I0907 10:49:33.832960 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0907 10:49:33.833121 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0907 10:49:33.833210 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0907 10:49:33.837629 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0907 10:49:33.838083 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0907 10:49:33.838166 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0907 10:49:33.838201 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0907 10:49:33.841887 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0907 10:49:33.857251 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0907 10:49:33.860706 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0907 10:49:33.867250 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0907 10:49:33.867320 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0907 10:49:33.867352 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0907 10:49:33.872489 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0907 10:49:33.876300 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0907 10:49:33.879771 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0907 10:49:33.884241 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0907 10:49:33.884301 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0907 10:49:33.884306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0907 10:49:33.887233 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0907 10:49:33.893804 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0907 10:49:33.896680 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0907 10:49:33.899422 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0907 10:49:33.902210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0907 10:49:33.904939 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0907 10:49:33.904977 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0907 10:49:33.907786 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0907 10:49:33.911115 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0907 10:49:33.914249 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0907 10:49:33.920494 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0907 10:49:33.923788 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0907 10:49:33.923888 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0907 10:49:33.927553 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0907 10:49:33.929586 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:49:33.931185 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:49:33.931483 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:49:33.950221 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:49:33.969418 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:49:33.986982 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:49:34.025480 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:49:34.034246 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:49:34.051428 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:49:34.062244 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:49:47.146130 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-07 10:49:47.146106941 +0000 UTC m=+13.350015452 I0907 10:49:47.888499 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:49:47.888611 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 10:49:47.888595057 +0000 UTC m=+14.092503568 I0907 10:49:47.888584 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 10:49:47.888556576 +0000 UTC m=+14.092465077 E0907 10:49:47.904842 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 10:49:47.904960 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-07 10:49:47.90494659 +0000 UTC m=+14.108855101 E0907 10:49:47.905012 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 10:49:47.908371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:49:47.908511 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 10:49:47.908497944 +0000 UTC m=+14.112406465 E0907 10:49:47.916567 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0907 10:49:47.917025 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 10:49:47.917113 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 10:49:47.917201 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0907 10:49:47.928655 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:49:47.951590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sl9tl" condition "Approved" to 2026-09-07 10:49:47.951569635 +0000 UTC m=+14.155478146 I0907 10:49:47.967572 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-sl9tl" condition "Ready" to 2026-09-07 10:49:47.967551589 +0000 UTC m=+14.171460100 I0907 10:49:47.995935 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:49:47.995916551 +0000 UTC m=+14.199825052 I0907 10:49:48.012050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:49:48.012779 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:49:48.012767417 +0000 UTC m=+14.216675918 I0907 10:49:48.028378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:49:48.034621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:49:52.918181 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:49:52.918163488 +0000 UTC m=+19.122071999 I0907 10:50:15.141515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:50:15.141513 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-07 10:50:15.141491781 +0000 UTC m=+41.345400292 I0907 10:50:15.141575 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 10:50:15.141569543 +0000 UTC m=+41.345478024 I0907 10:50:15.157846 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-07 10:50:15.157827194 +0000 UTC m=+41.361735675 I0907 10:50:15.162396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:50:15.162500 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-07 10:50:15.162492587 +0000 UTC m=+41.366401068 I0907 10:50:15.357578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:50:15.402021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g54l6" condition "Approved" to 2026-09-07 10:50:15.401999784 +0000 UTC m=+41.605908305 I0907 10:50:15.448144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-g54l6" condition "Ready" to 2026-09-07 10:50:15.448119286 +0000 UTC m=+41.652027797 I0907 10:50:15.490042 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:50:15.490021897 +0000 UTC m=+41.693930398 I0907 10:50:15.523038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:50:15.523526 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:50:15.523516423 +0000 UTC m=+41.727424914 I0907 10:50:15.540597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:50:15.551774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:51:59.378600 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-07 10:51:59.378540379 +0000 UTC m=+145.582448860 I0907 10:51:59.379336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:51:59.379430 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-07 10:51:59.379419182 +0000 UTC m=+145.583327673 E0907 10:51:59.396803 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 10:51:59.396897 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-07 10:51:59.396886851 +0000 UTC m=+145.600795352 I0907 10:51:59.396955 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 10:51:59.399155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:51:59.399459 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:51:59.399587 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-07 10:51:59.399572471 +0000 UTC m=+145.603480992 E0907 10:51:59.414387 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0907 10:51:59.415238 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 10:51:59.415300 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0907 10:51:59.415350 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0907 10:51:59.416430 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:51:59.416455 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-07 10:51:59.416448035 +0000 UTC m=+145.620356506 I0907 10:51:59.416767 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-07 10:51:59.416761803 +0000 UTC m=+145.620670274 I0907 10:51:59.441176 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:51:59.441249 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-07 10:51:59.441239987 +0000 UTC m=+145.645148488 I0907 10:51:59.657425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:51:59.669989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pkp9p" condition "Approved" to 2026-09-07 10:51:59.669976649 +0000 UTC m=+145.873885150 I0907 10:51:59.707322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-pkp9p" condition "Ready" to 2026-09-07 10:51:59.70730803 +0000 UTC m=+145.911216541 I0907 10:51:59.721646 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:51:59.741437 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:51:59.741417946 +0000 UTC m=+145.945326417 I0907 10:51:59.758951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-pbwt5" condition "Approved" to 2026-09-07 10:51:59.758931177 +0000 UTC m=+145.962839648 I0907 10:51:59.763899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:51:59.780716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-pbwt5" condition "Ready" to 2026-09-07 10:51:59.780697369 +0000 UTC m=+145.984605850 I0907 10:52:04.415807 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:52:04.415792491 +0000 UTC m=+150.619701002 I0907 10:52:04.436775 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-pbwt5" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:52:04.436755932 +0000 UTC m=+150.640664433 I0907 10:52:04.472835 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:52:04.47281824 +0000 UTC m=+150.676726741 I0907 10:52:04.500318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:52:04.500727 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:52:04.500719193 +0000 UTC m=+150.704627674 I0907 10:52:04.504790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:52:04.523385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:52:04.525182 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:52:04.525599 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:52:04.525588227 +0000 UTC m=+150.729496708 I0907 10:55:18.584113 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-155.nip.io-tls" condition "Ready" to 2026-09-07 10:55:18.58404109 +0000 UTC m=+344.787949601 I0907 10:55:18.584213 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-155.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:55:18.584340 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-155.nip.io-tls" condition "Issuing" to 2026-09-07 10:55:18.584328028 +0000 UTC m=+344.788236539 I0907 10:55:18.606430 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:55:18.606730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-155.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:55:18.606779 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-155.nip.io-tls" condition "Issuing" to 2026-09-07 10:55:18.606768705 +0000 UTC m=+344.810677226 I0907 10:55:18.770078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:55:18.778294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-155.nip.io-tls-ffl86" condition "Approved" to 2026-09-07 10:55:18.778278776 +0000 UTC m=+344.982187287 I0907 10:55:18.804787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-155.nip.io-tls-ffl86" condition "Ready" to 2026-09-07 10:55:18.80477512 +0000 UTC m=+345.008683601 I0907 10:55:18.837332 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:55:18.837318052 +0000 UTC m=+345.041226523 I0907 10:55:18.860922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:55:18.861829 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-155.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:55:18.861818154 +0000 UTC m=+345.065726665 I0907 10:55:18.889028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:55:18.892122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-155.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-155.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:56:33.421752 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:56:33.421757 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 10:56:33.421732828 +0000 UTC m=+419.625641339 I0907 10:56:33.421806 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 10:56:33.421793699 +0000 UTC m=+419.625702200 E0907 10:56:33.435447 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 10:56:33.435543 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-07 10:56:33.435535651 +0000 UTC m=+419.639444132 E0907 10:56:33.435607 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 10:56:33.439653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:56:33.439731 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:56:33.439761 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 10:56:33.439757022 +0000 UTC m=+419.643665503 E0907 10:56:33.446192 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0907 10:56:33.446837 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 10:56:33.446921 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 10:56:33.447023 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0907 10:56:33.483263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:56:33.484919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xlr22" condition "Approved" to 2026-09-07 10:56:33.484904741 +0000 UTC m=+419.688813232 I0907 10:56:33.499726 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xlr22" condition "Ready" to 2026-09-07 10:56:33.499713992 +0000 UTC m=+419.703622473 I0907 10:56:33.526795 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:56:33.526776384 +0000 UTC m=+419.730684885 I0907 10:56:33.552509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:56:33.553034 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:56:33.553021555 +0000 UTC m=+419.756930066 I0907 10:56:33.573139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:56:38.447609 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:56:38.447597779 +0000 UTC m=+424.651506260 I0907 10:57:21.066119 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-07 10:57:21.066043268 +0000 UTC m=+467.269951789 I0907 10:57:21.066488 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:57:21.066518 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 10:57:21.06651271 +0000 UTC m=+467.270421171 I0907 10:57:21.067097 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:57:21.067157 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 10:57:21.067144927 +0000 UTC m=+467.271053428 I0907 10:57:21.068117 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 10:57:21.068104372 +0000 UTC m=+467.272012893 I0907 10:57:21.068518 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:57:21.068564 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-07 10:57:21.068552234 +0000 UTC m=+467.272460735 I0907 10:57:21.068597 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 10:57:21.068560184 +0000 UTC m=+467.272468695 I0907 10:57:21.168981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:21.166894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:21.176823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:57:21.176878 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 10:57:21.176865224 +0000 UTC m=+467.380773745 I0907 10:57:21.177638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:57:21.177695 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 10:57:21.177683575 +0000 UTC m=+467.381592086 I0907 10:57:21.181046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:21.181151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:57:21.181188 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 10:57:21.181179137 +0000 UTC m=+467.385087638 I0907 10:57:21.864264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vc228" condition "Approved" to 2026-09-07 10:57:21.864246441 +0000 UTC m=+468.068154942 I0907 10:57:21.928891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-82dvq" condition "Approved" to 2026-09-07 10:57:21.928871848 +0000 UTC m=+468.132780379 I0907 10:57:21.931679 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-vc228" condition "Ready" to 2026-09-07 10:57:21.931645441 +0000 UTC m=+468.135553952 I0907 10:57:22.045275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kxzh5" condition "Approved" to 2026-09-07 10:57:22.045259581 +0000 UTC m=+468.249168082 I0907 10:57:22.048985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-82dvq" condition "Ready" to 2026-09-07 10:57:22.048970559 +0000 UTC m=+468.252879060 I0907 10:57:22.231439 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-kxzh5" condition "Ready" to 2026-09-07 10:57:22.231420296 +0000 UTC m=+468.435328797 I0907 10:57:22.308528 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:57:22.308516101 +0000 UTC m=+468.512424592 I0907 10:57:22.473131 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:57:22.473102127 +0000 UTC m=+468.677010628 I0907 10:57:22.478617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:22.692520 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:22.693010 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:57:22.692999952 +0000 UTC m=+468.896908463 I0907 10:57:22.724716 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:57:22.7247037 +0000 UTC m=+468.928612171 I0907 10:57:22.805474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:22.810004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:23.184134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:37.338890 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:57:37.338922 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls" condition "Issuing" to 2026-09-07 10:57:37.338914064 +0000 UTC m=+483.542822535 I0907 10:57:37.339025 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls" condition "Ready" to 2026-09-07 10:57:37.338994876 +0000 UTC m=+483.542903377 I0907 10:57:37.360645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:37.360742 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:57:37.360773 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls" condition "Issuing" to 2026-09-07 10:57:37.360762831 +0000 UTC m=+483.564671312 I0907 10:57:37.607915 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:37.613555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rxg4z-kwkkk" condition "Approved" to 2026-09-07 10:57:37.613540755 +0000 UTC m=+483.817449226 I0907 10:57:37.695014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rxg4z-kwkkk" condition "Ready" to 2026-09-07 10:57:37.694997986 +0000 UTC m=+483.898906497 I0907 10:57:37.729904 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:57:37.729891927 +0000 UTC m=+483.933800388 I0907 10:57:37.751682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:37.878218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rxg4z-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:58:07.225389 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 10:58:07.225368539 +0000 UTC m=+513.429277000 I0907 10:58:07.225635 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:58:07.225686 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-07 10:58:07.225676717 +0000 UTC m=+513.429585198 I0907 10:58:07.252484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:58:07.252595 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:58:07.252620 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-07 10:58:07.252610868 +0000 UTC m=+513.456519349 I0907 10:58:07.428135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:58:07.443831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zqjpn" condition "Approved" to 2026-09-07 10:58:07.443800566 +0000 UTC m=+513.647709077 I0907 10:58:07.477313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-zqjpn" condition "Ready" to 2026-09-07 10:58:07.477298391 +0000 UTC m=+513.681206892 I0907 10:58:07.511229 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:58:07.511218207 +0000 UTC m=+513.715126678 I0907 10:58:07.533028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:01:18.322446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:01:18.322562 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 11:01:18.322537795 +0000 UTC m=+704.526446296 I0907 11:01:18.322425 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 11:01:18.322402071 +0000 UTC m=+704.526310582 I0907 11:01:18.342251 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:01:18.342376 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 11:01:18.342363508 +0000 UTC m=+704.546272019 I0907 11:01:18.490685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:01:18.526567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wcnjx" condition "Approved" to 2026-09-07 11:01:18.52654645 +0000 UTC m=+704.730454951 I0907 11:01:18.557811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-wcnjx" condition "Ready" to 2026-09-07 11:01:18.557789984 +0000 UTC m=+704.761698495 I0907 11:01:18.596054 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:01:18.596034024 +0000 UTC m=+704.799942505 I0907 11:01:18.622183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:01:18.622579 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:01:18.622571104 +0000 UTC m=+704.826479595 I0907 11:01:18.642123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:01:18.645599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:01:18.645958 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:01:18.645949161 +0000 UTC m=+704.849857632 I0907 11:03:49.660589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:03:49.660722 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-07 11:03:49.660708417 +0000 UTC m=+855.864616928 I0907 11:03:49.661358 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-07 11:03:49.659223718 +0000 UTC m=+855.863132219 I0907 11:03:49.700051 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:03:49.700181 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-07 11:03:49.700170595 +0000 UTC m=+855.904079086 I0907 11:03:49.842060 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:03:49.881875 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mnwgk" condition "Approved" to 2026-09-07 11:03:49.881860035 +0000 UTC m=+856.085768526 I0907 11:03:49.909536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-mnwgk" condition "Ready" to 2026-09-07 11:03:49.909519142 +0000 UTC m=+856.113427643 I0907 11:03:49.950918 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:03:49.950897821 +0000 UTC m=+856.154806322 I0907 11:03:49.980799 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:03:49.981201 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:03:49.981194038 +0000 UTC m=+856.185102509 I0907 11:03:50.012486 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:03:50.012991 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:03:50.012979344 +0000 UTC m=+856.216887825 I0907 11:05:15.518600 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-07 11:05:15.518585963 +0000 UTC m=+941.722494464 I0907 11:05:15.518755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:05:15.518805 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-07 11:05:15.518795718 +0000 UTC m=+941.722704229 I0907 11:05:15.539350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:05:15.539547 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-07 11:05:15.539451882 +0000 UTC m=+941.743360383 I0907 11:05:15.641777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:05:15.675346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rqr2g" condition "Approved" to 2026-09-07 11:05:15.675331847 +0000 UTC m=+941.879240348 I0907 11:05:15.697590 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-rqr2g" condition "Ready" to 2026-09-07 11:05:15.697578002 +0000 UTC m=+941.901486503 I0907 11:05:15.729889 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:05:15.729874531 +0000 UTC m=+941.933783012 I0907 11:05:15.754152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:05:15.816844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:08:26.932185 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:08:26.932347 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-07 11:08:26.932336514 +0000 UTC m=+1133.136245005 I0907 11:08:26.932326 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-07 11:08:26.932092687 +0000 UTC m=+1133.136001178 I0907 11:08:26.954712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:08:26.954913 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-07 11:08:26.954900239 +0000 UTC m=+1133.158808730 I0907 11:08:27.131769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:08:27.167770 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zh2vp" condition "Approved" to 2026-09-07 11:08:27.167750599 +0000 UTC m=+1133.371659080 I0907 11:08:27.194613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-zh2vp" condition "Ready" to 2026-09-07 11:08:27.194593456 +0000 UTC m=+1133.398501957 I0907 11:08:27.229587 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:08:27.229576058 +0000 UTC m=+1133.433484549 I0907 11:08:27.261830 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:08:27.262301 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:08:27.26229256 +0000 UTC m=+1133.466201021 I0907 11:08:27.264325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:08:27.282133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:08:27.282539 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:08:27.282532154 +0000 UTC m=+1133.486440625 I0907 11:16:37.674627 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-07 11:16:37.674570123 +0000 UTC m=+1623.878478604 I0907 11:16:37.674762 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:16:37.674841 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-07 11:16:37.67483119 +0000 UTC m=+1623.878739721 I0907 11:16:37.699996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:16:37.700160 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:16:37.700200 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-07 11:16:37.70019079 +0000 UTC m=+1623.904099291 I0907 11:16:37.915567 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-72c44" condition "Approved" to 2026-09-07 11:16:37.915556743 +0000 UTC m=+1624.119465214 I0907 11:16:37.935576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-72c44" condition "Ready" to 2026-09-07 11:16:37.935565081 +0000 UTC m=+1624.139473572 I0907 11:16:37.965301 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:16:37.965288576 +0000 UTC m=+1624.169197047 I0907 11:16:37.988442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:16:37.989185 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:16:37.989173796 +0000 UTC m=+1624.193082297 I0907 11:16:38.004542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:16:38.004898 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:16:38.004890431 +0000 UTC m=+1624.208798912 I0907 11:18:13.966723 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-07 11:18:13.966213604 +0000 UTC m=+1720.170122065 I0907 11:18:13.966755 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:18:13.966854 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-07 11:18:13.96683963 +0000 UTC m=+1720.170748141 I0907 11:18:13.987729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:18:13.987918 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-07 11:18:13.987904266 +0000 UTC m=+1720.191812827 I0907 11:18:14.158105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:18:14.202775 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-w5lgc" condition "Approved" to 2026-09-07 11:18:14.202754759 +0000 UTC m=+1720.406663290 I0907 11:18:14.223431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-w5lgc" condition "Ready" to 2026-09-07 11:18:14.223419533 +0000 UTC m=+1720.427328004 I0907 11:18:14.264488 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:18:14.264472326 +0000 UTC m=+1720.468380807 I0907 11:18:14.292737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:18:14.293082 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:18:14.29307583 +0000 UTC m=+1720.496984321 I0907 11:18:14.309232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:18:14.320955 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:22.713263 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-07 11:19:22.713219475 +0000 UTC m=+1788.917127986 I0907 11:19:22.713482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:19:22.713564 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-07 11:19:22.713553114 +0000 UTC m=+1788.917461635 I0907 11:19:22.754996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:22.755184 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-07 11:19:22.755174091 +0000 UTC m=+1788.959082602 I0907 11:19:22.787064 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:22.830869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-9nvsm" condition "Approved" to 2026-09-07 11:19:22.830844536 +0000 UTC m=+1789.034753057 I0907 11:19:22.854729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-9nvsm" condition "Ready" to 2026-09-07 11:19:22.854714215 +0000 UTC m=+1789.058622726 I0907 11:19:22.886856 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:19:22.886839512 +0000 UTC m=+1789.090748023 I0907 11:19:22.914552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:23.428083 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-07 11:19:23.42806802 +0000 UTC m=+1789.631976491 I0907 11:19:23.428156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:19:23.428192 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-07 11:19:23.428182023 +0000 UTC m=+1789.632090524 I0907 11:19:23.460894 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:23.461033 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:19:23.461320 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-07 11:19:23.461305996 +0000 UTC m=+1789.665214517 I0907 11:19:23.536466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-zlcfh" condition "Approved" to 2026-09-07 11:19:23.536415406 +0000 UTC m=+1789.740323917 I0907 11:19:23.577484 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-zlcfh" condition "Ready" to 2026-09-07 11:19:23.577472988 +0000 UTC m=+1789.781381469 I0907 11:19:23.610516 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:19:23.610502559 +0000 UTC m=+1789.814411030 I0907 11:19:23.646639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:23.647004 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:19:23.646994871 +0000 UTC m=+1789.850903342 I0907 11:19:23.650699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:23.661896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:24.244889 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-07 11:19:24.244872441 +0000 UTC m=+1790.448780942 I0907 11:19:25.047521 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-07 11:19:25.047482139 +0000 UTC m=+1791.251390650 I0907 11:20:13.927935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:20:13.927995 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-07 11:20:13.927986836 +0000 UTC m=+1840.131895307 I0907 11:20:13.928053 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-07 11:20:13.928044857 +0000 UTC m=+1840.131953328 I0907 11:20:13.950199 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:20:13.950357 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:20:13.950419 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-07 11:20:13.950411887 +0000 UTC m=+1840.154320358 I0907 11:20:15.302710 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-2gc8p" condition "Approved" to 2026-09-07 11:20:15.302693545 +0000 UTC m=+1841.506602026 I0907 11:20:15.328583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-2gc8p" condition "Ready" to 2026-09-07 11:20:15.328572827 +0000 UTC m=+1841.532481298 I0907 11:20:15.365942 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:20:15.365918091 +0000 UTC m=+1841.569826562 I0907 11:20:15.386321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:20:15.386963 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:20:15.386957276 +0000 UTC m=+1841.590865747 I0907 11:20:15.404563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:20:15.407836 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:23:10.697205 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:23:10.697292 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-07 11:23:10.6972691 +0000 UTC m=+2016.901177611 I0907 11:23:10.697357 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-07 11:23:10.697342152 +0000 UTC m=+2016.901250663 I0907 11:23:10.719625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:23:10.719741 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:23:10.719762 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-07 11:23:10.719756513 +0000 UTC m=+2016.923664984 I0907 11:23:10.999456 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-mxp29" condition "Approved" to 2026-09-07 11:23:10.999438071 +0000 UTC m=+2017.203346532 I0907 11:23:11.019975 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-mxp29" condition "Ready" to 2026-09-07 11:23:11.019961602 +0000 UTC m=+2017.223870073 I0907 11:23:11.052299 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:23:11.052281895 +0000 UTC m=+2017.256190366 I0907 11:23:11.090778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:23:11.158394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:23:12.567282 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-07 11:23:12.567259835 +0000 UTC m=+2018.771168306 I0907 11:23:12.567425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:23:12.568210 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-07 11:23:12.56820101 +0000 UTC m=+2018.772109701 I0907 11:23:12.597705 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:23:12.599000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:23:12.599041 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-07 11:23:12.599033013 +0000 UTC m=+2018.802941494 I0907 11:23:12.908202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-w6zm5" condition "Approved" to 2026-09-07 11:23:12.908186958 +0000 UTC m=+2019.112095439 I0907 11:23:12.931308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-w6zm5" condition "Ready" to 2026-09-07 11:23:12.931292417 +0000 UTC m=+2019.135200898 I0907 11:23:12.973258 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:23:12.973238594 +0000 UTC m=+2019.177147105 I0907 11:23:12.996619 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:23:12.997000 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:23:12.99699201 +0000 UTC m=+2019.200900481 I0907 11:23:13.019804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:35.087609 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-07 11:26:35.087598287 +0000 UTC m=+2221.291506758 I0907 11:26:35.087676 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:26:35.087821 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-07 11:26:35.087808263 +0000 UTC m=+2221.291716764 I0907 11:26:35.112385 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:35.112578 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:26:35.112616 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-07 11:26:35.112609707 +0000 UTC m=+2221.316518178 I0907 11:26:35.351042 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:35.362878 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-ctnpl" condition "Approved" to 2026-09-07 11:26:35.362867547 +0000 UTC m=+2221.566776058 I0907 11:26:35.382024 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-ctnpl" condition "Ready" to 2026-09-07 11:26:35.382015032 +0000 UTC m=+2221.585923503 I0907 11:26:35.427407 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:26:35.42739594 +0000 UTC m=+2221.631304421 I0907 11:26:35.452879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:35.454042 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:26:35.454035652 +0000 UTC m=+2221.657944123 I0907 11:26:35.466449 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:35.477974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:27:39.102378 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vtqk5-vnc" condition "Ready" to 2026-09-07 11:27:39.102361643 +0000 UTC m=+2285.306270124 I0907 11:27:39.102454 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vtqk5-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:27:39.102478 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vtqk5-api" condition "Ready" to 2026-09-07 11:27:39.102454066 +0000 UTC m=+2285.306362577 I0907 11:27:39.102598 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vtqk5-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:27:39.102614 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vtqk5-api" condition "Issuing" to 2026-09-07 11:27:39.10261019 +0000 UTC m=+2285.306518661 I0907 11:27:39.102487 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vtqk5-vnc" condition "Issuing" to 2026-09-07 11:27:39.102479616 +0000 UTC m=+2285.306388087 I0907 11:27:39.182880 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vtqk5-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtqk5-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:27:39.183402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vtqk5-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtqk5-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:27:39.183576 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vtqk5-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:27:39.183677 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vtqk5-vnc" condition "Issuing" to 2026-09-07 11:27:39.183669228 +0000 UTC m=+2285.387577749 I0907 11:27:39.184003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vtqk5-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:27:39.184058 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vtqk5-api" condition "Issuing" to 2026-09-07 11:27:39.184053508 +0000 UTC m=+2285.387961969 I0907 11:27:39.572226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vtqk5-api-hhg48" condition "Approved" to 2026-09-07 11:27:39.572214457 +0000 UTC m=+2285.776122938 I0907 11:27:39.601685 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vtqk5-api-hhg48" condition "Ready" to 2026-09-07 11:27:39.601675234 +0000 UTC m=+2285.805583695 I0907 11:27:39.620644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vtqk5-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtqk5-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:27:39.623282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vtqk5-vnc-9nmx7" condition "Approved" to 2026-09-07 11:27:39.623270854 +0000 UTC m=+2285.827179335 I0907 11:27:39.632418 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vtqk5-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:27:39.632405325 +0000 UTC m=+2285.836313796 I0907 11:27:39.645396 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vtqk5-vnc-9nmx7" condition "Ready" to 2026-09-07 11:27:39.645367667 +0000 UTC m=+2285.849276138 I0907 11:27:39.658336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-vtqk5-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtqk5-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:27:39.693398 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vtqk5-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:27:39.693383572 +0000 UTC m=+2285.897292043 I0907 11:27:39.713265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vtqk5-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtqk5-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:27:39.713658 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vtqk5-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:27:39.713648107 +0000 UTC m=+2285.917556588 I0907 11:27:39.717759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vtqk5-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtqk5-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:27:39.729556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vtqk5-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vtqk5-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:31:31.676628 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-07 11:31:31.676611332 +0000 UTC m=+2517.880519833 I0907 11:31:31.677228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:31:31.677268 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-07 11:31:31.677259829 +0000 UTC m=+2517.881168340 I0907 11:31:31.699540 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:31:31.699756 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:31:31.699789 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-07 11:31:31.699780083 +0000 UTC m=+2517.903688594 I0907 11:31:31.866870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:31:31.867373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-29v6m" condition "Approved" to 2026-09-07 11:31:31.867356093 +0000 UTC m=+2518.071264594 I0907 11:31:31.892534 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-29v6m" condition "Ready" to 2026-09-07 11:31:31.892522137 +0000 UTC m=+2518.096430608 I0907 11:31:31.925099 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:31:31.925080606 +0000 UTC m=+2518.128989117 I0907 11:31:31.950093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:31:32.022847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:31:33.347370 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:31:33.347396 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-07 11:31:33.347377091 +0000 UTC m=+2519.551285592 I0907 11:31:33.347413 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-07 11:31:33.347402432 +0000 UTC m=+2519.551310943 I0907 11:31:33.378969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:31:33.379145 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:31:33.379180 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-07 11:31:33.37916914 +0000 UTC m=+2519.583077641 I0907 11:31:33.657052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:31:33.664460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-x9jhd" condition "Approved" to 2026-09-07 11:31:33.664443985 +0000 UTC m=+2519.868352536 I0907 11:31:33.685686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-x9jhd" condition "Ready" to 2026-09-07 11:31:33.685676445 +0000 UTC m=+2519.889584916 I0907 11:31:33.719071 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:31:33.719055975 +0000 UTC m=+2519.922964456 I0907 11:31:33.743057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:31:33.743325 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:31:33.743318095 +0000 UTC m=+2519.947226566 I0907 11:31:33.764744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:10.594002 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:34:10.593997 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-07 11:34:10.593983397 +0000 UTC m=+2676.797891868 I0907 11:34:10.594056 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-07 11:34:10.594045218 +0000 UTC m=+2676.797953729 E0907 11:34:10.610261 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 11:34:10.610323 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-07 11:34:10.610315352 +0000 UTC m=+2676.814223833 I0907 11:34:10.610347 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 11:34:10.620062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:10.620214 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:34:10.620240 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-07 11:34:10.620234256 +0000 UTC m=+2676.824142727 E0907 11:34:10.621327 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0907 11:34:10.621399 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 11:34:10.621422 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0907 11:34:10.621450 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0907 11:34:10.678605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-gdhln" condition "Approved" to 2026-09-07 11:34:10.67858973 +0000 UTC m=+2676.882498211 I0907 11:34:10.678974 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:10.698277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-gdhln" condition "Ready" to 2026-09-07 11:34:10.698264964 +0000 UTC m=+2676.902173445 I0907 11:34:10.724038 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:34:10.72402459 +0000 UTC m=+2676.927933071 I0907 11:34:10.751273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:11.424073 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-07 11:34:11.424060082 +0000 UTC m=+2677.627968553 I0907 11:34:11.424405 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:34:11.424479 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-07 11:34:11.424466173 +0000 UTC m=+2677.628374674 E0907 11:34:11.442112 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 11:34:11.442165 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-07 11:34:11.442157164 +0000 UTC m=+2677.646065665 I0907 11:34:11.442218 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 11:34:11.445928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:11.446024 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-07 11:34:11.446017167 +0000 UTC m=+2677.649925668 E0907 11:34:11.455225 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0907 11:34:11.455636 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 11:34:11.455665 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0907 11:34:11.455697 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0907 11:34:11.471383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:11.471483 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-07 11:34:11.471474555 +0000 UTC m=+2677.675383066 I0907 11:34:11.473429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:11.482425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-bnhcc" condition "Approved" to 2026-09-07 11:34:11.482411846 +0000 UTC m=+2677.686320327 I0907 11:34:11.500431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-bnhcc" condition "Ready" to 2026-09-07 11:34:11.500415966 +0000 UTC m=+2677.704324467 I0907 11:34:11.525131 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:34:11.525119144 +0000 UTC m=+2677.729027635 I0907 11:34:11.551595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:12.603879 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-07 11:34:12.603860021 +0000 UTC m=+2678.807768532 I0907 11:34:12.604020 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:34:12.604076 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-07 11:34:12.604062406 +0000 UTC m=+2678.807970917 I0907 11:34:12.637768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:12.637889 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-07 11:34:12.637879687 +0000 UTC m=+2678.841788188 I0907 11:34:12.667481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:12.690882 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-vnpcf" condition "Approved" to 2026-09-07 11:34:12.690871898 +0000 UTC m=+2678.894780369 I0907 11:34:12.707870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-vnpcf" condition "Ready" to 2026-09-07 11:34:12.707858601 +0000 UTC m=+2678.911767072 I0907 11:34:15.622068 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:34:15.622054937 +0000 UTC m=+2681.825963418 I0907 11:34:15.641670 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-vnpcf" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:34:15.641649768 +0000 UTC m=+2681.845558269 I0907 11:34:15.686136 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:34:15.686121583 +0000 UTC m=+2681.890030054 I0907 11:34:15.711398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:15.711766 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:34:15.711755155 +0000 UTC m=+2681.915663656 I0907 11:34:15.729423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:15.739979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:34:16.459226 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:34:16.459209911 +0000 UTC m=+2682.663118392 I0907 11:36:43.792740 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:36:43.792808 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-07 11:36:43.792798294 +0000 UTC m=+2829.996706755 I0907 11:36:43.793787 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-07 11:36:43.79376823 +0000 UTC m=+2829.997676711 I0907 11:36:43.811928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:43.812095 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-07 11:36:43.812086988 +0000 UTC m=+2830.015995459 I0907 11:36:43.892406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:43.923096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-2cfql" condition "Approved" to 2026-09-07 11:36:43.923083204 +0000 UTC m=+2830.126991675 I0907 11:36:43.942525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-2cfql" condition "Ready" to 2026-09-07 11:36:43.942509581 +0000 UTC m=+2830.146418092 I0907 11:36:43.978679 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:36:43.978664714 +0000 UTC m=+2830.182573195 I0907 11:36:44.003590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:44.004974 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:36:44.004965454 +0000 UTC m=+2830.208873935 I0907 11:36:44.014949 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:44.025183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:32.165681 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-07 11:37:32.165660032 +0000 UTC m=+2878.369568533 I0907 11:37:32.197658 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-07 11:37:32.197642583 +0000 UTC m=+2878.401551064 I0907 11:37:32.197752 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:37:32.197878 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-07 11:37:32.197782467 +0000 UTC m=+2878.401690988 I0907 11:37:32.215358 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:32.215554 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-07 11:37:32.21554318 +0000 UTC m=+2878.419451691 E0907 11:37:32.237344 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0907 11:37:32.297155 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-07 11:37:32.297134753 +0000 UTC m=+2878.501043254 I0907 11:37:32.320117 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-07 11:37:32.320100604 +0000 UTC m=+2878.524009095 I0907 11:37:32.320170 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:37:32.320211 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-07 11:37:32.320203437 +0000 UTC m=+2878.524111908 I0907 11:37:32.342209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:32.342282 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:37:32.342305 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-07 11:37:32.342298946 +0000 UTC m=+2878.546207427 E0907 11:37:32.362897 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0907 11:37:32.896515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:32.910708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-9smzx" condition "Approved" to 2026-09-07 11:37:32.910694012 +0000 UTC m=+2879.114602483 I0907 11:37:32.931688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-9smzx" condition "Ready" to 2026-09-07 11:37:32.931675041 +0000 UTC m=+2879.135583502 I0907 11:37:32.970873 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:37:32.970856634 +0000 UTC m=+2879.174765105 I0907 11:37:32.994139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:32.995267 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:37:32.995251984 +0000 UTC m=+2879.199160465 I0907 11:37:33.015890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:33.195228 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-07 11:37:33.195215149 +0000 UTC m=+2879.399123620 I0907 11:37:33.214029 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-07 11:37:33.21401608 +0000 UTC m=+2879.417924551 I0907 11:37:33.214305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:37:33.214325 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-07 11:37:33.214321148 +0000 UTC m=+2879.418229609 I0907 11:37:33.240965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:33.241045 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-07 11:37:33.24103806 +0000 UTC m=+2879.444946541 I0907 11:37:33.487373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:33.535160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-pwjt6" condition "Approved" to 2026-09-07 11:37:33.535150222 +0000 UTC m=+2879.739058693 I0907 11:37:33.559009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-pwjt6" condition "Ready" to 2026-09-07 11:37:33.558996727 +0000 UTC m=+2879.762905198 I0907 11:37:33.590367 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:37:33.590357742 +0000 UTC m=+2879.794266213 I0907 11:37:33.635412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:33.635748 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:37:33.635742581 +0000 UTC m=+2879.839651052 I0907 11:37:33.656779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:33.657170 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:37:33.657163021 +0000 UTC m=+2879.861071492 I0907 11:37:33.664750 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:33.792181 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-07 11:37:33.792164936 +0000 UTC m=+2879.996073407 I0907 11:37:33.811515 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:37:33.811556 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-07 11:37:33.811547342 +0000 UTC m=+2880.015455823 I0907 11:37:33.811677 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-07 11:37:33.811636245 +0000 UTC m=+2880.015544716 I0907 11:37:33.826997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:33.827077 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-07 11:37:33.827071876 +0000 UTC m=+2880.030980347 I0907 11:37:33.988090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:34.030237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-g8456" condition "Approved" to 2026-09-07 11:37:34.030224205 +0000 UTC m=+2880.234132676 I0907 11:37:34.057626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-g8456" condition "Ready" to 2026-09-07 11:37:34.057615485 +0000 UTC m=+2880.261523966 I0907 11:37:34.117170 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:37:34.11715728 +0000 UTC m=+2880.321065761 I0907 11:37:34.149222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:34.149542 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:37:34.149537362 +0000 UTC m=+2880.353445833 I0907 11:37:34.323280 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-07 11:37:34.323264249 +0000 UTC m=+2880.527172720 I0907 11:37:34.332658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:34.345506 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-07 11:37:34.345493701 +0000 UTC m=+2880.549402172 I0907 11:37:34.345650 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:37:34.345710 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-07 11:37:34.345706817 +0000 UTC m=+2880.549615288 I0907 11:37:34.523840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:34.523906 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:37:34.523928 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-07 11:37:34.523923213 +0000 UTC m=+2880.727831684 I0907 11:37:34.901401 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-vb4nn" condition "Approved" to 2026-09-07 11:37:34.901380885 +0000 UTC m=+2881.105289366 I0907 11:37:34.931716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-vb4nn" condition "Ready" to 2026-09-07 11:37:34.931695722 +0000 UTC m=+2881.135604203 I0907 11:37:35.374385 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:37:35.374371601 +0000 UTC m=+2881.578280072 I0907 11:37:35.523813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:35.524138 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:37:35.524130459 +0000 UTC m=+2881.728038950 I0907 11:37:35.768539 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:37:35.826150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"