I0907 18:21:20.900927 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0907 18:21:20.901075 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0907 18:21:20.901188 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0907 18:21:20.905705 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0907 18:21:20.906224 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0907 18:21:20.906252 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0907 18:21:20.906272 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0907 18:21:20.909952 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0907 18:21:20.924855 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0907 18:21:20.931228 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0907 18:21:20.935621 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0907 18:21:20.939589 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0907 18:21:20.939726 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0907 18:21:20.943443 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0907 18:21:20.943485 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0907 18:21:20.947273 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0907 18:21:20.950802 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0907 18:21:20.950835 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0907 18:21:20.950856 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0907 18:21:20.950867 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0907 18:21:20.950910 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0907 18:21:20.957152 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0907 18:21:20.960901 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0907 18:21:20.964511 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0907 18:21:20.967955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0907 18:21:20.971885 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0907 18:21:20.975970 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0907 18:21:20.979642 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0907 18:21:20.983308 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0907 18:21:20.989005 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0907 18:21:20.993055 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0907 18:21:20.996584 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0907 18:21:21.000481 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0907 18:21:21.002960 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:21:21.003706 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:21:21.004239 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:21:21.025832 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:21:21.069817 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:21:21.093954 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:21:21.114551 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:21:21.139682 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:21:21.145734 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:21:21.158228 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 18:21:34.341535 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-07 18:21:34.341523009 +0000 UTC m=+13.483190963 I0907 18:21:35.113421 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:21:35.113504 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 18:21:35.113491535 +0000 UTC m=+14.255159529 I0907 18:21:35.113770 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 18:21:35.113564938 +0000 UTC m=+14.255232932 E0907 18:21:35.127867 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 18:21:35.127935 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-07 18:21:35.127927871 +0000 UTC m=+14.269595825 E0907 18:21:35.127956 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 18:21:35.129338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:21:35.129417 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:21:35.129449 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 18:21:35.129441257 +0000 UTC m=+14.271109241 E0907 18:21:35.142418 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0907 18:21:35.142541 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 18:21:35.142584 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 18:21:35.142653 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0907 18:21:35.172650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-c5z7f" condition "Approved" to 2026-09-07 18:21:35.172636532 +0000 UTC m=+14.314304516 I0907 18:21:35.187437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-c5z7f" condition "Ready" to 2026-09-07 18:21:35.187419359 +0000 UTC m=+14.329087353 I0907 18:21:35.210777 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:21:35.210761434 +0000 UTC m=+14.352429418 I0907 18:21:35.229330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:21:35.270394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:21:40.142890 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:21:40.142874098 +0000 UTC m=+19.284542082 I0907 18:21:59.489960 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-07 18:21:59.489944949 +0000 UTC m=+38.631612913 I0907 18:21:59.490470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:21:59.490495 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 18:21:59.490491045 +0000 UTC m=+38.632159009 I0907 18:21:59.501831 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-07 18:21:59.501816018 +0000 UTC m=+38.643484002 I0907 18:21:59.510057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:21:59.510142 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:21:59.510201 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 18:21:59.510193431 +0000 UTC m=+38.651861425 I0907 18:21:59.739184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fdbg7" condition "Approved" to 2026-09-07 18:21:59.73917512 +0000 UTC m=+38.880843074 I0907 18:21:59.773675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fdbg7" condition "Ready" to 2026-09-07 18:21:59.773658791 +0000 UTC m=+38.915326785 I0907 18:21:59.809675 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:21:59.8096564 +0000 UTC m=+38.951324384 I0907 18:21:59.834506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:23:42.696052 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-07 18:23:42.696022828 +0000 UTC m=+141.837690782 I0907 18:23:42.696292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:23:42.696423 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-07 18:23:42.696362438 +0000 UTC m=+141.838030432 I0907 18:23:42.721577 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:23:42.721759 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-07 18:23:42.721747516 +0000 UTC m=+141.863415530 E0907 18:23:42.722321 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 18:23:42.722422 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-07 18:23:42.722392955 +0000 UTC m=+141.864060909 I0907 18:23:42.722443 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0907 18:23:42.734391 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0907 18:23:42.734720 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 18:23:42.734752 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0907 18:23:42.734821 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0907 18:23:42.737550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:23:42.737551 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-07 18:23:42.737534253 +0000 UTC m=+141.879202217 I0907 18:23:42.737587 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-07 18:23:42.737578634 +0000 UTC m=+141.879246618 I0907 18:23:42.754819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:23:42.754878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:23:42.754893 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-07 18:23:42.754887649 +0000 UTC m=+141.896555603 I0907 18:23:42.966246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:23:42.974245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-sfm4c" condition "Approved" to 2026-09-07 18:23:42.974226694 +0000 UTC m=+142.115894678 I0907 18:23:42.997304 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-sfm4c" condition "Ready" to 2026-09-07 18:23:42.997294652 +0000 UTC m=+142.138962606 I0907 18:23:43.128732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:23:43.164119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-hrmf4" condition "Approved" to 2026-09-07 18:23:43.164108259 +0000 UTC m=+142.305776213 I0907 18:23:43.194342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-hrmf4" condition "Ready" to 2026-09-07 18:23:43.194328434 +0000 UTC m=+142.335996398 I0907 18:23:43.225107 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:23:43.225097924 +0000 UTC m=+142.366765878 I0907 18:23:43.246357 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:23:43.297229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:23:47.734898 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:23:47.734886211 +0000 UTC m=+146.876554195 I0907 18:23:47.750083 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-sfm4c" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:23:47.750069981 +0000 UTC m=+146.891737975 I0907 18:23:47.782815 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:23:47.782797192 +0000 UTC m=+146.924465176 I0907 18:23:47.804929 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:23:47.805419 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:23:47.805411175 +0000 UTC m=+146.947079159 I0907 18:23:47.825724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:23:47.832930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:45.221244 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-144.nip.io-tls" condition "Ready" to 2026-09-07 18:26:45.221221259 +0000 UTC m=+324.362889213 I0907 18:26:45.221639 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:26:45.221693 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-144.nip.io-tls" condition "Issuing" to 2026-09-07 18:26:45.221683723 +0000 UTC m=+324.363351687 I0907 18:26:45.241742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:45.241847 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-144.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:26:45.241876 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-144.nip.io-tls" condition "Issuing" to 2026-09-07 18:26:45.241870164 +0000 UTC m=+324.383538118 I0907 18:26:45.361559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:45.370635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-144.nip.io-tls-dvkm9" condition "Approved" to 2026-09-07 18:26:45.370619379 +0000 UTC m=+324.512287363 I0907 18:26:45.392777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-144.nip.io-tls-dvkm9" condition "Ready" to 2026-09-07 18:26:45.392766388 +0000 UTC m=+324.534434352 I0907 18:26:45.421405 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:26:45.421389235 +0000 UTC m=+324.563057229 I0907 18:26:45.478495 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:45.478782 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:26:45.478775551 +0000 UTC m=+324.620443525 I0907 18:26:45.493614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-144.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-144.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:26:45.493838 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-144.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:26:45.493833587 +0000 UTC m=+324.635501551 I0907 18:27:58.588184 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 18:27:58.58814215 +0000 UTC m=+397.729810124 I0907 18:27:58.588218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:27:58.588288 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 18:27:58.588280014 +0000 UTC m=+397.729947988 E0907 18:27:58.604600 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 18:27:58.604708 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-07 18:27:58.604700941 +0000 UTC m=+397.746368905 E0907 18:27:58.604765 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 18:27:58.609998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:27:58.610229 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 18:27:58.610214678 +0000 UTC m=+397.751882702 E0907 18:27:58.626144 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0907 18:27:58.626715 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 18:27:58.626756 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 18:27:58.626825 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0907 18:27:58.629294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:27:58.629405 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 18:27:58.629398479 +0000 UTC m=+397.771066433 I0907 18:27:58.629536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xvprr" condition "Approved" to 2026-09-07 18:27:58.629529213 +0000 UTC m=+397.771197167 I0907 18:27:58.641793 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-xvprr" condition "Ready" to 2026-09-07 18:27:58.641781734 +0000 UTC m=+397.783449728 I0907 18:27:58.660237 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:27:58.660221982 +0000 UTC m=+397.801889956 I0907 18:27:58.677706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:27:58.722356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:03.627020 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:28:03.627007193 +0000 UTC m=+402.768675187 I0907 18:28:43.613825 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-07 18:28:43.613807358 +0000 UTC m=+442.755475342 I0907 18:28:43.614229 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:28:43.614293 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 18:28:43.614286012 +0000 UTC m=+442.755954006 I0907 18:28:43.626224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:28:43.626268 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 18:28:43.626258785 +0000 UTC m=+442.767926769 I0907 18:28:43.627414 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 18:28:43.62740473 +0000 UTC m=+442.769072754 I0907 18:28:43.628381 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:28:43.628410 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 18:28:43.628404599 +0000 UTC m=+442.770072593 I0907 18:28:43.628855 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-07 18:28:43.628847093 +0000 UTC m=+442.770515077 I0907 18:28:43.648973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:43.649057 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-07 18:28:43.649048024 +0000 UTC m=+442.790716018 I0907 18:28:43.651192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:43.651265 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:28:43.651284 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 18:28:43.651278332 +0000 UTC m=+442.792946296 I0907 18:28:43.651563 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:43.651596 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 18:28:43.651592621 +0000 UTC m=+442.793260585 I0907 18:28:43.948858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:43.989059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zkgz6" condition "Approved" to 2026-09-07 18:28:43.989046952 +0000 UTC m=+443.130714906 I0907 18:28:44.008466 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zkgz6" condition "Ready" to 2026-09-07 18:28:44.008456359 +0000 UTC m=+443.150124323 I0907 18:28:44.008765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:44.037753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qm46x" condition "Approved" to 2026-09-07 18:28:44.037741975 +0000 UTC m=+443.179409939 I0907 18:28:44.062984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-qm46x" condition "Ready" to 2026-09-07 18:28:44.062973099 +0000 UTC m=+443.204641063 I0907 18:28:44.095556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:28:44.095582 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 18:28:44.095576535 +0000 UTC m=+443.237244489 I0907 18:28:44.099028 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:28:44.099018989 +0000 UTC m=+443.240686943 I0907 18:28:44.109074 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:28:44.109062563 +0000 UTC m=+443.250730527 I0907 18:28:44.116488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:44.116762 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:28:44.116755746 +0000 UTC m=+443.258423700 I0907 18:28:44.120712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:44.125025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:44.125385 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:28:44.125379136 +0000 UTC m=+443.267047100 I0907 18:28:44.347798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" E0907 18:28:44.446565 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-b4vrm\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0907 18:28:44.551729 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-khwbk" condition "Approved" to 2026-09-07 18:28:44.551717227 +0000 UTC m=+443.693385181 I0907 18:28:44.757334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-khwbk" condition "Ready" to 2026-09-07 18:28:44.757321938 +0000 UTC m=+443.898989922 I0907 18:28:45.100629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mzskm" condition "Approved" to 2026-09-07 18:28:45.100612005 +0000 UTC m=+444.242279989 I0907 18:28:45.360143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mzskm" condition "Ready" to 2026-09-07 18:28:45.360124207 +0000 UTC m=+444.501792201 I0907 18:28:45.898068 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:28:45.898050223 +0000 UTC m=+445.039718207 I0907 18:28:46.147062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:46.147471 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:28:46.1474608 +0000 UTC m=+445.289128784 I0907 18:28:46.197878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:46.448233 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:52.238395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:28:52.238410 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls" condition "Ready" to 2026-09-07 18:28:52.238401246 +0000 UTC m=+451.380069190 I0907 18:28:52.238431 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls" condition "Issuing" to 2026-09-07 18:28:52.238423636 +0000 UTC m=+451.380091620 I0907 18:28:52.255689 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:52.255780 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls" condition "Ready" to 2026-09-07 18:28:52.255770711 +0000 UTC m=+451.397438705 I0907 18:28:52.795394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:52.946432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-q8hq2-6ngq2" condition "Approved" to 2026-09-07 18:28:52.946417007 +0000 UTC m=+452.088084961 I0907 18:28:52.967302 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-q8hq2-6ngq2" condition "Ready" to 2026-09-07 18:28:52.967291059 +0000 UTC m=+452.108959003 I0907 18:28:52.998776 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:28:52.998750632 +0000 UTC m=+452.140418586 I0907 18:28:53.024271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:53.024667 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:28:53.024657145 +0000 UTC m=+452.166325129 I0907 18:28:53.056666 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:28:53.057400 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-q8hq2-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:28:53.057065957 +0000 UTC m=+452.198733941 I0907 18:29:19.783019 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:29:19.783050 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-07 18:29:19.783043873 +0000 UTC m=+478.924711827 I0907 18:29:19.783401 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 18:29:19.783396334 +0000 UTC m=+478.925064288 I0907 18:29:19.810853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:29:19.813405 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 18:29:19.813397142 +0000 UTC m=+478.955065086 I0907 18:29:19.934855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:29:19.964558 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-57p5h" condition "Approved" to 2026-09-07 18:29:19.964540715 +0000 UTC m=+479.106208699 I0907 18:29:19.985023 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-57p5h" condition "Ready" to 2026-09-07 18:29:19.985012525 +0000 UTC m=+479.126680469 I0907 18:29:20.019449 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:29:20.019436576 +0000 UTC m=+479.161104530 I0907 18:29:20.045152 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:32:54.422959 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 18:32:54.42277013 +0000 UTC m=+693.564438134 I0907 18:32:54.423030 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:32:54.423375 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 18:32:54.423354049 +0000 UTC m=+693.565022043 I0907 18:32:54.441785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:32:54.441859 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:32:54.441874 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 18:32:54.441866648 +0000 UTC m=+693.583534612 I0907 18:32:54.652383 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:32:54.662195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-v6qsz" condition "Approved" to 2026-09-07 18:32:54.662181916 +0000 UTC m=+693.803849890 I0907 18:32:54.684856 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-v6qsz" condition "Ready" to 2026-09-07 18:32:54.684843407 +0000 UTC m=+693.826511401 I0907 18:32:54.722275 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:32:54.722266438 +0000 UTC m=+693.863934382 I0907 18:32:54.742737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:32:54.743026 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:32:54.743021229 +0000 UTC m=+693.884689183 I0907 18:32:54.748107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:32:54.760656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:32:54.762284 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:32:54.762612 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:32:54.762603841 +0000 UTC m=+693.904271795 I0907 18:35:22.271119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:35:22.271166 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-07 18:35:22.271151667 +0000 UTC m=+841.412819631 I0907 18:35:22.271199 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-07 18:35:22.271189168 +0000 UTC m=+841.412857152 I0907 18:35:22.295283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:35:22.295373 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-07 18:35:22.295363461 +0000 UTC m=+841.437031445 I0907 18:35:22.564639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:35:22.601194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qsvds" condition "Approved" to 2026-09-07 18:35:22.601184585 +0000 UTC m=+841.742852549 I0907 18:35:22.622087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qsvds" condition "Ready" to 2026-09-07 18:35:22.622080089 +0000 UTC m=+841.763748053 I0907 18:35:22.653386 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:35:22.653354108 +0000 UTC m=+841.795022062 I0907 18:35:22.675971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:36:31.918626 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-07 18:36:31.918609912 +0000 UTC m=+911.060277896 I0907 18:36:31.918992 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:36:31.919036 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-07 18:36:31.919027814 +0000 UTC m=+911.060695768 I0907 18:36:31.937023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:36:31.937113 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-07 18:36:31.937106285 +0000 UTC m=+911.078774239 I0907 18:36:32.140898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:36:32.183580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-wf6rm" condition "Approved" to 2026-09-07 18:36:32.183565355 +0000 UTC m=+911.325233309 I0907 18:36:32.205873 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-wf6rm" condition "Ready" to 2026-09-07 18:36:32.205862494 +0000 UTC m=+911.347530448 I0907 18:36:32.251473 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:36:32.251456041 +0000 UTC m=+911.393124025 I0907 18:36:32.286819 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:36:32.287280 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:36:32.287270141 +0000 UTC m=+911.428938115 I0907 18:36:32.299568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:36:32.310478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:39:34.809227 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-07 18:39:34.809173523 +0000 UTC m=+1093.950841507 I0907 18:39:34.809282 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:39:34.810168 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-07 18:39:34.810152013 +0000 UTC m=+1093.951820017 I0907 18:39:34.831899 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:39:34.831995 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-07 18:39:34.831988491 +0000 UTC m=+1093.973656455 I0907 18:39:35.033691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:39:35.062767 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-snxl9" condition "Approved" to 2026-09-07 18:39:35.062752855 +0000 UTC m=+1094.204420849 I0907 18:39:35.085333 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-snxl9" condition "Ready" to 2026-09-07 18:39:35.085323356 +0000 UTC m=+1094.226991320 I0907 18:39:35.114808 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:39:35.114794418 +0000 UTC m=+1094.256462402 I0907 18:39:35.140302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:45:49.938145 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:45:49.938244 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-07 18:45:49.938237364 +0000 UTC m=+1469.079905318 I0907 18:45:49.938536 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-07 18:45:49.938532733 +0000 UTC m=+1469.080200687 I0907 18:45:49.961413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:45:49.961477 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-07 18:45:49.961470874 +0000 UTC m=+1469.103138838 I0907 18:45:50.181173 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:45:50.218718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-c2fxw" condition "Approved" to 2026-09-07 18:45:50.218698057 +0000 UTC m=+1469.360366011 I0907 18:45:50.242145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-c2fxw" condition "Ready" to 2026-09-07 18:45:50.242134634 +0000 UTC m=+1469.383802598 I0907 18:45:50.275068 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:45:50.275048049 +0000 UTC m=+1469.416716033 I0907 18:45:50.300206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:45:50.300650 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:45:50.300617431 +0000 UTC m=+1469.442285395 I0907 18:45:50.331981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:47:14.927502 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-07 18:47:14.927487313 +0000 UTC m=+1554.069155277 I0907 18:47:14.928035 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:47:14.928056 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-07 18:47:14.92805214 +0000 UTC m=+1554.069720104 I0907 18:47:14.953644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:47:14.953780 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-07 18:47:14.953768275 +0000 UTC m=+1554.095436269 I0907 18:47:15.132914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:47:15.163185 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-js29c" condition "Approved" to 2026-09-07 18:47:15.163170594 +0000 UTC m=+1554.304838588 I0907 18:47:15.182830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-js29c" condition "Ready" to 2026-09-07 18:47:15.182817214 +0000 UTC m=+1554.324485208 I0907 18:47:15.208496 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:47:15.208478508 +0000 UTC m=+1554.350146492 I0907 18:47:15.234796 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:47:15.235273 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:47:15.235265147 +0000 UTC m=+1554.376933131 I0907 18:47:15.259681 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:48:16.772864 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-07 18:48:16.772784057 +0000 UTC m=+1615.914452051 I0907 18:48:16.772902 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:48:16.773006 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-07 18:48:16.772979933 +0000 UTC m=+1615.914647917 I0907 18:48:16.797217 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:48:16.797332 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-07 18:48:16.797315097 +0000 UTC m=+1615.938983091 I0907 18:48:16.828725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:48:16.829287 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-07 18:48:16.829271163 +0000 UTC m=+1615.970939227 I0907 18:48:16.833994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-6w95h" condition "Approved" to 2026-09-07 18:48:16.833977987 +0000 UTC m=+1615.975645991 I0907 18:48:16.850349 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-07 18:48:16.850330507 +0000 UTC m=+1615.991998491 I0907 18:48:16.852406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-6w95h" condition "Ready" to 2026-09-07 18:48:16.852391619 +0000 UTC m=+1615.994059613 I0907 18:48:16.862665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:48:16.888116 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:48:16.888093691 +0000 UTC m=+1616.029761685 I0907 18:48:16.912657 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:48:16.913850 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:48:16.913836927 +0000 UTC m=+1616.055504921 I0907 18:48:16.921422 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:48:16.932572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:48:17.382253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:48:17.382284 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-07 18:48:17.38227684 +0000 UTC m=+1616.523944804 I0907 18:48:17.382493 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-07 18:48:17.382474786 +0000 UTC m=+1616.524142770 I0907 18:48:17.420356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:48:17.420460 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-07 18:48:17.420451877 +0000 UTC m=+1616.562119821 I0907 18:48:17.440739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:48:17.478776 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-prhcr" condition "Approved" to 2026-09-07 18:48:17.478751177 +0000 UTC m=+1616.620419171 I0907 18:48:17.500337 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-prhcr" condition "Ready" to 2026-09-07 18:48:17.500316357 +0000 UTC m=+1616.641984311 I0907 18:48:17.559859 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:48:17.559841455 +0000 UTC m=+1616.701509409 I0907 18:48:17.611776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:48:17.612065 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:48:17.612058681 +0000 UTC m=+1616.753726635 I0907 18:48:17.626603 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:48:17.640279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:48:17.640631 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:48:17.640624024 +0000 UTC m=+1616.782291968 I0907 18:48:18.110367 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-07 18:48:18.110353477 +0000 UTC m=+1617.252021461 I0907 18:48:18.762918 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-07 18:48:18.762904535 +0000 UTC m=+1617.904572519 I0907 18:49:03.759956 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:49:03.759995 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-07 18:49:03.759987841 +0000 UTC m=+1662.901655805 I0907 18:49:03.760095 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-07 18:49:03.760079314 +0000 UTC m=+1662.901747268 I0907 18:49:03.805133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:49:03.805501 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-07 18:49:03.805494851 +0000 UTC m=+1662.947162805 I0907 18:49:05.830645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:49:05.880327 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-vb49f" condition "Approved" to 2026-09-07 18:49:05.880316227 +0000 UTC m=+1665.021984181 I0907 18:49:05.908183 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-vb49f" condition "Ready" to 2026-09-07 18:49:05.908167148 +0000 UTC m=+1665.049835132 I0907 18:49:05.950109 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:49:05.950096359 +0000 UTC m=+1665.091764333 I0907 18:49:05.975585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:51:36.532222 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:51:36.532307 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-07 18:51:36.532297742 +0000 UTC m=+1815.673965736 I0907 18:51:36.532208 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-07 18:51:36.532145067 +0000 UTC m=+1815.673813061 I0907 18:51:36.554125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:51:36.554405 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-07 18:51:36.554393367 +0000 UTC m=+1815.696061361 I0907 18:51:36.666202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:51:36.708788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-bf9ht" condition "Approved" to 2026-09-07 18:51:36.708778273 +0000 UTC m=+1815.850446237 I0907 18:51:36.732176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-bf9ht" condition "Ready" to 2026-09-07 18:51:36.732162918 +0000 UTC m=+1815.873830882 I0907 18:51:36.758383 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:51:36.758368368 +0000 UTC m=+1815.900036352 I0907 18:51:36.781998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:51:36.784784 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:51:36.784776575 +0000 UTC m=+1815.926444529 I0907 18:51:36.788147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:51:36.803860 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:51:37.827166 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:51:37.827207 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-07 18:51:37.827199248 +0000 UTC m=+1816.968867232 I0907 18:51:37.827159 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-07 18:51:37.827140667 +0000 UTC m=+1816.968808651 I0907 18:51:37.846404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:51:37.846491 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-07 18:51:37.846481858 +0000 UTC m=+1816.988149842 I0907 18:51:38.000951 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:51:38.042963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-xgtdk" condition "Approved" to 2026-09-07 18:51:38.042952449 +0000 UTC m=+1817.184620403 I0907 18:51:38.067435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-xgtdk" condition "Ready" to 2026-09-07 18:51:38.067420867 +0000 UTC m=+1817.209088861 I0907 18:51:38.101900 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:51:38.101879559 +0000 UTC m=+1817.243547573 I0907 18:51:38.138851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:51:38.139183 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:51:38.139175879 +0000 UTC m=+1817.280843843 I0907 18:51:38.153862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:51:38.168616 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:54:39.243872 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:54:39.243904 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-07 18:54:39.243898019 +0000 UTC m=+1998.385565973 I0907 18:54:39.244376 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-07 18:54:39.244371553 +0000 UTC m=+1998.386039507 I0907 18:54:39.261178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:54:39.261306 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:54:39.261331 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-07 18:54:39.261325551 +0000 UTC m=+1998.402993515 I0907 18:54:39.436865 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-hdz87" condition "Approved" to 2026-09-07 18:54:39.436845601 +0000 UTC m=+1998.578513595 I0907 18:54:39.455968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-hdz87" condition "Ready" to 2026-09-07 18:54:39.455953723 +0000 UTC m=+1998.597621707 I0907 18:54:39.492927 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:54:39.492909012 +0000 UTC m=+1998.634577006 I0907 18:54:39.519456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:54:39.519728 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:54:39.519723641 +0000 UTC m=+1998.661391585 I0907 18:54:39.550006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:55:45.658048 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-kjvfd-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:55:45.658094 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-kjvfd-vnc" condition "Issuing" to 2026-09-07 18:55:45.658084817 +0000 UTC m=+2064.799752811 I0907 18:55:45.658087 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-kjvfd-vnc" condition "Ready" to 2026-09-07 18:55:45.658068946 +0000 UTC m=+2064.799736920 I0907 18:55:45.660937 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-kjvfd-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:55:45.660982 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-kjvfd-api" condition "Issuing" to 2026-09-07 18:55:45.660971535 +0000 UTC m=+2064.802639519 I0907 18:55:45.661302 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-kjvfd-api" condition "Ready" to 2026-09-07 18:55:45.660698156 +0000 UTC m=+2064.802366150 I0907 18:55:45.683531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-kjvfd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kjvfd-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:55:45.683705 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-kjvfd-api" condition "Ready" to 2026-09-07 18:55:45.683691839 +0000 UTC m=+2064.825359833 I0907 18:55:45.684780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-kjvfd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kjvfd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:55:45.684876 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-kjvfd-vnc" condition "Ready" to 2026-09-07 18:55:45.684869014 +0000 UTC m=+2064.826536998 I0907 18:55:45.816110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-kjvfd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kjvfd-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:55:45.862935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-kjvfd-api-vfd98" condition "Approved" to 2026-09-07 18:55:45.862915462 +0000 UTC m=+2065.004583446 I0907 18:55:45.885279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-kjvfd-api-vfd98" condition "Ready" to 2026-09-07 18:55:45.885265624 +0000 UTC m=+2065.026933608 I0907 18:55:45.887841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-kjvfd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kjvfd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:55:45.913697 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-kjvfd-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:55:45.913683612 +0000 UTC m=+2065.055351566 I0907 18:55:45.916906 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-kjvfd-vnc-5f4wd" condition "Approved" to 2026-09-07 18:55:45.916891329 +0000 UTC m=+2065.058559313 I0907 18:55:45.941981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-kjvfd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kjvfd-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:55:45.942618 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-kjvfd-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:55:45.942610105 +0000 UTC m=+2065.084278069 I0907 18:55:45.943203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-kjvfd-vnc-5f4wd" condition "Ready" to 2026-09-07 18:55:45.943195463 +0000 UTC m=+2065.084863427 I0907 18:55:45.953061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-kjvfd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kjvfd-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:55:45.968220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-kjvfd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kjvfd-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:55:45.985046 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-kjvfd-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:55:45.98502702 +0000 UTC m=+2065.126694994 I0907 18:55:46.005210 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-kjvfd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kjvfd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:55:46.005586 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-kjvfd-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:55:46.005577468 +0000 UTC m=+2065.147245432 I0907 18:55:46.010511 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-kjvfd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kjvfd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:55:46.024061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-kjvfd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-kjvfd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:58:40.454951 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:58:40.455020 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-07 18:58:40.455013534 +0000 UTC m=+2239.596681488 I0907 18:58:40.455033 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-07 18:58:40.455017394 +0000 UTC m=+2239.596685348 I0907 18:58:40.475473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:58:40.475643 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-07 18:58:40.475630494 +0000 UTC m=+2239.617298488 I0907 18:58:40.612988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:58:40.659306 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-72m2c" condition "Approved" to 2026-09-07 18:58:40.659290844 +0000 UTC m=+2239.800958828 I0907 18:58:40.684426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-72m2c" condition "Ready" to 2026-09-07 18:58:40.684414261 +0000 UTC m=+2239.826082225 I0907 18:58:40.732747 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:58:40.732732877 +0000 UTC m=+2239.874400861 I0907 18:58:40.758259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:58:40.758669 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:58:40.758661719 +0000 UTC m=+2239.900329693 I0907 18:58:40.782673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:58:40.782770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:58:40.782948 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:58:40.78294228 +0000 UTC m=+2239.924610234 I0907 18:58:41.911801 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-07 18:58:41.911785572 +0000 UTC m=+2241.053453566 I0907 18:58:41.912053 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 18:58:41.912106 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-07 18:58:41.912095572 +0000 UTC m=+2241.053763556 I0907 18:58:41.925475 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:58:41.925544 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-07 18:58:41.925539342 +0000 UTC m=+2241.067207306 I0907 18:58:42.091303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 18:58:42.121861 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-cp29k" condition "Approved" to 2026-09-07 18:58:42.121851869 +0000 UTC m=+2241.263519843 I0907 18:58:42.149625 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-cp29k" condition "Ready" to 2026-09-07 18:58:42.149613537 +0000 UTC m=+2241.291281501 I0907 18:58:42.181383 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 18:58:42.181367637 +0000 UTC m=+2241.323035621 I0907 18:58:42.208627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:00:56.142170 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-07 19:00:56.142123888 +0000 UTC m=+2375.283791842 I0907 19:00:56.142696 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 19:00:56.142769 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-07 19:00:56.142760487 +0000 UTC m=+2375.284428481 E0907 19:00:56.157177 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 19:00:56.157266 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-07 19:00:56.157256261 +0000 UTC m=+2375.298924245 I0907 19:00:56.157295 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 19:00:56.159725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:00:56.159842 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 19:00:56.159870 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-07 19:00:56.159861711 +0000 UTC m=+2375.301529695 E0907 19:00:56.168680 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0907 19:00:56.169138 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 19:00:56.169208 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0907 19:00:56.169407 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0907 19:00:56.210496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:00:56.219656 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-k5dht" condition "Approved" to 2026-09-07 19:00:56.219637538 +0000 UTC m=+2375.361305522 I0907 19:00:56.243078 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-k5dht" condition "Ready" to 2026-09-07 19:00:56.243061884 +0000 UTC m=+2375.384729878 I0907 19:00:56.274064 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:00:56.274046631 +0000 UTC m=+2375.415714615 I0907 19:00:56.305192 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:00:56.305778 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:00:56.305769621 +0000 UTC m=+2375.447437585 I0907 19:00:56.325904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:00:56.782713 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-07 19:00:56.782690201 +0000 UTC m=+2375.924358195 I0907 19:00:56.783061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 19:00:56.783148 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-07 19:00:56.783103454 +0000 UTC m=+2375.924771458 E0907 19:00:56.800970 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 19:00:56.801065 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-07 19:00:56.801056943 +0000 UTC m=+2375.942724917 I0907 19:00:56.801129 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 19:00:56.802494 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:00:56.802680 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-07 19:00:56.802651472 +0000 UTC m=+2375.944319436 E0907 19:00:56.812649 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0907 19:00:56.812826 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 19:00:56.812860 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0907 19:00:56.812917 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0907 19:00:56.825502 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:00:56.851252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-2hqps" condition "Approved" to 2026-09-07 19:00:56.851238106 +0000 UTC m=+2375.992906070 I0907 19:00:56.866700 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-2hqps" condition "Ready" to 2026-09-07 19:00:56.866684769 +0000 UTC m=+2376.008352763 I0907 19:00:56.888656 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:00:56.88864436 +0000 UTC m=+2376.030312314 I0907 19:00:56.910553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:00:56.910793 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:00:56.910785967 +0000 UTC m=+2376.052453921 I0907 19:00:56.937134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:00:56.937371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:00:57.447129 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-07 19:00:57.447111283 +0000 UTC m=+2376.588779267 I0907 19:00:57.447697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 19:00:57.447726 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-07 19:00:57.447719882 +0000 UTC m=+2376.589387876 I0907 19:00:57.476140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:00:57.476229 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-07 19:00:57.476222244 +0000 UTC m=+2376.617890208 I0907 19:00:57.495785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:00:57.531410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-kt678" condition "Approved" to 2026-09-07 19:00:57.53138887 +0000 UTC m=+2376.673056864 I0907 19:00:57.765740 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-kt678" condition "Ready" to 2026-09-07 19:00:57.765724894 +0000 UTC m=+2376.907392888 I0907 19:01:01.170922 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:01:01.170914735 +0000 UTC m=+2380.312582689 I0907 19:01:01.183598 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-kt678" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:01:01.183581153 +0000 UTC m=+2380.325249137 I0907 19:01:01.213536 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:01:01.213514307 +0000 UTC m=+2380.355182301 I0907 19:01:01.237810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:01:01.238489 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:01:01.23847459 +0000 UTC m=+2380.380142574 I0907 19:01:01.248763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:01:01.263197 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:01:01.269208 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:01:01.269876 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:01:01.26986398 +0000 UTC m=+2380.411531964 I0907 19:01:01.813060 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:01:01.813047896 +0000 UTC m=+2380.954715850 I0907 19:03:12.404321 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-07 19:03:12.404308885 +0000 UTC m=+2511.545976839 I0907 19:03:12.405649 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 19:03:12.405783 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-07 19:03:12.40577818 +0000 UTC m=+2511.547446164 I0907 19:03:12.426212 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:03:12.426696 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-07 19:03:12.42668777 +0000 UTC m=+2511.568355724 I0907 19:03:12.689139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:03:12.733231 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-cdt22" condition "Approved" to 2026-09-07 19:03:12.733220996 +0000 UTC m=+2511.874888950 I0907 19:03:12.752383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-cdt22" condition "Ready" to 2026-09-07 19:03:12.752369602 +0000 UTC m=+2511.894037556 I0907 19:03:12.794444 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:03:12.794433451 +0000 UTC m=+2511.936101405 I0907 19:03:12.815508 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:03:12.815858 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:03:12.815851628 +0000 UTC m=+2511.957519582 I0907 19:03:12.823480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:03:12.842063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:00.086678 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-07 19:04:00.086658114 +0000 UTC m=+2559.228326108 I0907 19:04:00.112341 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-07 19:04:00.112328441 +0000 UTC m=+2559.253996405 I0907 19:04:00.112493 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 19:04:00.112531 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-07 19:04:00.112523997 +0000 UTC m=+2559.254191961 I0907 19:04:00.127509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:00.127592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 19:04:00.127612 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-07 19:04:00.127606709 +0000 UTC m=+2559.269274663 E0907 19:04:00.145565 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0907 19:04:00.192774 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-07 19:04:00.192759276 +0000 UTC m=+2559.334427230 I0907 19:04:00.214163 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-07 19:04:00.214153092 +0000 UTC m=+2559.355821046 I0907 19:04:00.214210 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 19:04:00.214238 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-07 19:04:00.214232424 +0000 UTC m=+2559.355900388 I0907 19:04:00.237493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:00.237543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 19:04:00.237558 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-07 19:04:00.23755376 +0000 UTC m=+2559.379221714 E0907 19:04:00.348259 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0907 19:04:00.732408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:00.742453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-88cr6" condition "Approved" to 2026-09-07 19:04:00.742440633 +0000 UTC m=+2559.884108587 I0907 19:04:00.766020 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-88cr6" condition "Ready" to 2026-09-07 19:04:00.765999596 +0000 UTC m=+2559.907667570 I0907 19:04:00.810019 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:04:00.810007535 +0000 UTC m=+2559.951675509 I0907 19:04:00.830112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:00.830578 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:04:00.830571755 +0000 UTC m=+2559.972239729 I0907 19:04:00.832634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:00.849275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:00.849613 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:04:00.849593628 +0000 UTC m=+2559.991261582 I0907 19:04:01.052723 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-07 19:04:01.052710464 +0000 UTC m=+2560.194378418 I0907 19:04:01.068776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 19:04:01.068825 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-07 19:04:01.068817696 +0000 UTC m=+2560.210485650 I0907 19:04:01.069231 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-07 19:04:01.06922623 +0000 UTC m=+2560.210894184 I0907 19:04:01.085008 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:01.085059 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-07 19:04:01.085053345 +0000 UTC m=+2560.226721289 I0907 19:04:01.272022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:01.299529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-5rg7m" condition "Approved" to 2026-09-07 19:04:01.299518228 +0000 UTC m=+2560.441186182 I0907 19:04:01.312959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-5rg7m" condition "Ready" to 2026-09-07 19:04:01.31295119 +0000 UTC m=+2560.454619144 I0907 19:04:01.349210 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:04:01.349202301 +0000 UTC m=+2560.490870255 I0907 19:04:01.372516 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:01.442053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:01.500096 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-07 19:04:01.500079085 +0000 UTC m=+2560.641747039 I0907 19:04:01.548251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 19:04:01.548249 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-07 19:04:01.548228621 +0000 UTC m=+2560.689896575 I0907 19:04:01.548283 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-07 19:04:01.548276752 +0000 UTC m=+2560.689944706 I0907 19:04:01.561938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:01.561989 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-07 19:04:01.561984443 +0000 UTC m=+2560.703652387 I0907 19:04:01.716582 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:01.755176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-78zr6" condition "Approved" to 2026-09-07 19:04:01.755162064 +0000 UTC m=+2560.896830008 I0907 19:04:01.790286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-78zr6" condition "Ready" to 2026-09-07 19:04:01.79027344 +0000 UTC m=+2560.931941394 I0907 19:04:01.958970 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:04:01.958959159 +0000 UTC m=+2561.100627113 I0907 19:04:01.995557 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-07 19:04:01.99554176 +0000 UTC m=+2561.137209714 I0907 19:04:02.014352 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 19:04:02.014563 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-07 19:04:02.014525653 +0000 UTC m=+2561.156193607 I0907 19:04:02.014723 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-07 19:04:02.014720089 +0000 UTC m=+2561.156388043 I0907 19:04:02.054218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:02.054534 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:04:02.054528918 +0000 UTC m=+2561.196196872 I0907 19:04:02.358962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:02.359038 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-07 19:04:02.359032512 +0000 UTC m=+2561.500700456 I0907 19:04:02.453924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:02.505618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:02.755290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:02.909489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-clwz9" condition "Approved" to 2026-09-07 19:04:02.909475322 +0000 UTC m=+2562.051143276 I0907 19:04:03.019853 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-clwz9" condition "Ready" to 2026-09-07 19:04:03.019838915 +0000 UTC m=+2562.161506899 I0907 19:04:03.459576 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:04:03.459552922 +0000 UTC m=+2562.601220906 I0907 19:04:03.606624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:03.607079 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 19:04:03.607072413 +0000 UTC m=+2562.748740367 I0907 19:04:03.852881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 19:04:03.906513 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"