I0425 16:01:40.013742 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0425 16:01:40.013853 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0425 16:01:40.013922 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0425 16:01:40.017396 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0425 16:01:40.017827 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0425 16:01:40.017951 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0425 16:01:40.017948 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0425 16:01:40.020960 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0425 16:01:40.036833 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0425 16:01:40.045329 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0425 16:01:40.049619 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0425 16:01:40.059165 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0425 16:01:40.061188 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0425 16:01:40.061246 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0425 16:01:40.062278 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0425 16:01:40.063126 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0425 16:01:40.064937 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0425 16:01:40.066930 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0425 16:01:40.068904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0425 16:01:40.071119 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0425 16:01:40.073693 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0425 16:01:40.079535 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0425 16:01:40.084504 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0425 16:01:40.087438 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0425 16:01:40.090306 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0425 16:01:40.091353 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0425 16:01:40.091377 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0425 16:01:40.091459 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0425 16:01:40.093568 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0425 16:01:40.095661 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0425 16:01:40.095686 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0425 16:01:40.095693 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0425 16:01:40.098143 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0425 16:01:40.101775 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 16:01:40.102379 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 16:01:40.102932 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 16:01:40.103470 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 16:01:40.103912 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 16:01:40.104677 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 16:01:40.115304 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 16:01:40.116877 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 16:01:40.118714 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 16:01:40.214480 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0425 16:02:10.483688 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-25 16:02:10.483675525 +0000 UTC m=+30.504182555 I0425 16:02:11.233477 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:02:11.233550 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-25 16:02:11.233540316 +0000 UTC m=+31.254047366 I0425 16:02:11.234401 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-25 16:02:11.234392379 +0000 UTC m=+31.254899439 E0425 16:02:11.250101 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 16:02:11.250646 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-25 16:02:11.250625703 +0000 UTC m=+31.271132753 E0425 16:02:11.250742 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0425 16:02:11.254177 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:11.254360 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-25 16:02:11.254348604 +0000 UTC m=+31.274855654 E0425 16:02:11.267934 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0425 16:02:11.268482 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 16:02:11.268541 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0425 16:02:11.268585 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0425 16:02:11.274805 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:11.274930 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-25 16:02:11.274919885 +0000 UTC m=+31.295426915 I0425 16:02:11.275179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:11.281293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4qqjw" condition "Approved" to 2026-04-25 16:02:11.281260184 +0000 UTC m=+31.301767214 I0425 16:02:11.293322 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-4qqjw" condition "Ready" to 2026-04-25 16:02:11.293315058 +0000 UTC m=+31.313822088 I0425 16:02:11.313395 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:02:11.313375435 +0000 UTC m=+31.333882485 I0425 16:02:11.349898 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:11.385259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:16.268543 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:02:16.268530182 +0000 UTC m=+36.289037232 I0425 16:02:16.510440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:02:16.510457 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-25 16:02:16.510441024 +0000 UTC m=+36.530948084 I0425 16:02:16.510473 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-25 16:02:16.510468125 +0000 UTC m=+36.530975145 I0425 16:02:16.523717 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-25 16:02:16.523704769 +0000 UTC m=+36.544211789 I0425 16:02:16.536728 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:16.536817 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-25 16:02:16.53680873 +0000 UTC m=+36.557315760 I0425 16:02:16.664032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:16.698096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k8mcb" condition "Approved" to 2026-04-25 16:02:16.698078761 +0000 UTC m=+36.718585791 I0425 16:02:16.731595 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-k8mcb" condition "Ready" to 2026-04-25 16:02:16.731578749 +0000 UTC m=+36.752085799 I0425 16:02:16.763519 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:02:16.763503324 +0000 UTC m=+36.784010354 I0425 16:02:16.791364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:16.792009 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:02:16.791992888 +0000 UTC m=+36.812499948 I0425 16:02:16.801759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:16.813458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:21.933417 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-25 16:02:21.933395045 +0000 UTC m=+41.953902105 I0425 16:02:21.933446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:02:21.933627 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-25 16:02:21.933615611 +0000 UTC m=+41.954122651 I0425 16:02:21.952258 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:21.952330 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:02:21.952364 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-25 16:02:21.952357723 +0000 UTC m=+41.972864753 I0425 16:02:21.996303 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:21.998535 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-rmhf9" condition "Approved" to 2026-04-25 16:02:21.998523379 +0000 UTC m=+42.019030429 I0425 16:02:22.024060 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-rmhf9" condition "Ready" to 2026-04-25 16:02:22.024042883 +0000 UTC m=+42.044549913 I0425 16:02:22.048042 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:02:22.048025366 +0000 UTC m=+42.068532386 I0425 16:02:22.089112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:22.089572 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:02:22.089558989 +0000 UTC m=+42.110066019 I0425 16:02:22.095538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:22.165537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:22.165931 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:02:22.165918845 +0000 UTC m=+42.186425905 I0425 16:02:22.598734 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:02:22.598767 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-25 16:02:22.598758982 +0000 UTC m=+42.619266012 I0425 16:02:22.598797 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-25 16:02:22.598776612 +0000 UTC m=+42.619283662 I0425 16:02:22.617644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:22.617947 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-25 16:02:22.617759311 +0000 UTC m=+42.638266361 I0425 16:02:22.637851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:22.659518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-w6pdl" condition "Approved" to 2026-04-25 16:02:22.65949347 +0000 UTC m=+42.680000500 I0425 16:02:22.680172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-w6pdl" condition "Ready" to 2026-04-25 16:02:22.680160263 +0000 UTC m=+42.700667293 I0425 16:02:22.715129 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:02:22.71511478 +0000 UTC m=+42.735621810 I0425 16:02:22.738939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:22.739281 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:02:22.739273857 +0000 UTC m=+42.759780917 I0425 16:02:22.746521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:22.757935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:22.758396 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:02:22.758376969 +0000 UTC m=+42.778884019 I0425 16:02:22.763550 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:02:23.289553 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-25 16:02:23.289528471 +0000 UTC m=+43.310035521 I0425 16:02:23.999471 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-25 16:02:23.999456282 +0000 UTC m=+44.019963332 I0425 16:04:08.584761 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-25 16:04:08.584745814 +0000 UTC m=+148.605252834 I0425 16:04:08.584877 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:04:08.584926 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-25 16:04:08.584914548 +0000 UTC m=+148.605421608 E0425 16:04:08.602274 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0425 16:04:08.602313 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-25 16:04:08.602305619 +0000 UTC m=+148.622812639 I0425 16:04:08.602330 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0425 16:04:08.608046 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:04:08.608128 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-25 16:04:08.608120106 +0000 UTC m=+148.628627146 E0425 16:04:08.615999 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0425 16:04:08.616103 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0425 16:04:08.616133 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0425 16:04:08.616167 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0425 16:04:08.616340 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:04:08.616372 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-25 16:04:08.616365069 +0000 UTC m=+148.636872099 I0425 16:04:08.616751 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-25 16:04:08.616742059 +0000 UTC m=+148.637249089 I0425 16:04:08.629222 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:04:08.629305 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:04:08.629333 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-25 16:04:08.629324191 +0000 UTC m=+148.649831251 I0425 16:04:08.805331 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:04:08.809512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:04:08.820313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-mv8s2" condition "Approved" to 2026-04-25 16:04:08.820300253 +0000 UTC m=+148.840807293 I0425 16:04:08.844760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-mv8s2" condition "Ready" to 2026-04-25 16:04:08.844746465 +0000 UTC m=+148.865253495 I0425 16:04:08.846313 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2pvps" condition "Approved" to 2026-04-25 16:04:08.846297096 +0000 UTC m=+148.866804116 I0425 16:04:08.869096 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2pvps" condition "Ready" to 2026-04-25 16:04:08.869084033 +0000 UTC m=+148.889591063 I0425 16:04:08.895135 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:04:08.895123999 +0000 UTC m=+148.915631029 I0425 16:04:08.911917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:04:08.912181 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:04:08.912172251 +0000 UTC m=+148.932679281 I0425 16:04:08.922701 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:04:08.939307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:04:13.617268 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:04:13.617250166 +0000 UTC m=+153.637757216 I0425 16:04:13.633740 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-mv8s2" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:04:13.633725934 +0000 UTC m=+153.654232984 I0425 16:04:13.667095 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:04:13.667081453 +0000 UTC m=+153.687588513 I0425 16:04:13.682709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:04:13.683031 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:04:13.683024867 +0000 UTC m=+153.703531897 I0425 16:04:13.700035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:04:13.701560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:08:01.126173 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready" to 2026-04-25 16:08:01.126154637 +0000 UTC m=+381.146661667 I0425 16:08:01.126891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:08:01.126924 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-04-25 16:08:01.126918008 +0000 UTC m=+381.147425028 I0425 16:08:01.148457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:08:01.154711 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-242.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:08:01.154770 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Issuing" to 2026-04-25 16:08:01.154760009 +0000 UTC m=+381.175267039 I0425 16:08:01.509594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:08:01.518237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-rsm2r" condition "Approved" to 2026-04-25 16:08:01.518211899 +0000 UTC m=+381.538718969 I0425 16:08:01.537334 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-242.nip.io-tls-rsm2r" condition "Ready" to 2026-04-25 16:08:01.537319891 +0000 UTC m=+381.557826921 I0425 16:08:01.561935 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:08:01.561923584 +0000 UTC m=+381.582430614 I0425 16:08:01.582721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:08:01.583277 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:08:01.583263966 +0000 UTC m=+381.603771016 I0425 16:08:01.599076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:08:01.600923 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-242.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-242.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:08:01.601394 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-242.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:08:01.601382582 +0000 UTC m=+381.621889612 I0425 16:10:14.792502 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:10:14.792617 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-25 16:10:14.792608348 +0000 UTC m=+514.813115408 I0425 16:10:14.792601 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-25 16:10:14.792580567 +0000 UTC m=+514.813087627 I0425 16:10:14.815187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:10:14.815426 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:10:14.815505 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-25 16:10:14.815492833 +0000 UTC m=+514.835999883 I0425 16:10:15.119394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xfb72" condition "Approved" to 2026-04-25 16:10:15.119372124 +0000 UTC m=+515.139879174 I0425 16:10:15.138985 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-xfb72" condition "Ready" to 2026-04-25 16:10:15.138971419 +0000 UTC m=+515.159478449 I0425 16:10:15.168317 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:10:15.168305591 +0000 UTC m=+515.188812621 I0425 16:10:15.211268 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:11:07.641440 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-25 16:11:07.641415083 +0000 UTC m=+567.661922143 I0425 16:11:07.641473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:11:07.642084 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-25 16:11:07.6420632 +0000 UTC m=+567.662570270 I0425 16:11:07.658144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:11:07.658251 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0425 16:11:07.658279 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-25 16:11:07.658270363 +0000 UTC m=+567.678777423 I0425 16:11:07.915038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:11:07.929011 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gvlsj" condition "Approved" to 2026-04-25 16:11:07.928998191 +0000 UTC m=+567.949505221 I0425 16:11:07.946988 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-gvlsj" condition "Ready" to 2026-04-25 16:11:07.946974331 +0000 UTC m=+567.967481361 I0425 16:11:07.982150 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:11:07.982135471 +0000 UTC m=+568.002642491 I0425 16:11:08.004150 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:11:08.004425 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:11:08.00441922 +0000 UTC m=+568.024926250 I0425 16:11:08.025574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0425 16:11:08.025922 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:11:08.025915468 +0000 UTC m=+568.046422488