I0910 17:56:43.325427 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0910 17:56:43.325643 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0910 17:56:43.330861 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0910 17:56:43.330896 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0910 17:56:43.330911 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0910 17:56:43.331510 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0910 17:56:43.331626 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0910 17:56:43.331627 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0910 17:56:43.335437 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0910 17:56:43.352832 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0910 17:56:43.360981 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0910 17:56:43.365041 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0910 17:56:43.368914 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0910 17:56:43.372655 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0910 17:56:43.376711 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0910 17:56:43.383324 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0910 17:56:43.386198 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0910 17:56:43.388971 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0910 17:56:43.389004 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0910 17:56:43.391961 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0910 17:56:43.395927 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0910 17:56:43.399853 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0910 17:56:43.404155 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0910 17:56:43.411524 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0910 17:56:43.416693 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0910 17:56:43.416739 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0910 17:56:43.416766 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0910 17:56:43.420963 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0910 17:56:43.421097 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0910 17:56:43.424874 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0910 17:56:43.429965 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0910 17:56:43.436244 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0910 17:56:43.436286 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0910 17:56:43.436414 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0910 17:56:43.440301 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:56:43.440595 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:56:43.441108 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:56:43.441417 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:56:43.441694 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:56:43.442460 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:56:43.470080 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:56:43.490026 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:56:43.515941 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:56:43.537923 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:56:43.553253 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0910 17:56:53.488464 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-10 17:56:53.488437699 +0000 UTC m=+10.206032677 I0910 17:56:54.309385 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:56:54.309440 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 17:56:54.30942709 +0000 UTC m=+11.027022078 I0910 17:56:54.309489 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 17:56:54.309470671 +0000 UTC m=+11.027065659 I0910 17:56:54.325773 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:56:54.326017 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 17:56:54.326001819 +0000 UTC m=+11.043596847 E0910 17:56:54.326609 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 17:56:54.326697 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-10 17:56:54.326686457 +0000 UTC m=+11.044281435 E0910 17:56:54.326730 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 17:56:54.339692 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0910 17:56:54.339845 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 17:56:54.339885 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 17:56:54.339934 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0910 17:56:54.350745 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:56:54.392212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-10 17:56:54.392194601 +0000 UTC m=+11.109789579 I0910 17:56:54.421432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-10 17:56:54.421418004 +0000 UTC m=+11.139013012 I0910 17:56:54.451587 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:56:54.451568863 +0000 UTC m=+11.169163851 I0910 17:56:54.466412 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:56:54.466694 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:56:54.466687943 +0000 UTC m=+11.184282891 I0910 17:56:54.482868 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:56:59.340870 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:56:59.340852943 +0000 UTC m=+16.058447921 I0910 17:57:21.977517 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 17:57:21.97749914 +0000 UTC m=+38.695094098 I0910 17:57:21.977573 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:57:21.977646 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 17:57:21.977635253 +0000 UTC m=+38.695230211 I0910 17:57:21.997835 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:57:21.998016 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:57:21.998079 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 17:57:21.998064424 +0000 UTC m=+38.715659402 I0910 17:57:21.998054 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-10 17:57:21.998036013 +0000 UTC m=+38.715630961 I0910 17:57:22.267989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-10 17:57:22.267968299 +0000 UTC m=+38.985563287 I0910 17:57:22.312027 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-10 17:57:22.312009793 +0000 UTC m=+39.029604771 I0910 17:57:22.362454 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:57:22.362435428 +0000 UTC m=+39.080030406 I0910 17:57:22.394087 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:57:22.395173 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:57:22.395160545 +0000 UTC m=+39.112755533 I0910 17:57:22.413722 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:59:10.834944 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:59:10.834985 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-10 17:59:10.834976641 +0000 UTC m=+147.552571619 I0910 17:59:10.835122 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-10 17:59:10.83495298 +0000 UTC m=+147.552547998 E0910 17:59:10.847077 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 17:59:10.847187 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-10 17:59:10.847158032 +0000 UTC m=+147.564753010 I0910 17:59:10.847213 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 17:59:10.848879 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:59:10.849052 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:59:10.849118 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-10 17:59:10.849109994 +0000 UTC m=+147.566704972 E0910 17:59:10.855765 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" E0910 17:59:10.856374 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 17:59:10.856459 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 17:59:10.856513 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" I0910 17:59:10.859014 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-10 17:59:10.858994714 +0000 UTC m=+147.576589672 I0910 17:59:10.859433 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:59:10.859464 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-10 17:59:10.859458516 +0000 UTC m=+147.577053474 I0910 17:59:10.871349 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:59:10.871478 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 17:59:10.871509 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-10 17:59:10.871499444 +0000 UTC m=+147.589094422 I0910 17:59:11.072866 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:59:11.095077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-09-10 17:59:11.09506308 +0000 UTC m=+147.812658058 I0910 17:59:11.111531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-09-10 17:59:11.111512134 +0000 UTC m=+147.829107112 I0910 17:59:11.128959 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-09-10 17:59:11.128946634 +0000 UTC m=+147.846541582 I0910 17:59:11.150991 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-09-10 17:59:11.150971605 +0000 UTC m=+147.868566603 I0910 17:59:11.182959 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:59:11.182945028 +0000 UTC m=+147.900540016 I0910 17:59:11.202252 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:59:11.203157 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:59:11.203143201 +0000 UTC m=+147.920738179 I0910 17:59:11.220424 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:59:15.857180 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:59:15.857150907 +0000 UTC m=+152.574745855 I0910 17:59:15.871959 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:59:15.871949237 +0000 UTC m=+152.589544185 I0910 17:59:15.899554 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:59:15.899539145 +0000 UTC m=+152.617134093 I0910 17:59:15.915848 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 17:59:15.916394 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 17:59:15.916386849 +0000 UTC m=+152.633981807 I0910 17:59:15.932396 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:02:41.539635 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-149.nip.io-tls" condition "Ready" to 2026-09-10 18:02:41.539617849 +0000 UTC m=+358.257212827 I0910 18:02:41.539685 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-149.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:02:41.539962 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-149.nip.io-tls" condition "Issuing" to 2026-09-10 18:02:41.539935078 +0000 UTC m=+358.257530116 I0910 18:02:41.557109 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-149.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-149.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:02:41.557242 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-149.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:02:41.557277 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-149.nip.io-tls" condition "Issuing" to 2026-09-10 18:02:41.557267715 +0000 UTC m=+358.274862703 I0910 18:02:41.734573 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-149.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-149.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:02:41.754032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-149.nip.io-tls-1" condition "Approved" to 2026-09-10 18:02:41.754013512 +0000 UTC m=+358.471608500 I0910 18:02:41.772942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-149.nip.io-tls-1" condition "Ready" to 2026-09-10 18:02:41.772929221 +0000 UTC m=+358.490524179 I0910 18:02:41.797373 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-149.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:02:41.797359055 +0000 UTC m=+358.514954013 I0910 18:02:41.814084 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-149.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-149.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:03:57.624029 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:03:57.624069 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 18:03:57.624048633 +0000 UTC m=+434.341643611 I0910 18:03:57.624123 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 18:03:57.624109865 +0000 UTC m=+434.341704863 I0910 18:03:57.640186 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:03:57.640319 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:03:57.640470 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 18:03:57.640458566 +0000 UTC m=+434.358053544 E0910 18:03:57.640721 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 18:03:57.640832 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-10 18:03:57.640783754 +0000 UTC m=+434.358378742 E0910 18:03:57.640984 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 18:03:57.652797 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0910 18:03:57.652953 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 18:03:57.653077 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 18:03:57.653159 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0910 18:03:57.684583 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:03:57.696507 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-10 18:03:57.696491733 +0000 UTC m=+434.414086701 I0910 18:03:57.712059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-10 18:03:57.712042744 +0000 UTC m=+434.429637682 I0910 18:03:57.736376 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:03:57.736357965 +0000 UTC m=+434.453952953 I0910 18:03:57.754078 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:03:57.806664 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:02.653355 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:04:02.653341355 +0000 UTC m=+439.370936333 I0910 18:04:43.960593 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 18:04:43.960579388 +0000 UTC m=+480.678174346 I0910 18:04:43.960694 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:04:43.960788 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:04:43.960845 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 18:04:43.960832945 +0000 UTC m=+480.678427903 I0910 18:04:43.960865 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 18:04:43.960851746 +0000 UTC m=+480.678446724 I0910 18:04:43.961097 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 18:04:43.961087642 +0000 UTC m=+480.678682600 I0910 18:04:43.961902 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 18:04:43.961877803 +0000 UTC m=+480.679472841 I0910 18:04:43.965232 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:04:43.965331 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 18:04:43.965319053 +0000 UTC m=+480.682914021 I0910 18:04:43.988240 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:43.991629 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:43.995289 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:43.995417 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 18:04:43.995402547 +0000 UTC m=+480.712997525 I0910 18:04:43.995620 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 18:04:43.995602962 +0000 UTC m=+480.713197920 I0910 18:04:43.995887 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 18:04:43.995879389 +0000 UTC m=+480.713474367 I0910 18:04:44.115134 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:44.136626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-10 18:04:44.13661449 +0000 UTC m=+480.854209438 I0910 18:04:44.149741 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-10 18:04:44.149726046 +0000 UTC m=+480.867320994 I0910 18:04:44.170326 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:04:44.170314739 +0000 UTC m=+480.887909687 I0910 18:04:44.182905 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:44.195253 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:44.252151 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:44.271144 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:44.289164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-10 18:04:44.289144462 +0000 UTC m=+481.006739410 I0910 18:04:44.304150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-10 18:04:44.304139498 +0000 UTC m=+481.021734436 I0910 18:04:44.492963 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:44.594689 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:04:44.594673388 +0000 UTC m=+481.312268356 I0910 18:04:44.739523 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:44.740351 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:04:44.74033936 +0000 UTC m=+481.457934318 I0910 18:04:44.801997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-10 18:04:44.801976375 +0000 UTC m=+481.519571353 I0910 18:04:45.001537 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:04:45.001509126 +0000 UTC m=+481.719104134 I0910 18:04:45.148915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-10 18:04:45.148897392 +0000 UTC m=+481.866492370 I0910 18:04:45.397622 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:45.443551 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:45.491342 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:45.747256 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:04:45.747241379 +0000 UTC m=+482.464836367 I0910 18:04:45.841605 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:45.842490 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:04:45.842478361 +0000 UTC m=+482.560073349 I0910 18:04:46.042356 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:53.288524 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vqltb-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:04:53.288563 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vqltb-tls" condition "Ready" to 2026-09-10 18:04:53.288528257 +0000 UTC m=+490.006123205 I0910 18:04:53.288583 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vqltb-tls" condition "Issuing" to 2026-09-10 18:04:53.288571668 +0000 UTC m=+490.006166636 I0910 18:04:53.302195 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vqltb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vqltb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:53.302335 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-vqltb-tls" condition "Ready" to 2026-09-10 18:04:53.30232526 +0000 UTC m=+490.019920228 I0910 18:04:53.465309 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vqltb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vqltb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:53.499049 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vqltb-tls-1" condition "Approved" to 2026-09-10 18:04:53.499017907 +0000 UTC m=+490.216612895 I0910 18:04:53.522450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-vqltb-tls-1" condition "Ready" to 2026-09-10 18:04:53.522431034 +0000 UTC m=+490.240025982 I0910 18:04:53.549060 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vqltb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:04:53.549038896 +0000 UTC m=+490.266633844 I0910 18:04:53.562984 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vqltb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vqltb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:04:53.563793 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-vqltb-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:04:53.563778785 +0000 UTC m=+490.281373743 I0910 18:04:53.578789 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-vqltb-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-vqltb-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:05:17.562470 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 18:05:17.562450094 +0000 UTC m=+514.280045032 I0910 18:05:17.562594 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:05:17.562673 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 18:05:17.56266295 +0000 UTC m=+514.280257908 I0910 18:05:17.571552 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:05:17.571880 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:05:17.571920 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 18:05:17.571910995 +0000 UTC m=+514.289505953 I0910 18:05:17.701259 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-10 18:05:17.701244909 +0000 UTC m=+514.418839857 I0910 18:05:17.726495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-10 18:05:17.726482137 +0000 UTC m=+514.444077085 I0910 18:05:17.762744 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:05:17.762730547 +0000 UTC m=+514.480325495 I0910 18:05:17.778846 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:05:17.779388 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:05:17.779380178 +0000 UTC m=+514.496975126 I0910 18:05:17.793460 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:08:41.711668 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:08:41.711656 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 18:08:41.711629887 +0000 UTC m=+718.429224875 I0910 18:08:41.711773 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 18:08:41.71176016 +0000 UTC m=+718.429355138 I0910 18:08:41.735475 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:08:41.735647 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:08:41.735694 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 18:08:41.735678804 +0000 UTC m=+718.453273822 I0910 18:08:42.186000 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-10 18:08:42.185974469 +0000 UTC m=+718.903569457 I0910 18:08:42.207063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-10 18:08:42.207041507 +0000 UTC m=+718.924636495 I0910 18:08:42.280695 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:08:42.280672097 +0000 UTC m=+718.998267035 I0910 18:08:42.296728 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:08:42.297077 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:08:42.297070591 +0000 UTC m=+719.014665529 I0910 18:08:42.313486 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:08:42.313573 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:11:29.406451 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:11:29.406507 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-10 18:11:29.406500353 +0000 UTC m=+886.124095311 I0910 18:11:29.406607 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-10 18:11:29.406581685 +0000 UTC m=+886.124176713 I0910 18:11:29.433229 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:11:29.433386 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-10 18:11:29.433374315 +0000 UTC m=+886.150969273 I0910 18:11:29.608713 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:11:29.654894 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Approved" to 2026-09-10 18:11:29.654871791 +0000 UTC m=+886.372466779 I0910 18:11:29.678931 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Ready" to 2026-09-10 18:11:29.678914188 +0000 UTC m=+886.396509176 I0910 18:11:29.713121 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:11:29.713102673 +0000 UTC m=+886.430697651 I0910 18:11:29.732815 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:11:29.736061 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:11:29.736042431 +0000 UTC m=+886.453637419 I0910 18:11:29.745546 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:11:29.757728 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:12:49.663456 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:12:49.663554 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-10 18:12:49.66353716 +0000 UTC m=+966.381132138 I0910 18:12:49.663609 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-10 18:12:49.663590341 +0000 UTC m=+966.381185349 I0910 18:12:49.682225 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:12:49.682462 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-10 18:12:49.682447701 +0000 UTC m=+966.400042689 I0910 18:12:50.014053 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:12:50.048053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Approved" to 2026-09-10 18:12:50.048036597 +0000 UTC m=+966.765631575 I0910 18:12:50.078532 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Ready" to 2026-09-10 18:12:50.078518155 +0000 UTC m=+966.796113123 I0910 18:12:50.104559 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:12:50.104546914 +0000 UTC m=+966.822141882 I0910 18:12:50.122595 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:16:12.387392 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-10 18:16:12.387369802 +0000 UTC m=+1169.104964810 I0910 18:16:12.387508 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:16:12.387544 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-10 18:16:12.387536946 +0000 UTC m=+1169.105131934 I0910 18:16:12.407046 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:16:12.407172 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:16:12.407202 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-10 18:16:12.407192558 +0000 UTC m=+1169.124787536 I0910 18:16:12.614634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Approved" to 2026-09-10 18:16:12.614609662 +0000 UTC m=+1169.332204640 I0910 18:16:12.634254 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Ready" to 2026-09-10 18:16:12.634237043 +0000 UTC m=+1169.351831991 I0910 18:16:12.667134 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:16:12.667112055 +0000 UTC m=+1169.384707023 I0910 18:16:12.688393 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:24:15.916002 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-10 18:24:15.915983523 +0000 UTC m=+1652.633578511 I0910 18:24:15.916247 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:24:15.916352 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-10 18:24:15.916341632 +0000 UTC m=+1652.633936610 I0910 18:24:15.929954 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:24:15.930173 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-10 18:24:15.930163551 +0000 UTC m=+1652.647758509 I0910 18:24:16.012715 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:24:16.048913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Approved" to 2026-09-10 18:24:16.048896179 +0000 UTC m=+1652.766491147 I0910 18:24:16.069797 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Ready" to 2026-09-10 18:24:16.069777987 +0000 UTC m=+1652.787372975 I0910 18:24:16.095829 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:24:16.095816482 +0000 UTC m=+1652.813411420 I0910 18:24:16.112037 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:24:16.112629 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:24:16.11262007 +0000 UTC m=+1652.830215038 I0910 18:24:16.136476 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:26:05.220380 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-10 18:26:05.220325507 +0000 UTC m=+1761.937920495 I0910 18:26:05.220693 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:26:05.220888 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-10 18:26:05.220871371 +0000 UTC m=+1761.938466379 I0910 18:26:05.239141 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:26:05.239545 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-10 18:26:05.239528229 +0000 UTC m=+1761.957123217 I0910 18:26:05.478332 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:26:05.519184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-09-10 18:26:05.519166161 +0000 UTC m=+1762.236761139 I0910 18:26:05.545989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-09-10 18:26:05.545958676 +0000 UTC m=+1762.263553624 I0910 18:26:05.578720 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:26:05.57870156 +0000 UTC m=+1762.296296538 I0910 18:26:05.607876 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:26:05.608590 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:26:05.608581617 +0000 UTC m=+1762.326176575 I0910 18:26:05.629574 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:26:05.630021 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:26:05.630012539 +0000 UTC m=+1762.347607497 I0910 18:27:12.547020 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-10 18:27:12.546994099 +0000 UTC m=+1829.264589077 I0910 18:27:12.547094 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:27:12.547182 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-10 18:27:12.547168184 +0000 UTC m=+1829.264763162 I0910 18:27:12.568191 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:27:12.568313 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:27:12.568344 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-10 18:27:12.568333557 +0000 UTC m=+1829.285928535 I0910 18:27:12.627623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-09-10 18:27:12.627605212 +0000 UTC m=+1829.345200190 I0910 18:27:12.649362 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-09-10 18:27:12.649341461 +0000 UTC m=+1829.366936449 I0910 18:27:12.678121 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:27:12.678093645 +0000 UTC m=+1829.395688633 I0910 18:27:12.707885 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:27:12.708715 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:27:12.708698849 +0000 UTC m=+1829.426293827 I0910 18:27:12.732082 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:27:12.734700 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:27:13.286461 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-10 18:27:13.28643449 +0000 UTC m=+1830.004029528 I0910 18:27:13.286607 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:27:13.286663 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-10 18:27:13.286650546 +0000 UTC m=+1830.004245534 I0910 18:27:13.303153 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:27:13.303299 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:27:13.303334 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-10 18:27:13.30332367 +0000 UTC m=+1830.020918648 I0910 18:27:13.362634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-09-10 18:27:13.362611636 +0000 UTC m=+1830.080206624 I0910 18:27:13.383902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-09-10 18:27:13.383887352 +0000 UTC m=+1830.101482330 I0910 18:27:13.418316 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:27:13.418290196 +0000 UTC m=+1830.135885174 I0910 18:27:13.436530 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:27:13.488863 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:27:14.074606 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-10 18:27:14.074590757 +0000 UTC m=+1830.792185715 I0910 18:27:14.831033 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-10 18:27:14.83101665 +0000 UTC m=+1831.548611628 I0910 18:28:04.829097 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-10 18:28:04.829080059 +0000 UTC m=+1881.546675007 I0910 18:28:04.829680 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:28:04.829705 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-10 18:28:04.829700966 +0000 UTC m=+1881.547295924 I0910 18:28:04.851960 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:28:04.852709 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-10 18:28:04.852688287 +0000 UTC m=+1881.570283235 I0910 18:28:07.472466 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:28:07.518104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Approved" to 2026-09-10 18:28:07.518087427 +0000 UTC m=+1884.235682415 I0910 18:28:07.538122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Ready" to 2026-09-10 18:28:07.53809476 +0000 UTC m=+1884.255689748 I0910 18:28:07.566925 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:28:07.566908236 +0000 UTC m=+1884.284503194 I0910 18:28:07.585467 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:28:07.586753 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:28:07.586744773 +0000 UTC m=+1884.304339731 I0910 18:28:07.603150 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:31:09.455728 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:31:09.455795 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-10 18:31:09.455786458 +0000 UTC m=+2066.173381416 I0910 18:31:09.456692 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-10 18:31:09.456685352 +0000 UTC m=+2066.174280320 I0910 18:31:09.476586 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:31:09.476792 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:31:09.476839 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-10 18:31:09.476825657 +0000 UTC m=+2066.194420655 I0910 18:31:09.864366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Approved" to 2026-09-10 18:31:09.864349972 +0000 UTC m=+2066.581944950 I0910 18:31:09.894678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Ready" to 2026-09-10 18:31:09.894657807 +0000 UTC m=+2066.612252795 I0910 18:31:09.938525 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:31:09.938508263 +0000 UTC m=+2066.656103241 I0910 18:31:09.961090 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:31:09.962514 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:31:09.962502311 +0000 UTC m=+2066.680097289 I0910 18:31:09.970380 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:31:09.981920 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:31:11.171044 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:31:11.171087 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-10 18:31:11.171074877 +0000 UTC m=+2067.888669835 I0910 18:31:11.171724 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-10 18:31:11.171705954 +0000 UTC m=+2067.889300902 I0910 18:31:11.187515 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:31:11.187627 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:31:11.187653 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-10 18:31:11.187643767 +0000 UTC m=+2067.905238745 I0910 18:31:11.452295 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:31:11.465133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Approved" to 2026-09-10 18:31:11.465116765 +0000 UTC m=+2068.182711733 I0910 18:31:11.485176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Ready" to 2026-09-10 18:31:11.485160778 +0000 UTC m=+2068.202755736 I0910 18:31:11.519106 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:31:11.51909198 +0000 UTC m=+2068.236686958 I0910 18:31:11.541249 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:31:11.541964 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:31:11.541953138 +0000 UTC m=+2068.259548116 I0910 18:31:11.561852 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:31:11.564054 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:34:58.630032 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-10 18:34:58.630003709 +0000 UTC m=+2295.347598697 I0910 18:34:58.631227 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:34:58.631303 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-10 18:34:58.631294733 +0000 UTC m=+2295.348889721 I0910 18:34:58.651296 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:34:58.651717 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-10 18:34:58.651692665 +0000 UTC m=+2295.369287653 I0910 18:34:58.839977 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:34:58.878694 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Approved" to 2026-09-10 18:34:58.878674281 +0000 UTC m=+2295.596269269 I0910 18:34:58.903947 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Ready" to 2026-09-10 18:34:58.903925263 +0000 UTC m=+2295.621520251 I0910 18:34:58.937539 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:34:58.937521476 +0000 UTC m=+2295.655116424 I0910 18:34:58.954519 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:34:58.955097 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:34:58.955090304 +0000 UTC m=+2295.672685252 I0910 18:34:58.975416 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:36:01.067349 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-x2rs6-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:36:01.067415 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-x2rs6-vnc" condition "Issuing" to 2026-09-10 18:36:01.067406303 +0000 UTC m=+2357.785001261 I0910 18:36:01.067876 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-x2rs6-vnc" condition "Ready" to 2026-09-10 18:36:01.067871235 +0000 UTC m=+2357.785466193 I0910 18:36:01.068269 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-x2rs6-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:36:01.068300 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-x2rs6-api" condition "Issuing" to 2026-09-10 18:36:01.068280716 +0000 UTC m=+2357.785875674 I0910 18:36:01.068576 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-x2rs6-api" condition "Ready" to 2026-09-10 18:36:01.068571133 +0000 UTC m=+2357.786166101 I0910 18:36:01.090083 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-x2rs6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x2rs6-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:36:01.090285 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-x2rs6-vnc" condition "Ready" to 2026-09-10 18:36:01.090271911 +0000 UTC m=+2357.807866869 I0910 18:36:01.098679 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-x2rs6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x2rs6-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:36:01.098776 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-x2rs6-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:36:01.098797 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-x2rs6-api" condition "Issuing" to 2026-09-10 18:36:01.098787817 +0000 UTC m=+2357.816382765 I0910 18:36:01.202628 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-x2rs6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x2rs6-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:36:01.247757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-x2rs6-vnc-1" condition "Approved" to 2026-09-10 18:36:01.247737718 +0000 UTC m=+2357.965332706 I0910 18:36:01.271628 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-x2rs6-vnc-1" condition "Ready" to 2026-09-10 18:36:01.271612512 +0000 UTC m=+2357.989207480 I0910 18:36:01.303879 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-x2rs6-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:36:01.30386549 +0000 UTC m=+2358.021460428 I0910 18:36:01.325410 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-x2rs6-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x2rs6-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:36:01.332525 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-x2rs6-api-1" condition "Approved" to 2026-09-10 18:36:01.332509612 +0000 UTC m=+2358.050104580 I0910 18:36:01.348168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-x2rs6-api-1" condition "Ready" to 2026-09-10 18:36:01.348153528 +0000 UTC m=+2358.065748476 I0910 18:36:01.374678 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-x2rs6-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:36:01.374657322 +0000 UTC m=+2358.092252300 I0910 18:36:01.390680 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-x2rs6-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-x2rs6-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:40:24.144011 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:40:24.144083 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-10 18:40:24.144073643 +0000 UTC m=+2620.861668621 I0910 18:40:24.144341 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-10 18:40:24.144307039 +0000 UTC m=+2620.861902047 I0910 18:40:24.167230 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:40:24.167960 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:40:24.168041 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-10 18:40:24.168028089 +0000 UTC m=+2620.885623047 I0910 18:40:24.372241 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:40:24.387575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Approved" to 2026-09-10 18:40:24.387555677 +0000 UTC m=+2621.105150635 I0910 18:40:24.436832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Ready" to 2026-09-10 18:40:24.436815406 +0000 UTC m=+2621.154410364 I0910 18:40:24.471283 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:40:24.471268593 +0000 UTC m=+2621.188863581 I0910 18:40:24.489828 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:40:24.490658 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:40:24.490646498 +0000 UTC m=+2621.208241446 I0910 18:40:24.500324 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:40:24.510978 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:40:25.930030 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-10 18:40:25.93001323 +0000 UTC m=+2622.647608218 I0910 18:40:25.930031 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:40:25.930278 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-10 18:40:25.930271396 +0000 UTC m=+2622.647866354 I0910 18:40:25.943775 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:40:25.943947 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:40:25.943988 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-10 18:40:25.943973271 +0000 UTC m=+2622.661568249 I0910 18:40:26.128620 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:40:26.145880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Approved" to 2026-09-10 18:40:26.145848029 +0000 UTC m=+2622.863443027 I0910 18:40:26.167152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Ready" to 2026-09-10 18:40:26.167131515 +0000 UTC m=+2622.884726493 I0910 18:40:26.201210 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:40:26.20119099 +0000 UTC m=+2622.918785968 I0910 18:40:26.217093 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:40:26.218119 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:40:26.21811106 +0000 UTC m=+2622.935706008 I0910 18:40:26.241618 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:42:53.924855 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-10 18:42:53.924834155 +0000 UTC m=+2770.642429133 I0910 18:42:53.924975 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:42:53.925035 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-10 18:42:53.92502789 +0000 UTC m=+2770.642622878 I0910 18:42:53.948145 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" E0910 18:42:53.948487 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 18:42:53.948544 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-10 18:42:53.948531105 +0000 UTC m=+2770.666126093 I0910 18:42:53.948619 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 18:42:53.948894 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-10 18:42:53.948880904 +0000 UTC m=+2770.666475882 E0910 18:42:53.973828 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" E0910 18:42:53.974391 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 18:42:53.974456 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 18:42:53.974534 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" I0910 18:42:53.977642 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:42:54.033677 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Approved" to 2026-09-10 18:42:54.033665608 +0000 UTC m=+2770.751260576 I0910 18:42:54.053102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Ready" to 2026-09-10 18:42:54.053090015 +0000 UTC m=+2770.770684973 I0910 18:42:54.084615 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:42:54.084601253 +0000 UTC m=+2770.802196241 I0910 18:42:54.106222 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:42:54.614218 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-10 18:42:54.614194164 +0000 UTC m=+2771.331789122 I0910 18:42:54.615031 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:42:54.615130 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-10 18:42:54.615118839 +0000 UTC m=+2771.332713827 E0910 18:42:54.625816 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 18:42:54.625887 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-10 18:42:54.625873125 +0000 UTC m=+2771.343468113 I0910 18:42:54.625969 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 18:42:54.630283 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:42:54.636098 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-10 18:42:54.636075887 +0000 UTC m=+2771.353670865 E0910 18:42:54.636677 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" E0910 18:42:54.636889 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 18:42:54.637031 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 18:42:54.637086 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" I0910 18:42:54.659878 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:42:54.691485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Approved" to 2026-09-10 18:42:54.691467799 +0000 UTC m=+2771.409062777 I0910 18:42:54.707079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Ready" to 2026-09-10 18:42:54.707063964 +0000 UTC m=+2771.424658932 I0910 18:42:54.743148 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:42:54.743088912 +0000 UTC m=+2771.460683900 I0910 18:42:54.765998 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:42:55.398843 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:42:55.398911 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-10 18:42:55.398898799 +0000 UTC m=+2772.116493787 I0910 18:42:55.399003 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-10 18:42:55.398985072 +0000 UTC m=+2772.116580050 I0910 18:42:55.414836 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:42:55.414962 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:42:55.415010 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-10 18:42:55.414999217 +0000 UTC m=+2772.132594205 I0910 18:42:55.482908 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Approved" to 2026-09-10 18:42:55.482887523 +0000 UTC m=+2772.200482511 I0910 18:42:55.502351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Ready" to 2026-09-10 18:42:55.50232876 +0000 UTC m=+2772.219923748 I0910 18:42:58.980326 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:42:58.980251375 +0000 UTC m=+2775.697846353 I0910 18:42:59.008925 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:42:59.008904797 +0000 UTC m=+2775.726499775 I0910 18:42:59.052512 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:42:59.052487276 +0000 UTC m=+2775.770082264 I0910 18:42:59.071791 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:42:59.072451 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:42:59.072433286 +0000 UTC m=+2775.790028274 I0910 18:42:59.107897 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:42:59.637898 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:42:59.637866821 +0000 UTC m=+2776.355461779 I0910 18:45:41.523494 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-10 18:45:41.523477001 +0000 UTC m=+2938.241072019 I0910 18:45:41.524088 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:45:41.524122 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-10 18:45:41.524114578 +0000 UTC m=+2938.241709566 I0910 18:45:41.563134 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:45:41.563290 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-10 18:45:41.563278538 +0000 UTC m=+2938.280873516 I0910 18:45:41.818420 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:45:41.863517 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Approved" to 2026-09-10 18:45:41.863499798 +0000 UTC m=+2938.581094786 I0910 18:45:41.888371 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Ready" to 2026-09-10 18:45:41.888352708 +0000 UTC m=+2938.605947696 I0910 18:45:41.920635 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:45:41.920621035 +0000 UTC m=+2938.638216013 I0910 18:45:41.944311 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:45:41.993925 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:30.359129 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-10 18:46:30.359112612 +0000 UTC m=+2987.076707590 I0910 18:46:30.386136 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:46:30.386170 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-10 18:46:30.38615532 +0000 UTC m=+2987.103750308 I0910 18:46:30.386209 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-10 18:46:30.386200701 +0000 UTC m=+2987.103795679 I0910 18:46:30.398754 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:30.398856 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-10 18:46:30.398847707 +0000 UTC m=+2987.116442695 E0910 18:46:30.428549 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller" I0910 18:46:30.497045 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-10 18:46:30.497026554 +0000 UTC m=+2987.214621532 I0910 18:46:30.519165 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-10 18:46:30.519149171 +0000 UTC m=+2987.236744149 I0910 18:46:30.519227 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:46:30.519404 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-10 18:46:30.519390697 +0000 UTC m=+2987.236985675 I0910 18:46:30.545442 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:30.545545 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-10 18:46:30.545534742 +0000 UTC m=+2987.263129750 E0910 18:46:30.592162 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" I0910 18:46:30.871640 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:30.912081 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-09-10 18:46:30.912070553 +0000 UTC m=+2987.629665511 I0910 18:46:30.936547 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-09-10 18:46:30.936528082 +0000 UTC m=+2987.654123070 I0910 18:46:30.961586 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:46:30.961571657 +0000 UTC m=+2987.679166615 I0910 18:46:30.980792 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:30.981811 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:46:30.981798754 +0000 UTC m=+2987.699393732 I0910 18:46:31.010769 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:31.016425 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:31.449128 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-10 18:46:31.44911052 +0000 UTC m=+2988.166705498 I0910 18:46:31.470629 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:46:31.470723 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-10 18:46:31.470715084 +0000 UTC m=+2988.188310042 I0910 18:46:31.471060 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-10 18:46:31.471055773 +0000 UTC m=+2988.188650731 I0910 18:46:31.485253 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:31.485344 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:46:31.485380 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-10 18:46:31.485371073 +0000 UTC m=+2988.202966061 I0910 18:46:31.785166 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:31.814009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-09-10 18:46:31.813993416 +0000 UTC m=+2988.531588364 I0910 18:46:31.837722 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-09-10 18:46:31.837698926 +0000 UTC m=+2988.555293874 I0910 18:46:31.867393 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:46:31.867380704 +0000 UTC m=+2988.584975652 I0910 18:46:31.882082 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:31.882449 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:46:31.882441004 +0000 UTC m=+2988.600035952 I0910 18:46:31.912127 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:31.927386 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-10 18:46:31.927375677 +0000 UTC m=+2988.644970625 I0910 18:46:31.947046 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-10 18:46:31.947022418 +0000 UTC m=+2988.664617376 I0910 18:46:31.947112 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:46:31.947135 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-10 18:46:31.947131821 +0000 UTC m=+2988.664726769 I0910 18:46:31.960403 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:31.960488 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-10 18:46:31.960480176 +0000 UTC m=+2988.678075124 I0910 18:46:32.063577 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:32.098222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-09-10 18:46:32.098207652 +0000 UTC m=+2988.815802600 I0910 18:46:32.113161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-09-10 18:46:32.113150469 +0000 UTC m=+2988.830745407 I0910 18:46:32.147806 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:46:32.147789888 +0000 UTC m=+2988.865384826 I0910 18:46:32.219207 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:32.219682 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:46:32.219674367 +0000 UTC m=+2988.937269305 I0910 18:46:32.437610 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-10 18:46:32.437597052 +0000 UTC m=+2989.155192000 I0910 18:46:32.455668 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 18:46:32.455697 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-10 18:46:32.455689883 +0000 UTC m=+2989.173284821 I0910 18:46:32.455869 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-10 18:46:32.455865747 +0000 UTC m=+2989.173460695 I0910 18:46:32.464911 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:32.519394 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:32.664022 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:32.664123 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-10 18:46:32.664115276 +0000 UTC m=+2989.381710224 I0910 18:46:32.916838 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:33.079773 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-09-10 18:46:33.079760101 +0000 UTC m=+2989.797355039 I0910 18:46:33.125658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-09-10 18:46:33.125627609 +0000 UTC m=+2989.843222557 I0910 18:46:33.628723 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:46:33.628701155 +0000 UTC m=+2990.346296133 I0910 18:46:33.772340 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 18:46:33.772762 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 18:46:33.772756539 +0000 UTC m=+2990.490351487 I0910 18:46:33.972187 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"