000 UTC m=+3783.579006463 I0728 21:12:07.038252 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:12:07.038237694 +0000 UTC m=+3783.613349002 I0728 21:12:07.057714 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:07.058155 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:12:07.058144237 +0000 UTC m=+3783.633255555 I0728 21:12:07.071163 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:07.372293 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-28 21:12:07.372268664 +0000 UTC m=+3783.947379992 I0728 21:12:07.388557 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-28 21:12:07.388544395 +0000 UTC m=+3783.963655723 I0728 21:12:07.388743 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:12:07.388783 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-28 21:12:07.388773311 +0000 UTC m=+3783.963884629 I0728 21:12:07.400298 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:07.400490 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-28 21:12:07.400436806 +0000 UTC m=+3783.975548184 I0728 21:12:07.717901 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:07.762877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-07-28 21:12:07.762858723 +0000 UTC m=+3784.337970041 I0728 21:12:07.783866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-07-28 21:12:07.783855334 +0000 UTC m=+3784.358966652 I0728 21:12:07.993032 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:12:07.99302404 +0000 UTC m=+3784.568135358 I0728 21:12:08.135262 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:12:08.136045 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:12:08.136023103 +0000 UTC m=+3784.711134431 I0728 21:12:08.336073 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:16:50.909293 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:16:50.909361 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-28 21:16:50.909352127 +0000 UTC m=+4067.484463475 I0728 21:16:50.909636 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-28 21:16:50.909619894 +0000 UTC m=+4067.484731242 I0728 21:16:50.922882 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:16:50.923129 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-28 21:16:50.923118465 +0000 UTC m=+4067.498229803 I0728 21:16:51.158965 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:16:51.197317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-1" condition "Approved" to 2026-07-28 21:16:51.197306268 +0000 UTC m=+4067.772417596 I0728 21:16:51.217739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-1" condition "Ready" to 2026-07-28 21:16:51.217728163 +0000 UTC m=+4067.792839491 I0728 21:16:51.240889 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:16:51.24087702 +0000 UTC m=+4067.815988348 I0728 21:16:51.255155 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:16:51.255684 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:16:51.255680963 +0000 UTC m=+4067.830792281 I0728 21:16:51.261773 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:16:51.287788 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:16:53.394891 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-28 21:16:53.394872957 +0000 UTC m=+4069.969984305 I0728 21:16:53.395086 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:16:53.395174 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-28 21:16:53.395162185 +0000 UTC m=+4069.970273533 I0728 21:16:53.406245 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:16:53.406611 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:16:53.406654 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-28 21:16:53.406642485 +0000 UTC m=+4069.981753833 I0728 21:16:53.595950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-1" condition "Approved" to 2026-07-28 21:16:53.59593796 +0000 UTC m=+4070.171049278 I0728 21:16:53.617488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-1" condition "Ready" to 2026-07-28 21:16:53.617478025 +0000 UTC m=+4070.192589333 I0728 21:16:53.658895 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:16:53.658882572 +0000 UTC m=+4070.233993890 I0728 21:16:53.674833 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:25:00.695928 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:25:00.695933 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-28 21:25:00.695918125 +0000 UTC m=+4557.271029473 I0728 21:25:00.695997 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-28 21:25:00.695989817 +0000 UTC m=+4557.271101145 I0728 21:25:00.711339 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:25:00.711491 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:25:00.711558 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-28 21:25:00.711549311 +0000 UTC m=+4557.286660639 I0728 21:25:01.190798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Approved" to 2026-07-28 21:25:01.190781833 +0000 UTC m=+4557.765893161 I0728 21:25:01.214331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Ready" to 2026-07-28 21:25:01.214316398 +0000 UTC m=+4557.789427716 I0728 21:25:01.241910 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:25:01.241897996 +0000 UTC m=+4557.817009324 I0728 21:25:01.257511 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:25:47.642982 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0728 21:25:47.643044 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-28 21:25:47.643036172 +0000 UTC m=+4604.218147500 I0728 21:25:47.643425 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-28 21:25:47.643419671 +0000 UTC m=+4604.218530999 I0728 21:25:47.666695 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:25:47.667004 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-28 21:25:47.666990527 +0000 UTC m=+4604.242101855 I0728 21:25:47.965029 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:25:47.998415 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-07-28 21:25:47.998405007 +0000 UTC m=+4604.573516335 I0728 21:25:48.014741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-07-28 21:25:48.01473076 +0000 UTC m=+4604.589842088 I0728 21:25:48.041487 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:25:48.041471688 +0000 UTC m=+4604.616583016 I0728 21:25:48.055911 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0728 21:25:48.056464 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-28 21:25:48.056456906 +0000 UTC m=+4604.631568234 I0728 21:25:48.072167 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"