I0812 11:03:32.523394 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0812 11:03:32.523526 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0812 11:03:32.523646 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0812 11:03:32.528600 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0812 11:03:32.529229 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0812 11:03:32.529364 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0812 11:03:32.529362 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0812 11:03:32.532074 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0812 11:03:32.561823 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0812 11:03:32.567354 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0812 11:03:32.567437 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0812 11:03:32.573254 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0812 11:03:32.577090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0812 11:03:32.580678 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0812 11:03:32.582673 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0812 11:03:32.584346 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0812 11:03:32.586287 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0812 11:03:32.588120 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0812 11:03:32.592677 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0812 11:03:32.595001 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0812 11:03:32.595120 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0812 11:03:32.597544 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0812 11:03:32.597616 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0812 11:03:32.600098 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0812 11:03:32.602504 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0812 11:03:32.604937 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0812 11:03:32.604967 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0812 11:03:32.604995 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0812 11:03:32.607807 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0812 11:03:32.610091 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0812 11:03:32.614503 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0812 11:03:32.616284 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0812 11:03:32.616340 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0812 11:03:32.617941 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 11:03:32.618795 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 11:03:32.618970 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 11:03:32.620060 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 11:03:32.620276 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 11:03:32.620338 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 11:03:32.620386 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 11:03:32.620483 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 11:03:32.621514 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 11:03:32.703541 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 11:03:50.131948 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-12 11:03:50.131932821 +0000 UTC m=+17.640501139 I0812 11:03:50.949099 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:03:50.949202 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-12 11:03:50.949190257 +0000 UTC m=+18.457758605 I0812 11:03:50.949203 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-12 11:03:50.949185937 +0000 UTC m=+18.457754275 E0812 11:03:50.975044 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 11:03:50.975301 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-12 11:03:50.97528514 +0000 UTC m=+18.483853488 E0812 11:03:50.976181 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 11:03:50.980149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:50.980998 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-12 11:03:50.980990681 +0000 UTC m=+18.489558999 E0812 11:03:50.987967 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0812 11:03:50.988357 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 11:03:50.988397 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 11:03:50.988484 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0812 11:03:50.996035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:50.996199 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-12 11:03:50.996188692 +0000 UTC m=+18.504757020 I0812 11:03:51.004959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tlzcz" condition "Approved" to 2026-08-12 11:03:51.004945164 +0000 UTC m=+18.513513492 I0812 11:03:51.022977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-tlzcz" condition "Ready" to 2026-08-12 11:03:51.02296075 +0000 UTC m=+18.531529088 I0812 11:03:51.056370 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:03:51.056344761 +0000 UTC m=+18.564913109 I0812 11:03:51.072757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:51.073131 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:03:51.073120428 +0000 UTC m=+18.581688776 I0812 11:03:51.085623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:51.087622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:51.087898 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:03:51.087888389 +0000 UTC m=+18.596456707 I0812 11:03:51.090843 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:03:55.988349 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:03:55.988341005 +0000 UTC m=+23.496909313 I0812 11:04:19.525765 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-12 11:04:19.52570501 +0000 UTC m=+47.034273348 I0812 11:04:19.525811 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:04:19.526411 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-12 11:04:19.526399787 +0000 UTC m=+47.034968125 I0812 11:04:19.538743 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-12 11:04:19.5387341 +0000 UTC m=+47.047302408 I0812 11:04:19.545999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:04:19.546056 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:04:19.546071 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-12 11:04:19.54606629 +0000 UTC m=+47.054634608 I0812 11:04:19.679201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:04:19.691213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kk6j9" condition "Approved" to 2026-08-12 11:04:19.691195111 +0000 UTC m=+47.199763429 I0812 11:04:19.881745 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kk6j9" condition "Ready" to 2026-08-12 11:04:19.88173085 +0000 UTC m=+47.390299168 I0812 11:04:20.083484 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:04:20.083465416 +0000 UTC m=+47.592033734 I0812 11:04:20.107668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:04:20.107985 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:04:20.107978031 +0000 UTC m=+47.616546339 I0812 11:04:20.150279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:45.634976 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:06:45.634978 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-08-12 11:06:45.634959756 +0000 UTC m=+193.143528094 I0812 11:06:45.635046 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-08-12 11:06:45.635031268 +0000 UTC m=+193.143599616 E0812 11:06:45.693555 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:06:45.693655 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-08-12 11:06:45.693640227 +0000 UTC m=+193.202208585 I0812 11:06:45.693721 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:06:45.697641 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:45.697784 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-08-12 11:06:45.697774122 +0000 UTC m=+193.206342470 E0812 11:06:45.711392 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0812 11:06:45.711487 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:06:45.711528 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0812 11:06:45.711572 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0812 11:06:45.715221 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-08-12 11:06:45.715209273 +0000 UTC m=+193.223777611 I0812 11:06:45.715393 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:06:45.715429 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-08-12 11:06:45.715421828 +0000 UTC m=+193.223990166 I0812 11:06:45.732775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:45.732868 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-08-12 11:06:45.73285822 +0000 UTC m=+193.241426568 I0812 11:06:45.780222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:45.841001 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-sbh6r" condition "Approved" to 2026-08-12 11:06:45.840979168 +0000 UTC m=+193.349547516 I0812 11:06:45.915087 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-sbh6r" condition "Ready" to 2026-08-12 11:06:45.915074285 +0000 UTC m=+193.423642603 I0812 11:06:45.926078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:45.948994 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:45.948976975 +0000 UTC m=+193.457545323 I0812 11:06:45.959684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-knvq5" condition "Approved" to 2026-08-12 11:06:45.959668032 +0000 UTC m=+193.468236380 I0812 11:06:45.968877 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:45.978696 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-knvq5" condition "Ready" to 2026-08-12 11:06:45.978684969 +0000 UTC m=+193.487253287 I0812 11:06:50.712017 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:50.712008251 +0000 UTC m=+198.220576559 I0812 11:06:50.833250 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-knvq5" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:50.833236582 +0000 UTC m=+198.341804890 I0812 11:06:50.997734 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:50.997716129 +0000 UTC m=+198.506284437 I0812 11:06:51.106177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:06:51.106823 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:06:51.10681344 +0000 UTC m=+198.615381788 I0812 11:06:51.284930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:10:29.318925 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-08-12 11:10:29.318872439 +0000 UTC m=+416.827440757 I0812 11:10:29.318984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-113.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:10:29.319062 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Issuing" to 2026-08-12 11:10:29.319047813 +0000 UTC m=+416.827616221 I0812 11:10:29.466861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:10:29.466950 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready" to 2026-08-12 11:10:29.466942765 +0000 UTC m=+416.975511073 I0812 11:10:29.638484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:10:29.904623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-b4djf" condition "Approved" to 2026-08-12 11:10:29.904609496 +0000 UTC m=+417.413177844 I0812 11:10:30.105500 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-113.nip.io-tls-b4djf" condition "Ready" to 2026-08-12 11:10:30.105486001 +0000 UTC m=+417.614054339 I0812 11:10:30.501190 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:10:30.501169383 +0000 UTC m=+418.009737731 I0812 11:10:31.007013 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:10:31.007375 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-113.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:10:31.007368715 +0000 UTC m=+418.515937033 I0812 11:10:31.380059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-113.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-113.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:12:15.279855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:12:15.279940 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-12 11:12:15.279929658 +0000 UTC m=+522.788498006 I0812 11:12:15.280023 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-12 11:12:15.280005929 +0000 UTC m=+522.788574247 E0812 11:12:15.309239 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 11:12:15.309325 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-12 11:12:15.309316027 +0000 UTC m=+522.817884355 E0812 11:12:15.309355 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 11:12:15.313241 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:12:15.313356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:12:15.313447 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-12 11:12:15.313438591 +0000 UTC m=+522.822006909 E0812 11:12:15.346452 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0812 11:12:15.346557 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 11:12:15.346597 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 11:12:15.346646 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0812 11:12:15.399597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ljthz" condition "Approved" to 2026-08-12 11:12:15.3995808 +0000 UTC m=+522.908149148 I0812 11:12:15.420251 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-ljthz" condition "Ready" to 2026-08-12 11:12:15.420236887 +0000 UTC m=+522.928805195 I0812 11:12:15.450598 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:12:15.450581528 +0000 UTC m=+522.959149876 I0812 11:12:15.481112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:12:15.533749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:12:20.346866 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:12:20.346851685 +0000 UTC m=+527.855420023 I0812 11:12:58.687384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:12:58.687563 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-12 11:12:58.687555758 +0000 UTC m=+566.196124086 I0812 11:12:58.687702 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-12 11:12:58.687696781 +0000 UTC m=+566.196265089 I0812 11:12:58.687968 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:12:58.688031 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-12 11:12:58.68802085 +0000 UTC m=+566.196589168 I0812 11:12:58.688476 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-12 11:12:58.68847047 +0000 UTC m=+566.197038788 I0812 11:12:58.697363 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-12 11:12:58.697346324 +0000 UTC m=+566.205914632 I0812 11:12:58.697737 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:12:58.697805 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-12 11:12:58.697798345 +0000 UTC m=+566.206366653 I0812 11:12:58.729969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:12:58.730067 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-12 11:12:58.730060189 +0000 UTC m=+566.238628497 I0812 11:12:58.738439 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:12:58.738540 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-12 11:12:58.738526805 +0000 UTC m=+566.247095373 I0812 11:12:58.750379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:12:58.750435 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:12:58.750451 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-12 11:12:58.750446389 +0000 UTC m=+566.259014697 I0812 11:12:58.971333 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:12:58.982425 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mpf62" condition "Approved" to 2026-08-12 11:12:58.982414741 +0000 UTC m=+566.490983059 I0812 11:12:59.004914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-mpf62" condition "Ready" to 2026-08-12 11:12:59.004902909 +0000 UTC m=+566.513471227 I0812 11:12:59.036419 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:12:59.036405366 +0000 UTC m=+566.544973684 I0812 11:12:59.057560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:12:59.171801 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:12:59.188622 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:12:59.208839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q4l29" condition "Approved" to 2026-08-12 11:12:59.208819893 +0000 UTC m=+566.717388201 I0812 11:12:59.226682 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cxs8g" condition "Approved" to 2026-08-12 11:12:59.226669415 +0000 UTC m=+566.735237733 I0812 11:12:59.228316 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-q4l29" condition "Ready" to 2026-08-12 11:12:59.228309323 +0000 UTC m=+566.736877641 I0812 11:12:59.489213 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cxs8g" condition "Ready" to 2026-08-12 11:12:59.489201642 +0000 UTC m=+566.997769960 I0812 11:12:59.769872 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:12:59.769854326 +0000 UTC m=+567.278422644 I0812 11:12:59.893453 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:12:59.893439407 +0000 UTC m=+567.402007755 I0812 11:12:59.965061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:12:59.965581 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:12:59.965572581 +0000 UTC m=+567.474140919 I0812 11:13:00.030041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:13:00.283875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:13:10.088293 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nf65c-tls" condition "Ready" to 2026-08-12 11:13:10.088270771 +0000 UTC m=+577.596839089 I0812 11:13:10.088900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf65c-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:13:10.088928 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nf65c-tls" condition "Issuing" to 2026-08-12 11:13:10.088921316 +0000 UTC m=+577.597489634 I0812 11:13:10.102817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf65c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nf65c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:13:10.102871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf65c-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:13:10.102886 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-nf65c-tls" condition "Issuing" to 2026-08-12 11:13:10.102880468 +0000 UTC m=+577.611448776 I0812 11:13:10.443828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nf65c-skdv6" condition "Approved" to 2026-08-12 11:13:10.443814323 +0000 UTC m=+577.952382661 I0812 11:13:10.476031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-nf65c-skdv6" condition "Ready" to 2026-08-12 11:13:10.476019436 +0000 UTC m=+577.984587754 I0812 11:13:10.512923 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-nf65c-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:13:10.512909067 +0000 UTC m=+578.021477375 I0812 11:13:10.531135 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-nf65c-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-nf65c-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:14:56.291946 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:14:56.291984 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-12 11:14:56.291976613 +0000 UTC m=+683.800544921 I0812 11:14:56.291937 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-12 11:14:56.29185801 +0000 UTC m=+683.800426348 I0812 11:14:56.326576 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:14:56.326672 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-12 11:14:56.326666033 +0000 UTC m=+683.835234351 I0812 11:14:56.580098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:14:56.643298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5dkjp" condition "Approved" to 2026-08-12 11:14:56.643277288 +0000 UTC m=+684.151845636 I0812 11:14:56.666207 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5dkjp" condition "Ready" to 2026-08-12 11:14:56.666191786 +0000 UTC m=+684.174760134 I0812 11:14:56.695405 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:14:56.695392779 +0000 UTC m=+684.203961087 I0812 11:14:56.725906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:14:56.728220 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:14:56.728211837 +0000 UTC m=+684.236780145 I0812 11:14:56.730726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:14:56.754338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:14:56.754893 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:14:56.754880882 +0000 UTC m=+684.263449220 I0812 11:18:44.077446 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-12 11:18:44.077391317 +0000 UTC m=+911.585959655 I0812 11:18:44.077462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:18:44.077922 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-12 11:18:44.077891609 +0000 UTC m=+911.586459957 I0812 11:18:44.097405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:18:44.097526 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-12 11:18:44.097516612 +0000 UTC m=+911.606084960 I0812 11:18:44.188740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:18:44.226482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vmsgs" condition "Approved" to 2026-08-12 11:18:44.226468377 +0000 UTC m=+911.735036715 I0812 11:18:44.253014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vmsgs" condition "Ready" to 2026-08-12 11:18:44.253002968 +0000 UTC m=+911.761571286 I0812 11:18:44.289414 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:18:44.289396388 +0000 UTC m=+911.797964706 I0812 11:18:44.357677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:21:19.976243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:21:19.976331 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-08-12 11:21:19.976321344 +0000 UTC m=+1067.484889682 I0812 11:21:19.976775 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-12 11:21:19.976761754 +0000 UTC m=+1067.485330122 I0812 11:21:20.049707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:21:20.049836 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:21:20.049869 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-08-12 11:21:20.049858681 +0000 UTC m=+1067.558427029 I0812 11:21:20.339362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:21:20.414527 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kx6z5" condition "Approved" to 2026-08-12 11:21:20.414513074 +0000 UTC m=+1067.923081412 I0812 11:21:20.449161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-kx6z5" condition "Ready" to 2026-08-12 11:21:20.449150483 +0000 UTC m=+1067.957718791 I0812 11:21:20.552765 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:21:20.552730933 +0000 UTC m=+1068.061299281 I0812 11:21:20.614686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:22:53.454397 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-08-12 11:22:53.454357942 +0000 UTC m=+1160.962926280 I0812 11:22:53.454483 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:22:53.454532 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-08-12 11:22:53.454521566 +0000 UTC m=+1160.963089914 I0812 11:22:53.480936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:22:53.481055 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-08-12 11:22:53.481044077 +0000 UTC m=+1160.989612435 I0812 11:22:53.801544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:22:53.838035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7nsdn" condition "Approved" to 2026-08-12 11:22:53.83802477 +0000 UTC m=+1161.346593078 I0812 11:22:53.857839 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-7nsdn" condition "Ready" to 2026-08-12 11:22:53.857829266 +0000 UTC m=+1161.366397584 I0812 11:22:53.895319 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:22:53.89530216 +0000 UTC m=+1161.403870478 I0812 11:22:53.921209 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:22:53.921522 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:22:53.921515055 +0000 UTC m=+1161.430083363 I0812 11:22:53.945712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:26:33.619672 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-08-12 11:26:33.61965278 +0000 UTC m=+1381.128221138 I0812 11:26:33.619882 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:26:33.619981 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-08-12 11:26:33.619966667 +0000 UTC m=+1381.128535015 I0812 11:26:33.682485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:26:33.682559 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:26:33.682582 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-08-12 11:26:33.682574272 +0000 UTC m=+1381.191142590 I0812 11:26:34.042753 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-nj2gx" condition "Approved" to 2026-08-12 11:26:34.042740412 +0000 UTC m=+1381.551308740 I0812 11:26:34.068257 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-nj2gx" condition "Ready" to 2026-08-12 11:26:34.068246321 +0000 UTC m=+1381.576814639 I0812 11:26:34.187048 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:26:34.187037671 +0000 UTC m=+1381.695605989 I0812 11:26:34.242374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:34:23.083338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:34:23.083339 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-08-12 11:34:23.083291929 +0000 UTC m=+1850.591860277 I0812 11:34:23.083390 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-08-12 11:34:23.083385881 +0000 UTC m=+1850.591954199 I0812 11:34:23.106418 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:34:23.106517 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-08-12 11:34:23.106508103 +0000 UTC m=+1850.615076431 I0812 11:34:23.269434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:34:23.308211 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-brzrg" condition "Approved" to 2026-08-12 11:34:23.30819742 +0000 UTC m=+1850.816765758 I0812 11:34:23.328617 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-brzrg" condition "Ready" to 2026-08-12 11:34:23.328606771 +0000 UTC m=+1850.837175089 I0812 11:34:23.364207 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:34:23.364179908 +0000 UTC m=+1850.872748226 I0812 11:34:23.406572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:34:23.407160 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:34:23.407148226 +0000 UTC m=+1850.915716574 I0812 11:34:23.448164 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:34:23.448522 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:34:23.448512658 +0000 UTC m=+1850.957080976 I0812 11:35:59.803930 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-08-12 11:35:59.803901944 +0000 UTC m=+1947.312470262 I0812 11:35:59.804147 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:35:59.804206 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-08-12 11:35:59.804200261 +0000 UTC m=+1947.312768569 I0812 11:35:59.857808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:35:59.857912 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-08-12 11:35:59.857904546 +0000 UTC m=+1947.366472864 I0812 11:36:00.091419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:36:00.132995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-8mwkb" condition "Approved" to 2026-08-12 11:36:00.132979882 +0000 UTC m=+1947.641548210 I0812 11:36:00.162815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-8mwkb" condition "Ready" to 2026-08-12 11:36:00.162796097 +0000 UTC m=+1947.671364455 I0812 11:36:00.213547 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:36:00.213533314 +0000 UTC m=+1947.722101622 I0812 11:36:00.245691 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:36:00.246479 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:36:00.246467991 +0000 UTC m=+1947.755036339 I0812 11:36:00.267451 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:36:00.268184 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:36:00.26816977 +0000 UTC m=+1947.776738108 I0812 11:37:11.584332 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-08-12 11:37:11.584302196 +0000 UTC m=+2019.092870534 I0812 11:37:11.584495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:37:11.584604 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-12 11:37:11.584592152 +0000 UTC m=+2019.093160490 I0812 11:37:12.123844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:37:12.123949 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:37:12.123979 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-12 11:37:12.123971015 +0000 UTC m=+2019.632539363 I0812 11:37:12.690727 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:37:12.690747 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-12 11:37:12.690731609 +0000 UTC m=+2020.199299927 I0812 11:37:12.690796 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-08-12 11:37:12.69078172 +0000 UTC m=+2020.199350078 I0812 11:37:12.949261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:37:12.949405 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-12 11:37:12.949394867 +0000 UTC m=+2020.457963185 I0812 11:37:13.077718 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-t6fst" condition "Approved" to 2026-08-12 11:37:13.077709198 +0000 UTC m=+2020.586277506 I0812 11:37:13.078613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:37:13.857841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:37:13.858124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-t6fst" condition "Ready" to 2026-08-12 11:37:13.858114223 +0000 UTC m=+2021.366682531 E0812 11:37:14.217838 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"libvirt-vnc-ca\" not found" logger="cert-manager.issuers.setup" resource_name="libvirt-vnc" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:37:14.217893 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-08-12 11:37:14.217882707 +0000 UTC m=+2021.726451045 I0812 11:37:14.217952 1 sync.go:62] "Error initializing issuer: secret \"libvirt-vnc-ca\" not found" logger="cert-manager.issuers" resource_name="libvirt-vnc" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:37:14.522902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-ctht2" condition "Approved" to 2026-08-12 11:37:14.522890481 +0000 UTC m=+2022.031458799 E0812 11:37:14.527059 1 controller.go:167] "re-queuing item due to error processing" err="secret \"libvirt-vnc-ca\" not found" logger="cert-manager.issuers" key="openstack/libvirt-vnc" E0812 11:37:14.527357 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"libvirt-vnc-ca\" not found" logger="cert-manager.issuers.setup" resource_name="libvirt-vnc" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:37:14.527389 1 sync.go:62] "Error initializing issuer: secret \"libvirt-vnc-ca\" not found" logger="cert-manager.issuers" resource_name="libvirt-vnc" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0812 11:37:14.527462 1 controller.go:167] "re-queuing item due to error processing" err="secret \"libvirt-vnc-ca\" not found" logger="cert-manager.issuers" key="openstack/libvirt-vnc" I0812 11:37:15.455437 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:37:15.455419244 +0000 UTC m=+2022.963987592 I0812 11:37:15.460104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-ctht2" condition "Ready" to 2026-08-12 11:37:15.460091911 +0000 UTC m=+2022.968660229 E0812 11:37:16.261416 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers.setup" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:37:16.261484 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-08-12 11:37:16.261468819 +0000 UTC m=+2023.770037167 I0812 11:37:16.261571 1 sync.go:62] "Error initializing issuer: secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:37:16.267684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" E0812 11:37:16.752996 1 controller.go:167] "re-queuing item due to error processing" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" key="openstack/libvirt-api" E0812 11:37:16.753098 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers.setup" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:37:16.753124 1 sync.go:62] "Error initializing issuer: secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0812 11:37:16.753171 1 controller.go:167] "re-queuing item due to error processing" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" key="openstack/libvirt-api" I0812 11:37:18.998466 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:37:18.998447467 +0000 UTC m=+2026.507015805 I0812 11:37:19.528013 1 conditions.go:85] Found status change for Issuer "libvirt-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:37:19.527999434 +0000 UTC m=+2027.036567772 I0812 11:37:19.711918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:37:19.716501 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:37:20.306079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:37:21.754332 1 conditions.go:85] Found status change for Issuer "libvirt-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:37:21.754321469 +0000 UTC m=+2029.262889787 I0812 11:37:23.513784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:38:11.309400 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-08-12 11:38:11.30934541 +0000 UTC m=+2078.817913718 I0812 11:38:11.309950 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:38:11.309969 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-08-12 11:38:11.309965705 +0000 UTC m=+2078.818534013 I0812 11:38:11.467807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:38:11.467906 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-08-12 11:38:11.467900056 +0000 UTC m=+2078.976468364 I0812 11:38:15.348340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:38:15.496071 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-jnp6m" condition "Approved" to 2026-08-12 11:38:15.496051906 +0000 UTC m=+2083.004620244 I0812 11:38:15.703907 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-jnp6m" condition "Ready" to 2026-08-12 11:38:15.703895646 +0000 UTC m=+2083.212463954 I0812 11:38:15.929167 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:38:15.929151766 +0000 UTC m=+2083.437720094 I0812 11:38:15.954101 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:38:15.954799 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:38:15.954793425 +0000 UTC m=+2083.463361743 I0812 11:38:15.968738 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:38:16.000601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:41:48.521228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:41:48.521313 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-08-12 11:41:48.521302832 +0000 UTC m=+2296.029871150 I0812 11:41:48.521291 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-08-12 11:41:48.521271062 +0000 UTC m=+2296.029839410 I0812 11:41:48.547757 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:41:48.547906 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-08-12 11:41:48.547896165 +0000 UTC m=+2296.056464473 I0812 11:41:48.737768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:41:48.787622 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-2vqlb" condition "Approved" to 2026-08-12 11:41:48.787612776 +0000 UTC m=+2296.296181094 I0812 11:41:48.808531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-2vqlb" condition "Ready" to 2026-08-12 11:41:48.808518858 +0000 UTC m=+2296.317087166 I0812 11:41:48.849773 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:41:48.849759635 +0000 UTC m=+2296.358327953 I0812 11:41:48.873638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:41:48.874041 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:41:48.874034724 +0000 UTC m=+2296.382603032 I0812 11:41:48.908792 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:41:50.224340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:41:50.224394 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-08-12 11:41:50.224382416 +0000 UTC m=+2297.732950754 I0812 11:41:50.224351 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-12 11:41:50.224320664 +0000 UTC m=+2297.732888982 I0812 11:41:50.252243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:41:50.252369 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-12 11:41:50.252359249 +0000 UTC m=+2297.760927577 I0812 11:41:50.789624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:41:51.076559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-qr74z" condition "Approved" to 2026-08-12 11:41:51.076546861 +0000 UTC m=+2298.585115179 I0812 11:41:51.128642 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-qr74z" condition "Ready" to 2026-08-12 11:41:51.12863184 +0000 UTC m=+2298.637200148 I0812 11:41:51.286463 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:41:51.286440268 +0000 UTC m=+2298.795008616 I0812 11:41:51.417206 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:41:51.417960 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:41:51.417941652 +0000 UTC m=+2298.926509970 I0812 11:41:51.493770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:45:12.564395 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-08-12 11:45:12.564334832 +0000 UTC m=+2500.072903190 I0812 11:45:12.564866 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:45:12.564926 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-08-12 11:45:12.564914876 +0000 UTC m=+2500.073483224 I0812 11:45:12.686835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:45:12.686971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:45:12.687009 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-08-12 11:45:12.686998321 +0000 UTC m=+2500.195566659 I0812 11:45:14.005893 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:45:14.321911 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-4mds2" condition "Approved" to 2026-08-12 11:45:14.321900746 +0000 UTC m=+2501.830469054 I0812 11:45:14.558010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-4mds2" condition "Ready" to 2026-08-12 11:45:14.558000281 +0000 UTC m=+2502.066568599 I0812 11:45:15.595852 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:45:15.595834288 +0000 UTC m=+2503.104402606 I0812 11:45:16.121945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:46:30.629090 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-8mdzg-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:46:30.629153 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8mdzg-api" condition "Issuing" to 2026-08-12 11:46:30.629147241 +0000 UTC m=+2578.137715549 I0812 11:46:30.629187 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8mdzg-api" condition "Ready" to 2026-08-12 11:46:30.629173742 +0000 UTC m=+2578.137742040 I0812 11:46:30.632764 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8mdzg-vnc" condition "Ready" to 2026-08-12 11:46:30.632750634 +0000 UTC m=+2578.141318942 I0812 11:46:30.633127 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-8mdzg-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:46:30.633158 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8mdzg-vnc" condition "Issuing" to 2026-08-12 11:46:30.633150053 +0000 UTC m=+2578.141718371 I0812 11:46:30.660840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-8mdzg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8mdzg-api\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:46:30.660951 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8mdzg-api" condition "Ready" to 2026-08-12 11:46:30.660941549 +0000 UTC m=+2578.169509897 I0812 11:46:30.665815 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-8mdzg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8mdzg-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:46:30.665871 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-8mdzg-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:46:30.665883 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-8mdzg-vnc" condition "Issuing" to 2026-08-12 11:46:30.665878512 +0000 UTC m=+2578.174446830 I0812 11:46:30.797531 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-8mdzg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8mdzg-api\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:46:30.863474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-8mdzg-api-phqsz" condition "Approved" to 2026-08-12 11:46:30.863459074 +0000 UTC m=+2578.372027402 I0812 11:46:30.889417 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-8mdzg-api-phqsz" condition "Ready" to 2026-08-12 11:46:30.889405528 +0000 UTC m=+2578.397973846 I0812 11:46:31.159744 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-8mdzg-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:46:31.159728187 +0000 UTC m=+2578.668296505 I0812 11:46:31.161803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-8mdzg-vnc-hmz68" condition "Approved" to 2026-08-12 11:46:31.161792304 +0000 UTC m=+2578.670360622 I0812 11:46:31.182912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-8mdzg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8mdzg-api\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:46:31.183353 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-8mdzg-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:46:31.183346307 +0000 UTC m=+2578.691914625 I0812 11:46:31.189981 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-8mdzg-vnc-hmz68" condition "Ready" to 2026-08-12 11:46:31.189973469 +0000 UTC m=+2578.698541787 I0812 11:46:33.653386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-8mdzg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8mdzg-api\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:46:33.655427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-8mdzg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8mdzg-api\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:46:35.506357 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-8mdzg-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:46:35.506343269 +0000 UTC m=+2583.014911607 I0812 11:46:36.835662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-8mdzg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8mdzg-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:46:36.835942 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-8mdzg-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:46:36.835936744 +0000 UTC m=+2584.344505052 I0812 11:46:36.950659 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-8mdzg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8mdzg-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:46:36.965514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-8mdzg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-8mdzg-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:50:28.198526 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-08-12 11:50:28.198477141 +0000 UTC m=+2815.707045459 I0812 11:50:28.198554 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:50:28.198702 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-12 11:50:28.198694406 +0000 UTC m=+2815.707262724 I0812 11:50:28.366463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:50:28.366628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:50:28.366660 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-12 11:50:28.36665051 +0000 UTC m=+2815.875218858 I0812 11:50:29.044009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-d6z44" condition "Approved" to 2026-08-12 11:50:29.043997786 +0000 UTC m=+2816.552566094 I0812 11:50:29.163028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-d6z44" condition "Ready" to 2026-08-12 11:50:29.16301577 +0000 UTC m=+2816.671584088 I0812 11:50:29.275527 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:50:29.275509726 +0000 UTC m=+2816.784078064 I0812 11:50:29.546627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:50:29.547018 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:50:29.547011791 +0000 UTC m=+2817.055580109 I0812 11:50:29.582083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:50:29.673979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:50:31.038639 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:50:31.038686 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-08-12 11:50:31.038675237 +0000 UTC m=+2818.547243555 I0812 11:50:31.038779 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-12 11:50:31.038754119 +0000 UTC m=+2818.547322457 I0812 11:50:31.205521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:50:31.205601 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-12 11:50:31.205594649 +0000 UTC m=+2818.714162957 I0812 11:50:31.878541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:50:31.921976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-b2f85" condition "Approved" to 2026-08-12 11:50:31.921963547 +0000 UTC m=+2819.430531875 I0812 11:50:31.999821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-b2f85" condition "Ready" to 2026-08-12 11:50:31.999806469 +0000 UTC m=+2819.508374787 I0812 11:50:32.116347 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:50:32.116330107 +0000 UTC m=+2819.624898425 I0812 11:50:32.146712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:50:32.147122 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:50:32.147113362 +0000 UTC m=+2819.655681680 I0812 11:50:32.160604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:50:32.193458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:50:32.194406 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:50:32.194311052 +0000 UTC m=+2819.702879410 I0812 11:53:36.182109 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-08-12 11:53:36.182054334 +0000 UTC m=+3003.690622682 I0812 11:53:36.183438 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:53:36.183490 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-12 11:53:36.183479587 +0000 UTC m=+3003.692047945 E0812 11:53:36.413324 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:53:36.413406 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-08-12 11:53:36.413400222 +0000 UTC m=+3003.921968530 I0812 11:53:36.413422 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:53:36.418726 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:53:36.418900 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:53:36.418945 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-12 11:53:36.418933698 +0000 UTC m=+3003.927502046 E0812 11:53:36.640015 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0812 11:53:36.640522 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:53:36.640593 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0812 11:53:36.640643 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0812 11:53:37.410473 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-shwq8" condition "Approved" to 2026-08-12 11:53:37.41045536 +0000 UTC m=+3004.919023668 I0812 11:53:37.414726 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:53:37.414753 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-08-12 11:53:37.414736007 +0000 UTC m=+3004.923304345 I0812 11:53:37.414772 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-12 11:53:37.414764268 +0000 UTC m=+3004.923332606 I0812 11:53:37.437494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-shwq8" condition "Ready" to 2026-08-12 11:53:37.437481927 +0000 UTC m=+3004.946050245 E0812 11:53:37.443096 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:53:37.443164 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-08-12 11:53:37.443156166 +0000 UTC m=+3004.951724484 I0812 11:53:37.443191 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:53:37.447004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:53:37.447106 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:53:37.447125 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-12 11:53:37.447118497 +0000 UTC m=+3004.955686815 E0812 11:53:37.466002 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0812 11:53:37.466259 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 11:53:37.466305 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0812 11:53:37.467226 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0812 11:53:37.472622 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:53:37.47260757 +0000 UTC m=+3004.981175878 I0812 11:53:37.501369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:53:37.501433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:53:37.507271 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-zpzk2" condition "Approved" to 2026-08-12 11:53:37.507252491 +0000 UTC m=+3005.015820809 I0812 11:53:37.528214 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-zpzk2" condition "Ready" to 2026-08-12 11:53:37.528198241 +0000 UTC m=+3005.036766549 I0812 11:53:37.563115 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:53:37.563096768 +0000 UTC m=+3005.071665116 I0812 11:53:37.589399 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:53:37.589698 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:53:37.589689236 +0000 UTC m=+3005.098257564 I0812 11:53:37.624123 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:53:37.624450 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:53:37.62444269 +0000 UTC m=+3005.133011008 I0812 11:53:38.206141 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-08-12 11:53:38.206121654 +0000 UTC m=+3005.714689992 I0812 11:53:38.206610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:53:38.206639 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-12 11:53:38.206632856 +0000 UTC m=+3005.715201194 I0812 11:53:38.226634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:53:38.226905 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:53:38.226938 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-12 11:53:38.226930869 +0000 UTC m=+3005.735499187 I0812 11:53:38.272862 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:53:38.280198 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-2vplz" condition "Approved" to 2026-08-12 11:53:38.280186937 +0000 UTC m=+3005.788755245 I0812 11:53:38.298037 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-2vplz" condition "Ready" to 2026-08-12 11:53:38.298023055 +0000 UTC m=+3005.806591373 I0812 11:53:41.642439 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:53:41.642426039 +0000 UTC m=+3009.150994347 I0812 11:53:41.655998 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-2vplz" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:53:41.655984929 +0000 UTC m=+3009.164553247 I0812 11:53:41.685885 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:53:41.685870442 +0000 UTC m=+3009.194438760 I0812 11:53:41.712958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:53:42.466999 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:53:42.466984214 +0000 UTC m=+3009.975552532 I0812 11:57:02.601577 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:57:02.601584 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-08-12 11:57:02.601568188 +0000 UTC m=+3210.110136516 I0812 11:57:02.601644 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-08-12 11:57:02.60163757 +0000 UTC m=+3210.110205898 I0812 11:57:02.624526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:02.624636 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:57:02.624663 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-08-12 11:57:02.624657637 +0000 UTC m=+3210.133225945 I0812 11:57:02.862487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:02.892787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-z8zlr" condition "Approved" to 2026-08-12 11:57:02.892775754 +0000 UTC m=+3210.401344072 I0812 11:57:02.928263 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-z8zlr" condition "Ready" to 2026-08-12 11:57:02.928254065 +0000 UTC m=+3210.436822373 I0812 11:57:02.971666 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:57:02.971655646 +0000 UTC m=+3210.480223954 I0812 11:57:02.999493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:50.979090 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-12 11:57:50.979072202 +0000 UTC m=+3258.487640540 I0812 11:57:51.000550 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-12 11:57:51.000532731 +0000 UTC m=+3258.509101109 I0812 11:57:51.000587 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:57:51.000636 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-12 11:57:51.000624083 +0000 UTC m=+3258.509192441 I0812 11:57:51.016490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:51.016575 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:57:51.016597 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-12 11:57:51.016588518 +0000 UTC m=+3258.525156846 E0812 11:57:51.037593 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0812 11:57:51.101317 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-12 11:57:51.101296374 +0000 UTC m=+3258.609864722 I0812 11:57:51.129141 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:57:51.129182 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-12 11:57:51.129172902 +0000 UTC m=+3258.637741220 I0812 11:57:51.129667 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-12 11:57:51.129660973 +0000 UTC m=+3258.638229291 I0812 11:57:51.156617 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:51.156715 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-12 11:57:51.156705551 +0000 UTC m=+3258.665273879 E0812 11:57:51.196555 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0812 11:57:51.812321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:51.852321 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-sk4fv" condition "Approved" to 2026-08-12 11:57:51.852285658 +0000 UTC m=+3259.360853976 I0812 11:57:51.883602 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-sk4fv" condition "Ready" to 2026-08-12 11:57:51.883588623 +0000 UTC m=+3259.392156951 I0812 11:57:51.943308 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:57:51.943290908 +0000 UTC m=+3259.451859236 I0812 11:57:51.975561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:51.975929 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:57:51.975922383 +0000 UTC m=+3259.484490701 I0812 11:57:52.004342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:52.008039 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:52.008608 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:57:52.00859724 +0000 UTC m=+3259.517165588 I0812 11:57:52.098502 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-12 11:57:52.098483934 +0000 UTC m=+3259.607052262 I0812 11:57:52.123992 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-12 11:57:52.123976617 +0000 UTC m=+3259.632544945 I0812 11:57:52.124580 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:57:52.124608 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-12 11:57:52.124603451 +0000 UTC m=+3259.633171769 I0812 11:57:52.141187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:52.141342 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:57:52.141379 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-12 11:57:52.141371684 +0000 UTC m=+3259.649940002 I0812 11:57:52.385989 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:52.397114 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-nbw7f" condition "Approved" to 2026-08-12 11:57:52.39709946 +0000 UTC m=+3259.905667768 I0812 11:57:52.425008 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-nbw7f" condition "Ready" to 2026-08-12 11:57:52.424992517 +0000 UTC m=+3259.933560835 I0812 11:57:52.500606 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:57:52.500590945 +0000 UTC m=+3260.009159273 I0812 11:57:52.533676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:52.764285 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-12 11:57:52.764266551 +0000 UTC m=+3260.272834879 I0812 11:57:52.803547 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-12 11:57:52.803529989 +0000 UTC m=+3260.312098327 I0812 11:57:52.804049 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:57:52.804082 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-12 11:57:52.804076341 +0000 UTC m=+3260.312644669 I0812 11:57:52.834994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:52.835096 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-12 11:57:52.8350871 +0000 UTC m=+3260.343655428 I0812 11:57:53.115499 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:53.156436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-z5mnj" condition "Approved" to 2026-08-12 11:57:53.156417874 +0000 UTC m=+3260.664986182 I0812 11:57:53.199623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-z5mnj" condition "Ready" to 2026-08-12 11:57:53.19960853 +0000 UTC m=+3260.708176848 I0812 11:57:53.245223 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:57:53.245209142 +0000 UTC m=+3260.753777450 I0812 11:57:53.283213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:53.463154 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-12 11:57:53.463139213 +0000 UTC m=+3260.971707541 I0812 11:57:53.485383 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 11:57:53.485429 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-12 11:57:53.485418483 +0000 UTC m=+3260.993986821 I0812 11:57:53.485974 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-12 11:57:53.485965835 +0000 UTC m=+3260.994534173 I0812 11:57:53.515171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:53.515263 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-12 11:57:53.515252984 +0000 UTC m=+3261.023821312 I0812 11:57:53.660829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 11:57:53.813031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-9vz4p" condition "Approved" to 2026-08-12 11:57:53.813012839 +0000 UTC m=+3261.321581177 I0812 11:57:54.016974 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-9vz4p" condition "Ready" to 2026-08-12 11:57:54.01696234 +0000 UTC m=+3261.525530658 I0812 11:57:54.403733 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 11:57:54.4037226 +0000 UTC m=+3261.912290918 I0812 11:57:54.508702 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"