I0730 21:08:07.119805 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0730 21:08:07.119994 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0730 21:08:07.124721 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0730 21:08:07.124755 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0730 21:08:07.124768 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0730 21:08:07.125667 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0730 21:08:07.125744 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0730 21:08:07.125788 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0730 21:08:07.129319 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0730 21:08:07.143875 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0730 21:08:07.148894 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0730 21:08:07.151105 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0730 21:08:07.153354 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0730 21:08:07.153459 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0730 21:08:07.156155 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0730 21:08:07.158386 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0730 21:08:07.164381 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0730 21:08:07.167095 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0730 21:08:07.169688 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0730 21:08:07.172216 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0730 21:08:07.172240 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0730 21:08:07.172246 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0730 21:08:07.172284 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0730 21:08:07.174396 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0730 21:08:07.176303 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0730 21:08:07.180505 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0730 21:08:07.184466 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0730 21:08:07.188284 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0730 21:08:07.190013 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0730 21:08:07.190032 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0730 21:08:07.190140 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0730 21:08:07.191954 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0730 21:08:07.194037 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0730 21:08:07.195837 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0730 21:08:07.197960 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0730 21:08:07.197965 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0730 21:08:07.200144 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0730 21:08:07.200369 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0730 21:08:07.204649 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0730 21:08:07.204782 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0730 21:08:07.204952 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0730 21:08:07.205015 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0730 21:08:07.205179 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0730 21:08:07.205259 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0730 21:08:07.205486 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0730 21:08:21.199992 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-30 21:08:21.19995656 +0000 UTC m=+14.103952053 I0730 21:08:21.919030 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0730 21:08:21.919065 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-30 21:08:21.919056254 +0000 UTC m=+14.823051727 I0730 21:08:21.919078 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-30 21:08:21.919065134 +0000 UTC m=+14.823060627 E0730 21:08:21.931187 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0730 21:08:21.931256 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-30 21:08:21.931244241 +0000 UTC m=+14.835239744 E0730 21:08:21.931414 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0730 21:08:21.931966 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:08:21.932147 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0730 21:08:21.932259 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-30 21:08:21.932226563 +0000 UTC m=+14.836222066 E0730 21:08:21.940048 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0730 21:08:21.940226 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0730 21:08:21.940301 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0730 21:08:21.940369 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0730 21:08:21.960409 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:08:21.972948 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-30 21:08:21.97293204 +0000 UTC m=+14.876927543 I0730 21:08:21.997543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-30 21:08:21.997530311 +0000 UTC m=+14.901525784 I0730 21:08:22.020983 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:08:22.020969814 +0000 UTC m=+14.924965307 I0730 21:08:22.034203 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:08:22.034659 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:08:22.034654196 +0000 UTC m=+14.938649669 I0730 21:08:22.047929 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:08:26.940811 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:08:26.940792026 +0000 UTC m=+19.844787519 I0730 21:08:47.126084 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-30 21:08:47.126061687 +0000 UTC m=+40.030057160 I0730 21:08:47.126094 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0730 21:08:47.126406 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-30 21:08:47.126390884 +0000 UTC m=+40.030386357 I0730 21:08:47.135852 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-30 21:08:47.135837848 +0000 UTC m=+40.039833321 I0730 21:08:47.140378 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:08:47.140525 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0730 21:08:47.140651 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-30 21:08:47.140639058 +0000 UTC m=+40.044634531 I0730 21:08:47.488536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-30 21:08:47.488523472 +0000 UTC m=+40.392518945 I0730 21:08:47.509759 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-30 21:08:47.509746964 +0000 UTC m=+40.413742437 I0730 21:08:47.545727 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:08:47.545710519 +0000 UTC m=+40.449706002 I0730 21:08:47.557868 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:08:47.558745 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:08:47.558735885 +0000 UTC m=+40.462731358 I0730 21:08:47.567656 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:08:47.573914 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:18:27.009262 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-48.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0730 21:18:27.009299 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-48.nip.io-tls" condition "Issuing" to 2026-07-30 21:18:27.009291916 +0000 UTC m=+619.913287389 I0730 21:18:27.009358 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-48.nip.io-tls" condition "Ready" to 2026-07-30 21:18:27.009344687 +0000 UTC m=+619.913340160 I0730 21:18:27.023402 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-48.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-48.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:18:27.023476 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-48.nip.io-tls" condition "Ready" to 2026-07-30 21:18:27.023469789 +0000 UTC m=+619.927465262 I0730 21:18:27.280196 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-48.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-48.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:18:27.316455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-48.nip.io-tls-1" condition "Approved" to 2026-07-30 21:18:27.316441489 +0000 UTC m=+620.220436972 I0730 21:18:27.333786 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-48.nip.io-tls-1" condition "Ready" to 2026-07-30 21:18:27.333771842 +0000 UTC m=+620.237767345 I0730 21:18:27.358197 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-48.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:18:27.358181862 +0000 UTC m=+620.262177365 I0730 21:18:27.374661 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-48.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-48.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:18:27.375837 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-48.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:18:27.375824552 +0000 UTC m=+620.279820045 I0730 21:18:27.383213 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-48.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-48.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:18:27.390620 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-48.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-48.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:22:20.877616 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0730 21:22:20.877599 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-30 21:22:20.877556417 +0000 UTC m=+853.781551900 I0730 21:22:20.877679 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-30 21:22:20.87767103 +0000 UTC m=+853.781666493 I0730 21:22:20.886971 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:22:20.887060 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0730 21:22:20.887082 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-30 21:22:20.887076137 +0000 UTC m=+853.791071620 I0730 21:22:21.009379 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:22:21.028684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-30 21:22:21.028665607 +0000 UTC m=+853.932661100 I0730 21:22:21.043299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-30 21:22:21.043287139 +0000 UTC m=+853.947282612 I0730 21:22:21.065264 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:22:21.065252753 +0000 UTC m=+853.969248226 I0730 21:22:21.079571 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:22:21.080422 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:22:21.080409547 +0000 UTC m=+853.984405050 I0730 21:22:21.091821 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:25:05.876084 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0730 21:25:05.876092 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-30 21:25:05.876078173 +0000 UTC m=+1018.780073666 I0730 21:25:05.876173 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-30 21:25:05.876162575 +0000 UTC m=+1018.780158078 I0730 21:25:05.887326 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:25:05.887431 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0730 21:25:05.887465 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-30 21:25:05.887454984 +0000 UTC m=+1018.791450487 I0730 21:25:06.047101 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:25:06.064641 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Approved" to 2026-07-30 21:25:06.064625185 +0000 UTC m=+1018.968620648 I0730 21:25:06.079413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Ready" to 2026-07-30 21:25:06.079406 +0000 UTC m=+1018.983401473 I0730 21:25:06.101091 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:25:06.101073908 +0000 UTC m=+1019.005069411 I0730 21:25:06.120001 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:25:06.121619 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:25:06.121610269 +0000 UTC m=+1019.025605762 I0730 21:25:06.133615 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:25:06.134228 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:25:06.134216676 +0000 UTC m=+1019.038212139 I0730 21:27:00.832290 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0730 21:27:00.832353 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-30 21:27:00.832343765 +0000 UTC m=+1133.736339238 I0730 21:27:00.832417 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-30 21:27:00.832395786 +0000 UTC m=+1133.736391279 I0730 21:27:00.845022 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:27:00.845184 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0730 21:27:00.845207 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-30 21:27:00.845200859 +0000 UTC m=+1133.749196332 I0730 21:27:00.942355 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0730 21:27:00.958645 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-07-30 21:27:00.958619019 +0000 UTC m=+1133.862614532 I0730 21:27:00.973654 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-07-30 21:27:00.97364478 +0000 UTC m=+1133.877640243 I0730 21:27:00.997480 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-30 21:27:00.997468855 +0000 UTC m=+1133.901464328 I0730 21:27:01.013493 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"