I1017 09:31:01.937014 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W1017 09:31:01.937195 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I1017 09:31:01.941685 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I1017 09:31:01.941716 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I1017 09:31:01.941735 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I1017 09:31:01.942256 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I1017 09:31:01.942295 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I1017 09:31:01.942347 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I1017 09:31:01.946041 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I1017 09:31:01.960660 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I1017 09:31:01.967590 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I1017 09:31:01.971336 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I1017 09:31:01.975239 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I1017 09:31:01.975283 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I1017 09:31:01.975582 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I1017 09:31:01.979091 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I1017 09:31:01.982916 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I1017 09:31:01.988680 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I1017 09:31:01.988909 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I1017 09:31:01.992663 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I1017 09:31:01.996386 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I1017 09:31:02.000193 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I1017 09:31:02.004033 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I1017 09:31:02.008093 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I1017 09:31:02.014922 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I1017 09:31:02.018831 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I1017 09:31:02.022816 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I1017 09:31:02.026436 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I1017 09:31:02.030205 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I1017 09:31:02.034079 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I1017 09:31:02.034115 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I1017 09:31:02.034125 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I1017 09:31:02.034143 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I1017 09:31:02.038759 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I1017 09:31:02.040989 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I1017 09:31:02.042371 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I1017 09:31:02.043921 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I1017 09:31:02.044723 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I1017 09:31:02.044763 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I1017 09:31:02.046061 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I1017 09:31:02.071234 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I1017 09:31:02.095082 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I1017 09:31:02.122226 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I1017 09:31:02.141668 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I1017 09:31:02.160255 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I1017 09:31:12.324783 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-10-17 09:31:12.324756837 +0000 UTC m=+10.421868595 I1017 09:31:12.995152 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:31:12.995184 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-10-17 09:31:12.995169684 +0000 UTC m=+11.092281412 I1017 09:31:12.995220 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-10-17 09:31:12.995210424 +0000 UTC m=+11.092322192 I1017 09:31:13.009351 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:31:13.009472 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-10-17 09:31:13.009461452 +0000 UTC m=+11.106573200 E1017 09:31:13.010229 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1017 09:31:13.010329 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-10-17 09:31:13.010318242 +0000 UTC m=+11.107430010 E1017 09:31:13.010360 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1017 09:31:13.017208 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E1017 09:31:13.017919 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1017 09:31:13.018003 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1017 09:31:13.018169 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I1017 09:31:13.023958 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:31:13.055193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-10-17 09:31:13.055176673 +0000 UTC m=+11.152288431 I1017 09:31:13.083423 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-10-17 09:31:13.083391212 +0000 UTC m=+11.180502980 I1017 09:31:13.107490 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:31:13.107473649 +0000 UTC m=+11.204585417 I1017 09:31:13.121966 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:31:13.164010 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:31:18.017737 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:31:18.017723823 +0000 UTC m=+16.114835581 I1017 09:31:40.569229 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-10-17 09:31:40.56916427 +0000 UTC m=+38.666276038 I1017 09:31:40.569421 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:31:40.569542 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-10-17 09:31:40.569529098 +0000 UTC m=+38.666640866 I1017 09:31:40.578762 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-10-17 09:31:40.578749011 +0000 UTC m=+38.675860769 I1017 09:31:40.590213 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:31:40.590311 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-10-17 09:31:40.590301166 +0000 UTC m=+38.687412924 I1017 09:31:40.717780 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:31:40.752273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-10-17 09:31:40.752258724 +0000 UTC m=+38.849370482 I1017 09:31:40.783026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-10-17 09:31:40.783009272 +0000 UTC m=+38.880121040 I1017 09:31:40.811764 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:31:40.811751834 +0000 UTC m=+38.908863592 I1017 09:31:40.827500 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:31:40.828282 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:31:40.828272378 +0000 UTC m=+38.925384136 I1017 09:31:40.842090 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:31:40.847457 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:33:29.684347 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-10-17 09:33:29.684293605 +0000 UTC m=+147.781405363 I1017 09:33:29.684433 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:33:29.684506 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-10-17 09:33:29.684495399 +0000 UTC m=+147.781607157 E1017 09:33:29.693355 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I1017 09:33:29.693510 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-10-17 09:33:29.693495727 +0000 UTC m=+147.790607485 I1017 09:33:29.693554 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I1017 09:33:29.700279 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:33:29.700364 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-10-17 09:33:29.700353768 +0000 UTC m=+147.797465506 E1017 09:33:29.703813 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" E1017 09:33:29.703924 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I1017 09:33:29.703964 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E1017 09:33:29.703997 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" I1017 09:33:29.711688 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:33:29.711733 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-10-17 09:33:29.711721508 +0000 UTC m=+147.808833276 I1017 09:33:29.711778 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-10-17 09:33:29.711763029 +0000 UTC m=+147.808874797 I1017 09:33:29.724157 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:33:29.724243 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:33:29.724285 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-10-17 09:33:29.724274584 +0000 UTC m=+147.821386352 I1017 09:33:29.926263 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:33:29.939220 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-10-17 09:33:29.939210956 +0000 UTC m=+148.036322684 I1017 09:33:29.954582 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-10-17 09:33:29.954528313 +0000 UTC m=+148.051640081 I1017 09:33:30.226152 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:33:30.250474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-10-17 09:33:30.250465009 +0000 UTC m=+148.347576727 I1017 09:33:30.265448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-10-17 09:33:30.265436328 +0000 UTC m=+148.362548066 I1017 09:33:30.290762 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:33:30.290754705 +0000 UTC m=+148.387866443 I1017 09:33:30.302379 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:33:34.705232 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:33:34.705220109 +0000 UTC m=+152.802331867 I1017 09:33:34.720105 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:33:34.720092087 +0000 UTC m=+152.817203845 I1017 09:33:34.746621 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:33:34.746610841 +0000 UTC m=+152.843722599 I1017 09:33:34.764554 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:33:34.765279 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:33:34.765268921 +0000 UTC m=+152.862380679 I1017 09:33:34.780639 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:33:34.781463 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:33:34.781450347 +0000 UTC m=+152.878562105 I1017 09:36:37.662146 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-17.nip.io-tls" condition "Ready" to 2026-10-17 09:36:37.662094375 +0000 UTC m=+335.759206133 I1017 09:36:37.662168 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-17.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:36:37.662235 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-17.nip.io-tls" condition "Issuing" to 2026-10-17 09:36:37.662223838 +0000 UTC m=+335.759335596 I1017 09:36:37.677675 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-17.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-17.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:36:37.677763 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-17.nip.io-tls" condition "Ready" to 2026-10-17 09:36:37.677755219 +0000 UTC m=+335.774866977 I1017 09:36:37.770524 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-17.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-17.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:36:37.805399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-17.nip.io-tls-1" condition "Approved" to 2026-10-17 09:36:37.805378871 +0000 UTC m=+335.902490639 I1017 09:36:37.822864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-17.nip.io-tls-1" condition "Ready" to 2026-10-17 09:36:37.822851104 +0000 UTC m=+335.919962862 I1017 09:36:37.848891 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-17.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:36:37.848875896 +0000 UTC m=+335.945987654 I1017 09:36:37.864405 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-17.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-17.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:37:50.099769 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:37:50.099846 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-10-17 09:37:50.099834983 +0000 UTC m=+408.196946741 I1017 09:37:50.100217 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-10-17 09:37:50.100202871 +0000 UTC m=+408.197314639 I1017 09:37:50.111411 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:37:50.111518 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-10-17 09:37:50.111508022 +0000 UTC m=+408.208619780 E1017 09:37:50.112142 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I1017 09:37:50.112237 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-10-17 09:37:50.112226097 +0000 UTC m=+408.209337865 E1017 09:37:50.112332 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1017 09:37:50.122526 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E1017 09:37:50.122633 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1017 09:37:50.122677 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E1017 09:37:50.122727 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I1017 09:37:50.126368 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:37:50.151278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-10-17 09:37:50.1512654 +0000 UTC m=+408.248377158 I1017 09:37:50.171190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-10-17 09:37:50.17117486 +0000 UTC m=+408.268286628 I1017 09:37:50.193319 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:37:50.193307439 +0000 UTC m=+408.290419177 I1017 09:37:50.206324 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:37:50.206804 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:37:50.206794808 +0000 UTC m=+408.303906576 I1017 09:37:50.215465 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:37:50.224306 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:37:55.122965 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:37:55.122951027 +0000 UTC m=+413.220062785 I1017 09:38:33.634970 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-10-17 09:38:33.634938472 +0000 UTC m=+451.732050200 I1017 09:38:33.635156 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:38:33.635182 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-10-17 09:38:33.635179817 +0000 UTC m=+451.732291545 I1017 09:38:33.635464 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:38:33.635490 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-10-17 09:38:33.635486864 +0000 UTC m=+451.732598592 I1017 09:38:33.635514 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-10-17 09:38:33.635483434 +0000 UTC m=+451.732595152 I1017 09:38:33.635515 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-10-17 09:38:33.635491524 +0000 UTC m=+451.732603302 I1017 09:38:33.635739 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:38:33.635753 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-10-17 09:38:33.63575137 +0000 UTC m=+451.732863098 I1017 09:38:33.656930 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:33.657020 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:33.657270 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:33.657372 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:38:33.657399 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-10-17 09:38:33.657392039 +0000 UTC m=+451.754503767 I1017 09:38:33.659430 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:38:33.659459 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-10-17 09:38:33.659452194 +0000 UTC m=+451.756563922 I1017 09:38:33.659729 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-10-17 09:38:33.65972482 +0000 UTC m=+451.756836548 I1017 09:38:33.880510 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-10-17 09:38:33.880496884 +0000 UTC m=+451.977608602 I1017 09:38:33.884192 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:33.901255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-10-17 09:38:33.901241123 +0000 UTC m=+451.998352861 I1017 09:38:33.903587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-10-17 09:38:33.903573755 +0000 UTC m=+452.000685513 I1017 09:38:33.919434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-10-17 09:38:33.919415235 +0000 UTC m=+452.016527003 I1017 09:38:33.944568 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:38:33.94454437 +0000 UTC m=+452.041656138 I1017 09:38:33.959943 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:38:33.959916771 +0000 UTC m=+452.057028539 I1017 09:38:33.967680 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:33.968210 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:38:33.968202335 +0000 UTC m=+452.065314053 I1017 09:38:33.978274 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:33.979096 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:38:33.979048524 +0000 UTC m=+452.076160292 I1017 09:38:34.081907 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:34.282513 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:34.381677 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:34.431758 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:34.642715 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-10-17 09:38:34.642681294 +0000 UTC m=+452.739793032 I1017 09:38:34.998173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-10-17 09:38:34.998152067 +0000 UTC m=+453.095263825 I1017 09:38:35.189426 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:38:35.189402138 +0000 UTC m=+453.286513916 I1017 09:38:35.284657 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:35.285455 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:38:35.285441683 +0000 UTC m=+453.382553441 I1017 09:38:35.535749 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:35.585227 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:42.189963 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rlk22-tls" condition "Ready" to 2026-10-17 09:38:42.189941356 +0000 UTC m=+460.287053124 I1017 09:38:42.190593 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rlk22-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:38:42.190632 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rlk22-tls" condition "Issuing" to 2026-10-17 09:38:42.19062301 +0000 UTC m=+460.287734778 I1017 09:38:42.204030 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rlk22-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rlk22-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:42.204388 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-rlk22-tls" condition "Ready" to 2026-10-17 09:38:42.204369865 +0000 UTC m=+460.301481623 I1017 09:38:42.307745 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rlk22-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rlk22-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:42.335774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rlk22-tls-1" condition "Approved" to 2026-10-17 09:38:42.335753141 +0000 UTC m=+460.432864899 I1017 09:38:42.349686 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-rlk22-tls-1" condition "Ready" to 2026-10-17 09:38:42.349672559 +0000 UTC m=+460.446784297 I1017 09:38:42.378654 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rlk22-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:38:42.378640739 +0000 UTC m=+460.475752477 I1017 09:38:42.396714 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rlk22-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rlk22-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:38:42.397577 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-rlk22-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:38:42.397567638 +0000 UTC m=+460.494679396 I1017 09:38:42.425002 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-rlk22-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-rlk22-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:39:05.523513 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:39:05.523541 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-10-17 09:39:05.523534982 +0000 UTC m=+483.620646710 I1017 09:39:05.523583 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-10-17 09:39:05.523563543 +0000 UTC m=+483.620675311 I1017 09:39:05.538747 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:39:05.538853 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-10-17 09:39:05.53884042 +0000 UTC m=+483.635952188 I1017 09:39:05.728490 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:39:05.758989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-10-17 09:39:05.75897356 +0000 UTC m=+483.856085318 I1017 09:39:05.779277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-10-17 09:39:05.779265498 +0000 UTC m=+483.876377256 I1017 09:39:05.807556 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:39:05.807542744 +0000 UTC m=+483.904654482 I1017 09:39:05.825914 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:39:05.876457 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:42:30.846218 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:42:30.846322 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-10-17 09:42:30.846283976 +0000 UTC m=+688.943395734 I1017 09:42:30.846430 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-10-17 09:42:30.846409819 +0000 UTC m=+688.943521577 I1017 09:42:30.858800 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:42:30.858888 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-10-17 09:42:30.858880192 +0000 UTC m=+688.955991960 I1017 09:42:31.318744 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:42:31.353080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-10-17 09:42:31.35306422 +0000 UTC m=+689.450175978 I1017 09:42:31.371272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-10-17 09:42:31.371265501 +0000 UTC m=+689.468377229 I1017 09:42:31.399002 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:42:31.39898665 +0000 UTC m=+689.496098398 I1017 09:42:31.414341 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:42:31.415534 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:42:31.415525153 +0000 UTC m=+689.512636891 I1017 09:42:31.429018 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:42:31.429474 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:42:31.429468069 +0000 UTC m=+689.526579797 I1017 09:42:31.431222 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:45:10.195838 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-10-17 09:45:10.195795665 +0000 UTC m=+848.292907423 I1017 09:45:10.196125 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:45:10.196185 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-10-17 09:45:10.196177074 +0000 UTC m=+848.293288802 I1017 09:45:10.212074 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:45:10.212188 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-10-17 09:45:10.212176066 +0000 UTC m=+848.309287824 I1017 09:45:10.348411 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:45:10.391888 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Approved" to 2026-10-17 09:45:10.391871145 +0000 UTC m=+848.488982883 I1017 09:45:10.405919 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Ready" to 2026-10-17 09:45:10.405901384 +0000 UTC m=+848.503013142 I1017 09:45:10.433083 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:45:10.433069971 +0000 UTC m=+848.530181699 I1017 09:45:10.451108 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:45:10.451552 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:45:10.451545547 +0000 UTC m=+848.548657275 I1017 09:45:10.458301 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:45:10.469810 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:46:28.086504 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-10-17 09:46:28.086485128 +0000 UTC m=+926.183596896 I1017 09:46:28.086519 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:46:28.086591 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-10-17 09:46:28.08658188 +0000 UTC m=+926.183693648 I1017 09:46:28.099936 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:46:28.100040 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-10-17 09:46:28.100031176 +0000 UTC m=+926.197142914 I1017 09:46:28.270265 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:46:28.300434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Approved" to 2026-10-17 09:46:28.300419181 +0000 UTC m=+926.397530949 I1017 09:46:28.317480 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Ready" to 2026-10-17 09:46:28.317465445 +0000 UTC m=+926.414577203 I1017 09:46:28.350321 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:46:28.350305077 +0000 UTC m=+926.447416805 I1017 09:46:28.369602 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:46:28.370103 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:46:28.370093842 +0000 UTC m=+926.467205580 I1017 09:46:28.379289 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:46:28.388397 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:49:44.079653 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-10-17 09:49:44.079614214 +0000 UTC m=+1122.176725972 I1017 09:49:44.079698 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:49:44.079756 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-10-17 09:49:44.079748937 +0000 UTC m=+1122.176860705 I1017 09:49:44.093879 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:49:44.093981 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-10-17 09:49:44.093973591 +0000 UTC m=+1122.191085349 I1017 09:49:44.207031 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:49:44.247622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Approved" to 2026-10-17 09:49:44.247608126 +0000 UTC m=+1122.344719894 I1017 09:49:44.276112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Ready" to 2026-10-17 09:49:44.276102295 +0000 UTC m=+1122.373214033 I1017 09:49:44.304800 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:49:44.304782578 +0000 UTC m=+1122.401894336 I1017 09:49:44.318544 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:49:44.319230 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:49:44.319219688 +0000 UTC m=+1122.416331426 I1017 09:49:44.333023 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:49:44.333073 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:57:44.035228 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-10-17 09:57:44.035188357 +0000 UTC m=+1602.132300125 I1017 09:57:44.035455 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:57:44.035575 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-10-17 09:57:44.035560855 +0000 UTC m=+1602.132672613 I1017 09:57:44.055556 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:57:44.055685 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-10-17 09:57:44.055674189 +0000 UTC m=+1602.152785947 I1017 09:57:44.147258 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:57:44.191118 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Approved" to 2026-10-17 09:57:44.191104321 +0000 UTC m=+1602.288216059 I1017 09:57:44.215654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Ready" to 2026-10-17 09:57:44.215640974 +0000 UTC m=+1602.312752762 I1017 09:57:44.242535 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:57:44.242524098 +0000 UTC m=+1602.339635826 I1017 09:57:44.261962 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:59:30.292860 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-10-17 09:59:30.292785728 +0000 UTC m=+1708.389897486 I1017 09:59:30.293365 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:59:30.293393 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-10-17 09:59:30.293387442 +0000 UTC m=+1708.390499200 I1017 09:59:30.306049 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:59:30.306128 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 09:59:30.306158 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-10-17 09:59:30.306150944 +0000 UTC m=+1708.403262712 I1017 09:59:30.671656 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 09:59:30.690359 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-10-17 09:59:30.690349893 +0000 UTC m=+1708.787461631 I1017 09:59:30.705279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-10-17 09:59:30.705270863 +0000 UTC m=+1708.802382601 I1017 09:59:30.735527 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 09:59:30.735511901 +0000 UTC m=+1708.832623659 I1017 09:59:30.755377 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:00:31.213810 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-10-17 10:00:31.213792248 +0000 UTC m=+1769.310904006 I1017 10:00:31.214393 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:00:31.214420 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-10-17 10:00:31.214414542 +0000 UTC m=+1769.311526310 I1017 10:00:31.229535 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:00:31.229620 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:00:31.229643 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-10-17 10:00:31.229635899 +0000 UTC m=+1769.326747667 I1017 10:00:31.278981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-10-17 10:00:31.278965538 +0000 UTC m=+1769.376077306 I1017 10:00:31.294965 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-10-17 10:00:31.294956392 +0000 UTC m=+1769.392068130 I1017 10:00:31.323529 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:00:31.323514422 +0000 UTC m=+1769.420626180 I1017 10:00:31.338750 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:00:31.339261 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:00:31.339252421 +0000 UTC m=+1769.436364189 I1017 10:00:31.353355 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:00:31.358742 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:00:31.762718 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:00:31.762767 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-10-17 10:00:31.762756838 +0000 UTC m=+1769.859868596 I1017 10:00:31.762852 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-10-17 10:00:31.76283976 +0000 UTC m=+1769.859951518 I1017 10:00:31.776863 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:00:31.776979 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:00:31.777007 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-10-17 10:00:31.776999603 +0000 UTC m=+1769.874111341 I1017 10:00:31.816124 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:00:31.827929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-10-17 10:00:31.827913838 +0000 UTC m=+1769.925025596 I1017 10:00:31.851943 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-10-17 10:00:31.851928669 +0000 UTC m=+1769.949040407 I1017 10:00:31.881248 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:00:31.881230276 +0000 UTC m=+1769.978342034 I1017 10:00:31.896174 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:00:31.896779 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:00:31.896767349 +0000 UTC m=+1769.993879107 I1017 10:00:31.902555 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:00:31.910315 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:00:31.910758 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:00:31.910745868 +0000 UTC m=+1770.007857636 I1017 10:00:31.914189 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:00:32.343082 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-10-17 10:00:32.34303861 +0000 UTC m=+1770.440150368 I1017 10:00:32.894241 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-10-17 10:00:32.894228889 +0000 UTC m=+1770.991340647 I1017 10:01:18.765406 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-10-17 10:01:18.76537101 +0000 UTC m=+1816.862482738 I1017 10:01:18.766036 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:01:18.766334 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-10-17 10:01:18.766330051 +0000 UTC m=+1816.863441769 I1017 10:01:18.798674 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:01:18.798787 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-10-17 10:01:18.798780349 +0000 UTC m=+1816.895892067 I1017 10:01:20.088476 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:01:20.140598 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Approved" to 2026-10-17 10:01:20.140588347 +0000 UTC m=+1818.237700075 I1017 10:01:20.160345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Ready" to 2026-10-17 10:01:20.160333393 +0000 UTC m=+1818.257445131 I1017 10:01:20.182809 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:01:20.18279792 +0000 UTC m=+1818.279909648 I1017 10:01:20.193629 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:01:20.196090 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:01:20.196079022 +0000 UTC m=+1818.293190760 I1017 10:01:20.209548 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:01:20.212911 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:04:12.673536 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-10-17 10:04:12.673467871 +0000 UTC m=+1990.770579629 I1017 10:04:12.673644 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:04:12.673699 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-10-17 10:04:12.673691416 +0000 UTC m=+1990.770803184 I1017 10:04:12.695491 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:04:12.695605 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-10-17 10:04:12.6955947 +0000 UTC m=+1990.792706458 I1017 10:04:12.920258 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:04:12.957790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Approved" to 2026-10-17 10:04:12.957777493 +0000 UTC m=+1991.054889251 I1017 10:04:12.979608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Ready" to 2026-10-17 10:04:12.979598075 +0000 UTC m=+1991.076709833 I1017 10:04:13.006270 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:04:13.006259523 +0000 UTC m=+1991.103371281 I1017 10:04:13.030738 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:04:13.031598 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:04:13.031588683 +0000 UTC m=+1991.128700441 I1017 10:04:13.044162 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:04:13.044694 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:04:13.045297 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:04:13.045286226 +0000 UTC m=+1991.142397954 I1017 10:04:13.964603 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-10-17 10:04:13.964591815 +0000 UTC m=+1992.061703543 I1017 10:04:13.964767 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:04:13.964861 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-10-17 10:04:13.964848971 +0000 UTC m=+1992.061960739 I1017 10:04:13.978589 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:04:13.978650 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:04:13.978664 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-10-17 10:04:13.978660696 +0000 UTC m=+1992.075772424 I1017 10:04:14.123843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Approved" to 2026-10-17 10:04:14.123833493 +0000 UTC m=+1992.220945221 I1017 10:04:14.148446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Ready" to 2026-10-17 10:04:14.148425437 +0000 UTC m=+1992.245537195 I1017 10:04:14.181986 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:04:14.181972488 +0000 UTC m=+1992.279084216 I1017 10:04:14.198756 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:04:14.199596 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:04:14.199582317 +0000 UTC m=+1992.296694075 I1017 10:04:14.211899 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:04:14.217537 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:04:14.218358 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:04:14.218318601 +0000 UTC m=+1992.315430369 I1017 10:04:14.221256 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:07:30.095885 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-10-17 10:07:30.095847379 +0000 UTC m=+2188.192959147 I1017 10:07:30.096233 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:07:30.096294 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-10-17 10:07:30.096284489 +0000 UTC m=+2188.193396247 I1017 10:07:30.110759 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:07:30.110864 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-10-17 10:07:30.110855179 +0000 UTC m=+2188.207966947 I1017 10:07:30.296028 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:07:30.333645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Approved" to 2026-10-17 10:07:30.333631016 +0000 UTC m=+2188.430742754 I1017 10:07:30.351441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Ready" to 2026-10-17 10:07:30.351427698 +0000 UTC m=+2188.448539436 I1017 10:07:30.378268 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:07:30.378254739 +0000 UTC m=+2188.475366497 I1017 10:07:30.397337 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:07:30.398192 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:07:30.398180858 +0000 UTC m=+2188.495292626 I1017 10:07:30.419568 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:07:30.419673 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:08:00.952502 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zbg9x-vnc" condition "Ready" to 2026-10-17 10:08:00.952480625 +0000 UTC m=+2219.049592363 I1017 10:08:00.952709 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-zbg9x-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:08:00.952801 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zbg9x-vnc" condition "Issuing" to 2026-10-17 10:08:00.952790711 +0000 UTC m=+2219.049902489 I1017 10:08:00.954412 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zbg9x-api" condition "Ready" to 2026-10-17 10:08:00.954370746 +0000 UTC m=+2219.051482504 I1017 10:08:00.954524 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-zbg9x-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:08:00.954601 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zbg9x-api" condition "Issuing" to 2026-10-17 10:08:00.95458963 +0000 UTC m=+2219.051701408 I1017 10:08:00.967955 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-zbg9x-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zbg9x-api\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:08:00.968062 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zbg9x-api" condition "Ready" to 2026-10-17 10:08:00.968051727 +0000 UTC m=+2219.065163485 I1017 10:08:00.968162 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-zbg9x-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zbg9x-vnc\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:08:00.968234 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-zbg9x-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:08:00.968257 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-zbg9x-vnc" condition "Issuing" to 2026-10-17 10:08:00.968250551 +0000 UTC m=+2219.065362279 I1017 10:08:01.114814 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-zbg9x-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zbg9x-api\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:08:01.143923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-zbg9x-api-1" condition "Approved" to 2026-10-17 10:08:01.14390049 +0000 UTC m=+2219.241012258 I1017 10:08:01.164075 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-zbg9x-api-1" condition "Ready" to 2026-10-17 10:08:01.164062344 +0000 UTC m=+2219.261174102 I1017 10:08:01.188600 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-zbg9x-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:08:01.188587624 +0000 UTC m=+2219.285699392 I1017 10:08:01.205434 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-zbg9x-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zbg9x-api\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:08:01.206616 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-zbg9x-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:08:01.206604511 +0000 UTC m=+2219.303716269 I1017 10:08:01.220068 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-zbg9x-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zbg9x-api\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:08:01.225209 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-zbg9x-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zbg9x-api\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:08:01.313981 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-zbg9x-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zbg9x-vnc\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:08:01.327915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-zbg9x-vnc-1" condition "Approved" to 2026-10-17 10:08:01.327897672 +0000 UTC m=+2219.425009410 I1017 10:08:01.340989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-zbg9x-vnc-1" condition "Ready" to 2026-10-17 10:08:01.3409745 +0000 UTC m=+2219.438086258 I1017 10:08:01.371517 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-zbg9x-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:08:01.371501002 +0000 UTC m=+2219.468612760 I1017 10:08:01.384125 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-zbg9x-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zbg9x-vnc\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:08:01.421684 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-zbg9x-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-zbg9x-vnc\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:12:11.458508 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-10-17 10:12:11.45846454 +0000 UTC m=+2469.555576298 I1017 10:12:11.458652 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:12:11.458818 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-10-17 10:12:11.458805537 +0000 UTC m=+2469.555917295 I1017 10:12:11.473881 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:12:11.474043 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:12:11.474079 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-10-17 10:12:11.474071074 +0000 UTC m=+2469.571182842 I1017 10:12:11.664010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Approved" to 2026-10-17 10:12:11.663992397 +0000 UTC m=+2469.761104165 I1017 10:12:11.680687 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Ready" to 2026-10-17 10:12:11.680646914 +0000 UTC m=+2469.777758682 I1017 10:12:11.715405 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:12:11.715392739 +0000 UTC m=+2469.812504477 I1017 10:12:11.731504 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:12:11.739666 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:12:11.775348 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:12:12.961776 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:12:12.961857 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-10-17 10:12:12.96184917 +0000 UTC m=+2471.058960928 I1017 10:12:12.961850 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-10-17 10:12:12.9618288 +0000 UTC m=+2471.058940568 I1017 10:12:12.976407 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:12:12.976647 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-10-17 10:12:12.976634275 +0000 UTC m=+2471.073746033 I1017 10:12:13.111983 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:12:13.150429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Approved" to 2026-10-17 10:12:13.150344251 +0000 UTC m=+2471.247456019 I1017 10:12:13.170209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Ready" to 2026-10-17 10:12:13.170193718 +0000 UTC m=+2471.267305476 I1017 10:12:13.195254 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:12:13.19523841 +0000 UTC m=+2471.292350148 I1017 10:12:13.211979 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:12:13.212722 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:12:13.212707874 +0000 UTC m=+2471.309819642 I1017 10:12:13.226216 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:14:26.690904 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:14:26.690985 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-10-17 10:14:26.690927559 +0000 UTC m=+2604.788039327 I1017 10:14:26.691156 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-10-17 10:14:26.691041842 +0000 UTC m=+2604.788153600 I1017 10:14:26.703825 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" E1017 10:14:26.704044 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I1017 10:14:26.704088 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-10-17 10:14:26.7040816 +0000 UTC m=+2604.801193328 I1017 10:14:26.704123 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I1017 10:14:26.704227 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-10-17 10:14:26.704215092 +0000 UTC m=+2604.801326890 E1017 10:14:26.712898 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" E1017 10:14:26.713003 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I1017 10:14:26.713037 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E1017 10:14:26.713075 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" I1017 10:14:26.722509 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:14:26.757605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Approved" to 2026-10-17 10:14:26.757587708 +0000 UTC m=+2604.854699476 I1017 10:14:26.771821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Ready" to 2026-10-17 10:14:26.771810571 +0000 UTC m=+2604.868922309 I1017 10:14:26.796224 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:14:26.796209058 +0000 UTC m=+2604.893320816 I1017 10:14:26.814594 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:14:27.263075 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-10-17 10:14:27.263033979 +0000 UTC m=+2605.360145747 I1017 10:14:27.263421 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:14:27.263529 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-10-17 10:14:27.263522869 +0000 UTC m=+2605.360634607 E1017 10:14:27.275160 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I1017 10:14:27.275208 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-10-17 10:14:27.275198557 +0000 UTC m=+2605.372310315 I1017 10:14:27.275268 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I1017 10:14:27.284844 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:14:27.285002 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-10-17 10:14:27.284988433 +0000 UTC m=+2605.382100201 E1017 10:14:27.289619 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" E1017 10:14:27.289766 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I1017 10:14:27.289820 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E1017 10:14:27.289878 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" I1017 10:14:27.298434 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:14:27.327763 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Approved" to 2026-10-17 10:14:27.327751204 +0000 UTC m=+2605.424862942 I1017 10:14:27.343659 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Ready" to 2026-10-17 10:14:27.343645564 +0000 UTC m=+2605.440757322 I1017 10:14:27.370045 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:14:27.370029695 +0000 UTC m=+2605.467141433 I1017 10:14:27.386149 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:14:27.934239 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-10-17 10:14:27.934220821 +0000 UTC m=+2606.031332579 I1017 10:14:27.934295 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:14:27.934498 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-10-17 10:14:27.934485437 +0000 UTC m=+2606.031597205 I1017 10:14:27.946643 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:14:27.946771 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:14:27.946807 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-10-17 10:14:27.946797297 +0000 UTC m=+2606.043909055 I1017 10:14:27.990018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Approved" to 2026-10-17 10:14:27.98999076 +0000 UTC m=+2606.087102518 I1017 10:14:28.004876 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Ready" to 2026-10-17 10:14:28.004859397 +0000 UTC m=+2606.101971165 I1017 10:14:31.713660 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:14:31.713649747 +0000 UTC m=+2609.810761485 I1017 10:14:31.722522 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:14:31.722507172 +0000 UTC m=+2609.819618910 I1017 10:14:31.741394 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:14:31.741382708 +0000 UTC m=+2609.838494436 I1017 10:14:31.757096 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:14:31.757768 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:14:31.757757118 +0000 UTC m=+2609.854868876 I1017 10:14:31.771665 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:14:31.773009 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:14:32.290892 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:14:32.290874139 +0000 UTC m=+2610.387985897 I1017 10:17:06.686883 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:17:06.686966 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-10-17 10:17:06.686922663 +0000 UTC m=+2764.784034421 I1017 10:17:06.687087 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-10-17 10:17:06.687039285 +0000 UTC m=+2764.784151053 I1017 10:17:06.709983 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:06.710151 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:17:06.710184 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-10-17 10:17:06.710176186 +0000 UTC m=+2764.807287914 I1017 10:17:07.014477 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:07.029325 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Approved" to 2026-10-17 10:17:07.029305318 +0000 UTC m=+2765.126417086 I1017 10:17:07.050811 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Ready" to 2026-10-17 10:17:07.05079294 +0000 UTC m=+2765.147904708 I1017 10:17:07.082636 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:17:07.082626162 +0000 UTC m=+2765.179737890 I1017 10:17:07.102521 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:07.103402 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:17:07.10339141 +0000 UTC m=+2765.200503178 I1017 10:17:07.124332 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:53.621109 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-10-17 10:17:53.621083871 +0000 UTC m=+2811.718195629 I1017 10:17:53.647829 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:17:53.647904 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-10-17 10:17:53.647894352 +0000 UTC m=+2811.745006110 I1017 10:17:53.647969 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-10-17 10:17:53.647935693 +0000 UTC m=+2811.745047461 I1017 10:17:53.664632 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:53.664720 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:17:53.664746 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-10-17 10:17:53.664738143 +0000 UTC m=+2811.761849911 E1017 10:17:53.695142 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller" I1017 10:17:53.765472 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-10-17 10:17:53.765443082 +0000 UTC m=+2811.862554850 I1017 10:17:53.784839 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-10-17 10:17:53.784825319 +0000 UTC m=+2811.881937087 I1017 10:17:53.785317 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:17:53.785398 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-10-17 10:17:53.785390132 +0000 UTC m=+2811.882501890 I1017 10:17:53.797194 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:53.797290 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:17:53.797324 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-10-17 10:17:53.797317354 +0000 UTC m=+2811.894429112 E1017 10:17:53.983880 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" I1017 10:17:54.032708 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:54.043792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-10-17 10:17:54.043783995 +0000 UTC m=+2812.140895723 I1017 10:17:54.063073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-10-17 10:17:54.063030039 +0000 UTC m=+2812.160141777 I1017 10:17:54.106271 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:17:54.106251472 +0000 UTC m=+2812.203363230 I1017 10:17:54.124371 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:54.125067 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:17:54.125057996 +0000 UTC m=+2812.222169754 I1017 10:17:54.141172 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:54.141972 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:17:54.141958838 +0000 UTC m=+2812.239070596 I1017 10:17:54.148410 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:54.669982 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-10-17 10:17:54.669969653 +0000 UTC m=+2812.767081381 I1017 10:17:54.687446 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-10-17 10:17:54.687435578 +0000 UTC m=+2812.784547296 I1017 10:17:54.687710 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:17:54.687727 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-10-17 10:17:54.687724284 +0000 UTC m=+2812.784836002 I1017 10:17:54.702066 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:54.702124 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:17:54.702144 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-10-17 10:17:54.702138652 +0000 UTC m=+2812.799250380 I1017 10:17:54.957100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-10-17 10:17:54.957085409 +0000 UTC m=+2813.054197127 I1017 10:17:54.974730 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-10-17 10:17:54.974724589 +0000 UTC m=+2813.071836307 I1017 10:17:54.999977 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:17:54.999967135 +0000 UTC m=+2813.097078853 I1017 10:17:55.018504 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:55.155418 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-10-17 10:17:55.15540689 +0000 UTC m=+2813.252518608 I1017 10:17:55.180289 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-10-17 10:17:55.180281648 +0000 UTC m=+2813.277393376 I1017 10:17:55.180486 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:17:55.180501 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-10-17 10:17:55.180498093 +0000 UTC m=+2813.277609811 I1017 10:17:55.196075 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:55.196151 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-10-17 10:17:55.196143278 +0000 UTC m=+2813.293255006 I1017 10:17:55.305472 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:55.338346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-10-17 10:17:55.33832469 +0000 UTC m=+2813.435436418 I1017 10:17:55.356380 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-10-17 10:17:55.356365588 +0000 UTC m=+2813.453477316 I1017 10:17:55.376413 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:17:55.376403579 +0000 UTC m=+2813.473515307 I1017 10:17:55.392176 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:55.392529 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:17:55.392521645 +0000 UTC m=+2813.489633373 I1017 10:17:55.584265 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:55.637560 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-10-17 10:17:55.637526813 +0000 UTC m=+2813.734638541 I1017 10:17:55.655152 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-10-17 10:17:55.655136691 +0000 UTC m=+2813.752248419 I1017 10:17:55.655362 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:17:55.658357 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-10-17 10:17:55.65825025 +0000 UTC m=+2813.755361988 I1017 10:17:55.780085 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:55.780188 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:17:55.780217 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-10-17 10:17:55.780209887 +0000 UTC m=+2813.877321615 I1017 10:17:56.078125 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:56.154825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-10-17 10:17:56.154816461 +0000 UTC m=+2814.251928189 I1017 10:17:56.241739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-10-17 10:17:56.241730257 +0000 UTC m=+2814.338841985 I1017 10:17:56.681204 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:17:56.68119219 +0000 UTC m=+2814.778303918 I1017 10:17:56.833005 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:56.833832 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:17:56.833823133 +0000 UTC m=+2814.930934891 I1017 10:17:57.078523 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:17:57.129121 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:21:29.579750 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-10-17 10:21:29.579703748 +0000 UTC m=+3027.676815516 I1017 10:21:29.579910 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:21:29.579969 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-10-17 10:21:29.579959364 +0000 UTC m=+3027.677071122 I1017 10:21:29.594358 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:21:29.594446 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-10-17 10:21:29.594438433 +0000 UTC m=+3027.691550201 I1017 10:21:29.775073 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:21:29.821874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-1" condition "Approved" to 2026-10-17 10:21:29.821863244 +0000 UTC m=+3027.918974982 I1017 10:21:29.843675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-1" condition "Ready" to 2026-10-17 10:21:29.843665904 +0000 UTC m=+3027.940777642 I1017 10:21:29.875424 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:21:29.875415554 +0000 UTC m=+3027.972527282 I1017 10:21:29.888648 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:21:29.889768 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:21:29.88975913 +0000 UTC m=+3027.986870868 I1017 10:21:29.912422 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:25:52.894515 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:25:52.894632 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-10-17 10:25:52.894577954 +0000 UTC m=+3290.991689712 I1017 10:25:52.895149 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-10-17 10:25:52.894458221 +0000 UTC m=+3290.991569949 I1017 10:25:52.910794 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:25:52.915282 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-10-17 10:25:52.915259519 +0000 UTC m=+3291.012371267 I1017 10:25:53.247080 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:25:53.286214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Approved" to 2026-10-17 10:25:53.286200276 +0000 UTC m=+3291.383312014 I1017 10:25:53.307790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-1" condition "Ready" to 2026-10-17 10:25:53.307770092 +0000 UTC m=+3291.404881860 I1017 10:25:53.337954 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:25:53.337939717 +0000 UTC m=+3291.435051475 I1017 10:25:53.366559 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:25:53.414161 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:26:32.624947 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-10-17 10:26:32.624910984 +0000 UTC m=+3330.722022752 I1017 10:26:32.625051 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:26:32.625096 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-10-17 10:26:32.625082988 +0000 UTC m=+3330.722194746 I1017 10:26:32.641794 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:26:32.641962 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I1017 10:26:32.641993 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-10-17 10:26:32.641984221 +0000 UTC m=+3330.739095959 I1017 10:26:32.975365 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Approved" to 2026-10-17 10:26:32.975353559 +0000 UTC m=+3331.072465287 I1017 10:26:32.994029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-1" condition "Ready" to 2026-10-17 10:26:32.994017751 +0000 UTC m=+3331.091129499 I1017 10:26:33.032815 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:26:33.032721535 +0000 UTC m=+3331.129833293 I1017 10:26:33.061156 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I1017 10:26:33.062383 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-10-17 10:26:33.062371468 +0000 UTC m=+3331.159483196 I1017 10:26:33.078850 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"