I0910 02:01:22.272121 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0910 02:01:22.272358 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0910 02:01:22.272478 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0910 02:01:22.277659 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0910 02:01:22.278172 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0910 02:01:22.280033 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0910 02:01:22.280133 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0910 02:01:22.285400 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0910 02:01:22.307019 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0910 02:01:22.312530 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0910 02:01:22.316549 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0910 02:01:22.316596 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0910 02:01:22.316623 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0910 02:01:22.320611 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0910 02:01:22.326403 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0910 02:01:22.330908 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0910 02:01:22.334869 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0910 02:01:22.334969 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0910 02:01:22.338739 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0910 02:01:22.338834 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0910 02:01:22.343026 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0910 02:01:22.346694 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0910 02:01:22.350852 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0910 02:01:22.355370 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0910 02:01:22.355963 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0910 02:01:22.363310 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0910 02:01:22.367359 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0910 02:01:22.371459 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0910 02:01:22.375336 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0910 02:01:22.378973 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0910 02:01:22.382922 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0910 02:01:22.383060 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0910 02:01:22.387360 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0910 02:01:22.391678 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 02:01:22.391784 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 02:01:22.396757 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 02:01:22.413841 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 02:01:22.443905 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 02:01:22.467480 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 02:01:22.492902 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 02:01:22.514814 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 02:01:22.516298 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 02:01:22.537970 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 02:01:34.205134 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-10 02:01:34.20511789 +0000 UTC m=+11.970244749 I0910 02:01:34.949361 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:01:34.949489 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 02:01:34.949474683 +0000 UTC m=+12.714601552 I0910 02:01:34.949459 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 02:01:34.949434822 +0000 UTC m=+12.714561691 E0910 02:01:34.963807 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 02:01:34.963975 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-10 02:01:34.963959874 +0000 UTC m=+12.729086733 E0910 02:01:34.964043 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 02:01:34.968459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:34.968575 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 02:01:34.968562208 +0000 UTC m=+12.733689097 E0910 02:01:34.976617 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0910 02:01:34.976735 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 02:01:34.976786 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 02:01:34.976994 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0910 02:01:34.990755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:35.021238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6fkdn" condition "Approved" to 2026-09-10 02:01:35.021224259 +0000 UTC m=+12.786351118 I0910 02:01:35.053103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6fkdn" condition "Ready" to 2026-09-10 02:01:35.053081567 +0000 UTC m=+12.818208436 I0910 02:01:35.089882 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:35.089860849 +0000 UTC m=+12.854987718 I0910 02:01:35.112597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:35.112975 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:35.112962672 +0000 UTC m=+12.878089531 I0910 02:01:35.123552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:35.136437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:35.137388 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:35.137645 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:35.137635298 +0000 UTC m=+12.902762117 I0910 02:01:39.977557 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:39.977525847 +0000 UTC m=+17.742652706 I0910 02:02:02.873754 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 02:02:02.873732088 +0000 UTC m=+40.638858957 I0910 02:02:02.874000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:02:02.874097 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 02:02:02.874086907 +0000 UTC m=+40.639213776 I0910 02:02:02.889212 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-10 02:02:02.889194814 +0000 UTC m=+40.654321673 I0910 02:02:02.903497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:02:02.903579 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:02:02.903637 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 02:02:02.903629353 +0000 UTC m=+40.668756222 I0910 02:02:03.162848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:02:03.172653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cvkmw" condition "Approved" to 2026-09-10 02:02:03.172637578 +0000 UTC m=+40.937764447 I0910 02:02:03.219692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cvkmw" condition "Ready" to 2026-09-10 02:02:03.219672176 +0000 UTC m=+40.984799035 I0910 02:02:03.263848 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:02:03.263835017 +0000 UTC m=+41.028961846 I0910 02:02:03.295248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:02:03.296014 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:02:03.295980524 +0000 UTC m=+41.061107393 I0910 02:02:03.326800 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:02:03.330302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:02:03.332093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:02:03.332615 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:02:03.332603712 +0000 UTC m=+41.097730581 I0910 02:03:47.799141 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:03:47.799749 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-10 02:03:47.799253143 +0000 UTC m=+145.564380002 I0910 02:03:47.799838 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-10 02:03:47.798999136 +0000 UTC m=+145.564125995 E0910 02:03:47.818697 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:03:47.818801 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-10 02:03:47.818788566 +0000 UTC m=+145.583915425 I0910 02:03:47.818861 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:03:47.823739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:03:47.823839 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:03:47.823876 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-10 02:03:47.82386884 +0000 UTC m=+145.588995699 E0910 02:03:47.833099 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0910 02:03:47.833252 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:03:47.833337 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 02:03:47.833395 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0910 02:03:47.835025 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:03:47.835061 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-10 02:03:47.835049373 +0000 UTC m=+145.600176242 I0910 02:03:47.835149 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-10 02:03:47.835137046 +0000 UTC m=+145.600263905 I0910 02:03:47.858886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:03:47.859184 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-10 02:03:47.859060263 +0000 UTC m=+145.624293055 I0910 02:03:47.993589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gqh6q" condition "Approved" to 2026-09-10 02:03:47.993568993 +0000 UTC m=+145.758695832 I0910 02:03:48.028693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:03:48.030256 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gqh6q" condition "Ready" to 2026-09-10 02:03:48.030244976 +0000 UTC m=+145.795371805 I0910 02:03:48.060923 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-n5wl9" condition "Approved" to 2026-09-10 02:03:48.060905371 +0000 UTC m=+145.826032230 I0910 02:03:48.068328 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:03:48.068310025 +0000 UTC m=+145.833436884 I0910 02:03:48.080251 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-n5wl9" condition "Ready" to 2026-09-10 02:03:48.080238879 +0000 UTC m=+145.845365748 I0910 02:03:48.116398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:03:48.116677 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:03:48.116669555 +0000 UTC m=+145.881796384 I0910 02:03:48.196276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:03:52.833848 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:03:52.833828843 +0000 UTC m=+150.598955702 I0910 02:03:52.855504 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-n5wl9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:03:52.855483352 +0000 UTC m=+150.620610211 I0910 02:03:52.891549 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:03:52.891527158 +0000 UTC m=+150.656654017 I0910 02:03:52.925134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:03:52.925702 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:03:52.925689584 +0000 UTC m=+150.690816443 I0910 02:03:52.937952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:03:52.960656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:03:52.962820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:03:52.963200 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:03:52.963187189 +0000 UTC m=+150.728314048 I0910 02:07:19.356710 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-195.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:07:19.356779 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-195.nip.io-tls" condition "Issuing" to 2026-09-10 02:07:19.356765839 +0000 UTC m=+357.121892708 I0910 02:07:19.356740 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-195.nip.io-tls" condition "Ready" to 2026-09-10 02:07:19.356689897 +0000 UTC m=+357.121816756 I0910 02:07:19.380216 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-195.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-195.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:07:19.380348 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-195.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:07:19.380387 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-195.nip.io-tls" condition "Issuing" to 2026-09-10 02:07:19.380378187 +0000 UTC m=+357.145505046 I0910 02:07:19.627393 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-195.nip.io-tls-nkhm5" condition "Approved" to 2026-09-10 02:07:19.627377744 +0000 UTC m=+357.392504603 I0910 02:07:19.649984 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-195.nip.io-tls-nkhm5" condition "Ready" to 2026-09-10 02:07:19.649973385 +0000 UTC m=+357.415100224 I0910 02:07:19.686079 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-195.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:07:19.686061721 +0000 UTC m=+357.451188590 I0910 02:07:19.713947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-195.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-195.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:08:35.381331 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:08:35.381589 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 02:08:35.381529145 +0000 UTC m=+433.146656034 I0910 02:08:35.382198 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 02:08:35.381471304 +0000 UTC m=+433.146598143 E0910 02:08:35.399826 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 02:08:35.399934 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-10 02:08:35.399923419 +0000 UTC m=+433.165050288 E0910 02:08:35.399984 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 02:08:35.403196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:08:35.403318 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:08:35.403361 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 02:08:35.403355488 +0000 UTC m=+433.168482327 E0910 02:08:35.411660 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0910 02:08:35.411912 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 02:08:35.411975 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 02:08:35.412131 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0910 02:08:35.448682 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:08:35.449109 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2gfgg" condition "Approved" to 2026-09-10 02:08:35.449093928 +0000 UTC m=+433.214220787 I0910 02:08:35.462956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-2gfgg" condition "Ready" to 2026-09-10 02:08:35.462942052 +0000 UTC m=+433.228068911 I0910 02:08:35.486864 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:08:35.48685156 +0000 UTC m=+433.251978389 I0910 02:08:35.501950 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:08:35.545376 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:08:40.412348 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:08:40.412335326 +0000 UTC m=+438.177462185 I0910 02:09:22.895967 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:09:22.896046 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 02:09:22.896037024 +0000 UTC m=+480.661163863 I0910 02:09:22.896551 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 02:09:22.896545978 +0000 UTC m=+480.661672817 I0910 02:09:22.896802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:09:22.896821 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 02:09:22.896817075 +0000 UTC m=+480.661943914 I0910 02:09:22.896979 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 02:09:22.896964609 +0000 UTC m=+480.662091448 I0910 02:09:22.898870 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 02:09:22.898864909 +0000 UTC m=+480.663991748 I0910 02:09:22.899192 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:09:22.899213 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 02:09:22.899209098 +0000 UTC m=+480.664335937 I0910 02:09:22.944207 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:22.947572 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 02:09:22.947559837 +0000 UTC m=+480.712686686 I0910 02:09:22.954595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:22.954672 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 02:09:22.954665563 +0000 UTC m=+480.719792392 I0910 02:09:22.968573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:22.968653 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 02:09:22.968642089 +0000 UTC m=+480.733768928 I0910 02:09:23.052431 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:23.097181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bqgdt" condition "Approved" to 2026-09-10 02:09:23.097170922 +0000 UTC m=+480.862297761 I0910 02:09:23.119486 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-bqgdt" condition "Ready" to 2026-09-10 02:09:23.119475087 +0000 UTC m=+480.884601926 I0910 02:09:23.174519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:23.208219 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:09:23.208315 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 02:09:23.208303978 +0000 UTC m=+480.973430847 I0910 02:09:23.222820 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:09:23.222806419 +0000 UTC m=+480.987933288 I0910 02:09:23.241077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bzv9g" condition "Approved" to 2026-09-10 02:09:23.241065289 +0000 UTC m=+481.006192148 I0910 02:09:23.257002 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:23.257384 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:09:23.257375216 +0000 UTC m=+481.022502045 I0910 02:09:23.258869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:23.260857 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bzv9g" condition "Ready" to 2026-09-10 02:09:23.260847147 +0000 UTC m=+481.025973976 I0910 02:09:23.409766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cltmk" condition "Approved" to 2026-09-10 02:09:23.409742115 +0000 UTC m=+481.174868954 I0910 02:09:23.453557 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:09:23.453535393 +0000 UTC m=+481.218662232 I0910 02:09:23.508470 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:23.611125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-cltmk" condition "Ready" to 2026-09-10 02:09:23.611106379 +0000 UTC m=+481.376233228 I0910 02:09:24.015423 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:24.016219 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:09:24.016204568 +0000 UTC m=+481.781331437 I0910 02:09:24.410069 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5vs6t" condition "Approved" to 2026-09-10 02:09:24.410052213 +0000 UTC m=+482.175179082 I0910 02:09:24.504999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:24.618446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-5vs6t" condition "Ready" to 2026-09-10 02:09:24.618418791 +0000 UTC m=+482.383545650 I0910 02:09:25.304613 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:09:25.304591006 +0000 UTC m=+483.069717865 I0910 02:09:25.352829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:25.504457 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:25.505072 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:09:25.505060796 +0000 UTC m=+483.270187655 I0910 02:09:25.753719 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:25.804275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:31.763950 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7blpf-tls" condition "Ready" to 2026-09-10 02:09:31.763930371 +0000 UTC m=+489.529057240 I0910 02:09:31.764063 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7blpf-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:09:31.764123 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7blpf-tls" condition "Issuing" to 2026-09-10 02:09:31.764101546 +0000 UTC m=+489.529228405 I0910 02:09:31.787776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7blpf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7blpf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:31.787892 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-7blpf-tls" condition "Ready" to 2026-09-10 02:09:31.78788178 +0000 UTC m=+489.553008639 I0910 02:09:31.970634 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7blpf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7blpf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:09:32.009650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7blpf-nfdz2" condition "Approved" to 2026-09-10 02:09:32.009634149 +0000 UTC m=+489.774760988 I0910 02:09:32.030698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-7blpf-nfdz2" condition "Ready" to 2026-09-10 02:09:32.030684041 +0000 UTC m=+489.795810880 I0910 02:09:32.058910 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-7blpf-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:09:32.058895251 +0000 UTC m=+489.824022090 I0910 02:09:32.078462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-7blpf-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-7blpf-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:10:01.221277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:10:01.221321 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 02:10:01.221310513 +0000 UTC m=+518.986437342 I0910 02:10:01.221381 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 02:10:01.221366215 +0000 UTC m=+518.986493044 I0910 02:10:01.244490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:10:01.244590 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 02:10:01.244580694 +0000 UTC m=+519.009707523 I0910 02:10:01.504442 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:10:02.095977 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wsss9" condition "Approved" to 2026-09-10 02:10:02.095959355 +0000 UTC m=+519.861086214 I0910 02:10:02.126634 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wsss9" condition "Ready" to 2026-09-10 02:10:02.126617339 +0000 UTC m=+519.891744208 I0910 02:10:02.168286 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:10:02.168240171 +0000 UTC m=+519.933367030 I0910 02:10:02.205319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:10:02.205895 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:10:02.20587822 +0000 UTC m=+519.971005089 I0910 02:10:02.229723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:10:02.230212 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:10:02.230196907 +0000 UTC m=+519.995323776 I0910 02:10:02.257004 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:10:02.25698867 +0000 UTC m=+520.022115509 I0910 02:10:02.269366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:13:24.579893 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 02:13:24.579817896 +0000 UTC m=+722.344944755 I0910 02:13:24.579908 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:13:24.579988 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 02:13:24.5799798 +0000 UTC m=+722.345106659 I0910 02:13:24.601567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:13:24.601666 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 02:13:24.601655905 +0000 UTC m=+722.366782764 I0910 02:13:24.773066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:13:24.816986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tnscl" condition "Approved" to 2026-09-10 02:13:24.816962623 +0000 UTC m=+722.582089522 I0910 02:13:24.846518 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-tnscl" condition "Ready" to 2026-09-10 02:13:24.846495943 +0000 UTC m=+722.611622822 I0910 02:13:24.885098 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:13:24.885081161 +0000 UTC m=+722.650208010 I0910 02:13:24.914881 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:13:24.962785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:15:58.510266 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-10 02:15:58.510255372 +0000 UTC m=+876.275382201 I0910 02:15:58.510599 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:15:58.510710 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-10 02:15:58.510698093 +0000 UTC m=+876.275824952 I0910 02:15:58.530198 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:15:58.530293 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:15:58.530434 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-10 02:15:58.530315895 +0000 UTC m=+876.295442764 I0910 02:15:58.783314 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-v4ccx" condition "Approved" to 2026-09-10 02:15:58.783300175 +0000 UTC m=+876.548427044 I0910 02:15:58.805252 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-v4ccx" condition "Ready" to 2026-09-10 02:15:58.805238318 +0000 UTC m=+876.570365187 I0910 02:15:58.846872 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:15:58.846856314 +0000 UTC m=+876.611983173 I0910 02:15:58.873912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:15:58.874466 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:15:58.874455915 +0000 UTC m=+876.639582784 I0910 02:15:58.907561 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:17:11.192249 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:17:11.192421 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-10 02:17:11.192276405 +0000 UTC m=+948.957403234 I0910 02:17:11.193866 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-10 02:17:11.193853936 +0000 UTC m=+948.958980775 I0910 02:17:11.446683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:17:11.446768 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-10 02:17:11.446758356 +0000 UTC m=+949.211885225 I0910 02:17:11.805804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:17:11.887319 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-swkjc" condition "Approved" to 2026-09-10 02:17:11.887302621 +0000 UTC m=+949.652429480 I0910 02:17:11.916604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-swkjc" condition "Ready" to 2026-09-10 02:17:11.916589024 +0000 UTC m=+949.681715883 I0910 02:17:11.957517 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:17:11.957503832 +0000 UTC m=+949.722630681 I0910 02:17:11.985665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:20:25.242017 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-10 02:20:25.241998446 +0000 UTC m=+1143.007125305 I0910 02:20:25.242700 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:20:25.242796 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-10 02:20:25.242783797 +0000 UTC m=+1143.007910656 I0910 02:20:25.271589 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:20:25.271818 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:20:25.271903 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-10 02:20:25.271842954 +0000 UTC m=+1143.036969803 I0910 02:20:25.553184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vzl8n" condition "Approved" to 2026-09-10 02:20:25.553174261 +0000 UTC m=+1143.318301090 I0910 02:20:25.584068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-vzl8n" condition "Ready" to 2026-09-10 02:20:25.584053256 +0000 UTC m=+1143.349180115 I0910 02:20:25.619152 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:20:25.61913491 +0000 UTC m=+1143.384261769 I0910 02:20:25.644559 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:20:25.645133 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:20:25.645121246 +0000 UTC m=+1143.410248115 I0910 02:20:25.677857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:28:31.575752 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:28:31.575791 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-10 02:28:31.57572112 +0000 UTC m=+1629.340847979 I0910 02:28:31.575842 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-10 02:28:31.575833543 +0000 UTC m=+1629.340960412 I0910 02:28:31.625672 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:28:31.625819 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-10 02:28:31.625810564 +0000 UTC m=+1629.390937403 I0910 02:28:31.809775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:28:31.892230 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-vt8fw" condition "Approved" to 2026-09-10 02:28:31.89221938 +0000 UTC m=+1629.657346219 I0910 02:28:31.922550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-vt8fw" condition "Ready" to 2026-09-10 02:28:31.922537699 +0000 UTC m=+1629.687664548 I0910 02:28:31.955223 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:28:31.95521166 +0000 UTC m=+1629.720338509 I0910 02:28:31.974710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:28:31.975038 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:28:31.975033216 +0000 UTC m=+1629.740160045 I0910 02:28:32.013072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:30:06.032943 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:30:06.033017 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-10 02:30:06.032966365 +0000 UTC m=+1723.798093204 I0910 02:30:06.033047 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-10 02:30:06.033034697 +0000 UTC m=+1723.798161566 I0910 02:30:06.062925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:30:06.063026 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:30:06.063048 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-10 02:30:06.063042268 +0000 UTC m=+1723.828169087 I0910 02:30:06.267384 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-89r9z" condition "Approved" to 2026-09-10 02:30:06.267370877 +0000 UTC m=+1724.032497736 I0910 02:30:06.292566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-89r9z" condition "Ready" to 2026-09-10 02:30:06.292555483 +0000 UTC m=+1724.057682322 I0910 02:30:06.323459 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:30:06.323449318 +0000 UTC m=+1724.088576147 I0910 02:30:06.351607 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:31:13.370180 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:31:13.370237 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-10 02:31:13.370222373 +0000 UTC m=+1791.135349232 I0910 02:31:13.370310 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-10 02:31:13.370244643 +0000 UTC m=+1791.135371512 I0910 02:31:13.398632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:31:13.398853 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-10 02:31:13.398770527 +0000 UTC m=+1791.163897396 I0910 02:31:13.426878 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:31:13.471626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-l8gq8" condition "Approved" to 2026-09-10 02:31:13.471594664 +0000 UTC m=+1791.236721533 I0910 02:31:13.501310 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-l8gq8" condition "Ready" to 2026-09-10 02:31:13.501299158 +0000 UTC m=+1791.266425987 I0910 02:31:13.533913 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:31:13.533888957 +0000 UTC m=+1791.299015826 I0910 02:31:13.565017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:31:13.565518 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:31:13.565504791 +0000 UTC m=+1791.330631660 I0910 02:31:13.592551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:31:13.592878 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:31:13.592868403 +0000 UTC m=+1791.357995242 I0910 02:31:14.073571 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-10 02:31:14.073543954 +0000 UTC m=+1791.838670813 I0910 02:31:14.074299 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:31:14.074377 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-10 02:31:14.074369816 +0000 UTC m=+1791.839496675 I0910 02:31:14.107115 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:31:14.107501 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:31:14.107544 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-10 02:31:14.107532719 +0000 UTC m=+1791.872659568 I0910 02:31:14.178264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-lp2pl" condition "Approved" to 2026-09-10 02:31:14.178242381 +0000 UTC m=+1791.943369220 I0910 02:31:14.202441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-lp2pl" condition "Ready" to 2026-09-10 02:31:14.202427711 +0000 UTC m=+1791.967554540 I0910 02:31:14.240733 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:31:14.240712078 +0000 UTC m=+1792.005838917 I0910 02:31:14.262665 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:31:14.263063 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:31:14.26305282 +0000 UTC m=+1792.028179649 I0910 02:31:14.280153 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:31:14.787578 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-10 02:31:14.787561343 +0000 UTC m=+1792.552688162 I0910 02:31:15.489994 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-10 02:31:15.48997323 +0000 UTC m=+1793.255100089 I0910 02:32:02.716282 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:32:02.716331 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-10 02:32:02.716321694 +0000 UTC m=+1840.481448523 I0910 02:32:02.720586 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-10 02:32:02.720577634 +0000 UTC m=+1840.485704463 I0910 02:32:02.751825 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:32:02.751914 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-10 02:32:02.751907561 +0000 UTC m=+1840.517034400 I0910 02:32:04.593932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:32:04.644146 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-slmld" condition "Approved" to 2026-09-10 02:32:04.64413038 +0000 UTC m=+1842.409257219 I0910 02:32:04.668745 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-slmld" condition "Ready" to 2026-09-10 02:32:04.668732012 +0000 UTC m=+1842.433858841 I0910 02:32:04.701418 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:32:04.701394232 +0000 UTC m=+1842.466521061 I0910 02:32:04.723965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:32:04.724705 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:32:04.72469631 +0000 UTC m=+1842.489823149 I0910 02:32:04.754813 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:34:58.724292 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:34:58.724380 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-10 02:34:58.724350226 +0000 UTC m=+2016.489477085 I0910 02:34:58.724723 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-10 02:34:58.724712956 +0000 UTC m=+2016.489839825 I0910 02:34:58.763783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:34:58.764225 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-10 02:34:58.764211835 +0000 UTC m=+2016.529338694 I0910 02:34:58.823373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:34:58.853889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-7t6dw" condition "Approved" to 2026-09-10 02:34:58.853876421 +0000 UTC m=+2016.619003250 I0910 02:34:58.871529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-7t6dw" condition "Ready" to 2026-09-10 02:34:58.871519219 +0000 UTC m=+2016.636646058 I0910 02:34:58.898703 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:34:58.898687838 +0000 UTC m=+2016.663814677 I0910 02:34:58.919588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:34:58.919918 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:34:58.91991226 +0000 UTC m=+2016.685039089 I0910 02:34:58.932770 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:34:58.943604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:35:00.353605 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:35:00.353652 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-10 02:35:00.353641567 +0000 UTC m=+2018.118768426 I0910 02:35:00.353783 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-10 02:35:00.35376981 +0000 UTC m=+2018.118896679 I0910 02:35:00.373242 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:35:00.373395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:35:00.373425 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-10 02:35:00.373416072 +0000 UTC m=+2018.138542931 I0910 02:35:00.633733 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-j9sqr" condition "Approved" to 2026-09-10 02:35:00.633716832 +0000 UTC m=+2018.398843661 I0910 02:35:00.650169 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-j9sqr" condition "Ready" to 2026-09-10 02:35:00.650158191 +0000 UTC m=+2018.415285020 I0910 02:35:00.683264 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:35:00.683247303 +0000 UTC m=+2018.448374132 I0910 02:35:00.714797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:35:00.775851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:38:25.456809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:38:25.456856 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-10 02:38:25.456844333 +0000 UTC m=+2223.221971202 I0910 02:38:25.458565 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-10 02:38:25.458552598 +0000 UTC m=+2223.223679437 I0910 02:38:25.502683 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:38:25.502781 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:38:25.502797 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-10 02:38:25.50279271 +0000 UTC m=+2223.267919539 I0910 02:38:25.693886 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-lwv77" condition "Approved" to 2026-09-10 02:38:25.693878378 +0000 UTC m=+2223.459005207 I0910 02:38:25.714400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-lwv77" condition "Ready" to 2026-09-10 02:38:25.714389121 +0000 UTC m=+2223.479515960 I0910 02:38:25.747506 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:38:25.747478723 +0000 UTC m=+2223.512605562 I0910 02:38:25.770215 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:38:25.770629 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:38:25.770621026 +0000 UTC m=+2223.535747865 I0910 02:38:25.802395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:38:42.609093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w682p-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:38:42.609144 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w682p-api" condition "Issuing" to 2026-09-10 02:38:42.609113057 +0000 UTC m=+2240.374239886 I0910 02:38:42.609460 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w682p-api" condition "Ready" to 2026-09-10 02:38:42.609456666 +0000 UTC m=+2240.374583495 I0910 02:38:42.626370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w682p-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w682p-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:38:42.626432 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w682p-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:38:42.626449 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w682p-api" condition "Issuing" to 2026-09-10 02:38:42.626439759 +0000 UTC m=+2240.391566598 I0910 02:38:42.827633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-w682p-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w682p-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:38:42.834041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w682p-api-25rvw" condition "Approved" to 2026-09-10 02:38:42.834031696 +0000 UTC m=+2240.599158525 I0910 02:38:42.860035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w682p-api-25rvw" condition "Ready" to 2026-09-10 02:38:42.860019283 +0000 UTC m=+2240.625146152 I0910 02:38:42.905437 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-w682p-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:38:42.905415226 +0000 UTC m=+2240.670542095 I0910 02:38:42.929936 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-w682p-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w682p-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:38:42.939050 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-w682p-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:38:42.939028722 +0000 UTC m=+2240.704155591 I0910 02:38:42.947342 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-w682p-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w682p-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:38:42.959000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-w682p-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w682p-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:52.463803 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-10 02:42:52.463785115 +0000 UTC m=+2490.228911954 I0910 02:42:52.463938 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:42:52.464041 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-10 02:42:52.464031302 +0000 UTC m=+2490.229158161 I0910 02:42:52.488971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:52.489086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:42:52.489115 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-10 02:42:52.489106245 +0000 UTC m=+2490.254233104 I0910 02:42:52.790597 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-gmr5f" condition "Approved" to 2026-09-10 02:42:52.790583668 +0000 UTC m=+2490.555710507 I0910 02:42:52.814900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-gmr5f" condition "Ready" to 2026-09-10 02:42:52.814886801 +0000 UTC m=+2490.580013640 I0910 02:42:52.857702 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:42:52.857682686 +0000 UTC m=+2490.622809515 I0910 02:42:52.892745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:54.116960 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-10 02:42:54.116937288 +0000 UTC m=+2491.882064157 I0910 02:42:54.117253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:42:54.117377 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-10 02:42:54.117350139 +0000 UTC m=+2491.882476998 I0910 02:42:54.150810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:54.151006 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-10 02:42:54.150989855 +0000 UTC m=+2491.916116714 I0910 02:42:54.424710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:54.463070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-29sbx" condition "Approved" to 2026-09-10 02:42:54.463045713 +0000 UTC m=+2492.228172572 I0910 02:42:54.488275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-29sbx" condition "Ready" to 2026-09-10 02:42:54.48825519 +0000 UTC m=+2492.253382029 I0910 02:42:54.527103 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:42:54.527087491 +0000 UTC m=+2492.292214310 I0910 02:42:54.549978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:54.550546 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:42:54.550528982 +0000 UTC m=+2492.315655851 I0910 02:42:54.574629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:54.583527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:32.652244 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-10 02:45:32.65222773 +0000 UTC m=+2650.417354589 I0910 02:45:32.652785 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:45:32.652815 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-10 02:45:32.652809275 +0000 UTC m=+2650.417936134 E0910 02:45:32.676602 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:45:32.676717 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-10 02:45:32.676702309 +0000 UTC m=+2650.441829168 I0910 02:45:32.676756 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:45:32.681078 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:32.681224 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-10 02:45:32.681213607 +0000 UTC m=+2650.446340466 E0910 02:45:32.690874 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0910 02:45:32.691436 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:45:32.691529 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 02:45:32.691585 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0910 02:45:32.704072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:32.704369 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-10 02:45:32.704353572 +0000 UTC m=+2650.469480441 I0910 02:45:32.707311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-wqvlm" condition "Approved" to 2026-09-10 02:45:32.707297308 +0000 UTC m=+2650.472424177 I0910 02:45:32.723719 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-10 02:45:32.723700217 +0000 UTC m=+2650.488827086 I0910 02:45:32.731879 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-wqvlm" condition "Ready" to 2026-09-10 02:45:32.73186613 +0000 UTC m=+2650.496992959 I0910 02:45:32.733415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:32.765571 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:45:32.76555186 +0000 UTC m=+2650.530678699 I0910 02:45:32.797842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:32.798352 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:45:32.798314685 +0000 UTC m=+2650.563441514 I0910 02:45:32.818600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:33.490155 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:45:33.490250 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-10 02:45:33.490238814 +0000 UTC m=+2651.255365673 I0910 02:45:33.490631 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-10 02:45:33.490617814 +0000 UTC m=+2651.255744713 E0910 02:45:33.508492 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:45:33.508594 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-10 02:45:33.508582093 +0000 UTC m=+2651.273708932 I0910 02:45:33.508624 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:45:33.512857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:33.513043 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:45:33.513096 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-10 02:45:33.513082971 +0000 UTC m=+2651.278209840 E0910 02:45:33.523196 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0910 02:45:33.523315 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:45:33.523366 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 02:45:33.523406 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0910 02:45:33.558654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:33.565399 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-595f9" condition "Approved" to 2026-09-10 02:45:33.565387376 +0000 UTC m=+2651.330514215 I0910 02:45:33.582125 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-595f9" condition "Ready" to 2026-09-10 02:45:33.582110924 +0000 UTC m=+2651.347237773 I0910 02:45:33.620294 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:45:33.62028144 +0000 UTC m=+2651.385408279 I0910 02:45:33.644231 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:33.644685 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:45:33.644677248 +0000 UTC m=+2651.409804077 I0910 02:45:33.670788 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:33.671111 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:45:33.671101047 +0000 UTC m=+2651.436227886 I0910 02:45:34.312511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:45:34.312555 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-10 02:45:34.312544028 +0000 UTC m=+2652.077670887 I0910 02:45:34.312647 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-10 02:45:34.312632991 +0000 UTC m=+2652.077759820 I0910 02:45:34.334901 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:34.335006 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:45:34.335032 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-10 02:45:34.335022505 +0000 UTC m=+2652.100149344 I0910 02:45:34.400364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:34.405050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-49gt9" condition "Approved" to 2026-09-10 02:45:34.405032544 +0000 UTC m=+2652.170159403 I0910 02:45:34.428940 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-49gt9" condition "Ready" to 2026-09-10 02:45:34.428926688 +0000 UTC m=+2652.194053527 I0910 02:45:37.692116 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:45:37.692100934 +0000 UTC m=+2655.457227793 I0910 02:45:37.706060 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-49gt9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:45:37.706050158 +0000 UTC m=+2655.471176987 I0910 02:45:37.745298 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:45:37.745279993 +0000 UTC m=+2655.510406862 I0910 02:45:37.773526 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:45:38.524371 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:45:38.524355328 +0000 UTC m=+2656.289482167 I0910 02:48:10.617533 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-10 02:48:10.617500374 +0000 UTC m=+2808.382627193 I0910 02:48:10.617423 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:48:10.617588 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-10 02:48:10.617580036 +0000 UTC m=+2808.382706895 I0910 02:48:10.637980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:48:10.638100 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:48:10.638136 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-10 02:48:10.638124943 +0000 UTC m=+2808.403251802 I0910 02:48:10.877080 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-ph5hp" condition "Approved" to 2026-09-10 02:48:10.877060912 +0000 UTC m=+2808.642187781 I0910 02:48:10.904924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-ph5hp" condition "Ready" to 2026-09-10 02:48:10.904908249 +0000 UTC m=+2808.670035108 I0910 02:48:10.956476 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:48:10.956460046 +0000 UTC m=+2808.721586885 I0910 02:48:10.986532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:48:10.987086 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:48:10.987075865 +0000 UTC m=+2808.752202704 I0910 02:48:11.014861 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:48:11.018062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:48:11.018442 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:48:11.018434464 +0000 UTC m=+2808.783561303 I0910 02:48:59.230128 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-10 02:48:59.230107664 +0000 UTC m=+2856.995234533 I0910 02:48:59.264849 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-10 02:48:59.26482797 +0000 UTC m=+2857.029954839 I0910 02:48:59.265321 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:48:59.265352 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-10 02:48:59.265347074 +0000 UTC m=+2857.030473913 I0910 02:48:59.284447 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:48:59.284523 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:48:59.284558 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-10 02:48:59.284535705 +0000 UTC m=+2857.049662544 E0910 02:48:59.304545 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0910 02:48:59.366243 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-10 02:48:59.366209998 +0000 UTC m=+2857.131336827 I0910 02:48:59.399126 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-10 02:48:59.399095296 +0000 UTC m=+2857.164222125 I0910 02:48:59.399541 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:48:59.399557 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-10 02:48:59.399554038 +0000 UTC m=+2857.164680867 I0910 02:48:59.423107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:48:59.423321 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:48:59.423349 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-10 02:48:59.42334255 +0000 UTC m=+2857.188469379 E0910 02:48:59.606722 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0910 02:48:59.655431 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-jlq8z" condition "Approved" to 2026-09-10 02:48:59.655415791 +0000 UTC m=+2857.420542620 I0910 02:48:59.681072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-jlq8z" condition "Ready" to 2026-09-10 02:48:59.681060531 +0000 UTC m=+2857.446187370 I0910 02:48:59.718443 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:48:59.718427816 +0000 UTC m=+2857.483554645 I0910 02:48:59.806653 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:48:59.807063 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:48:59.807056761 +0000 UTC m=+2857.572183610 I0910 02:49:00.006312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:00.582220 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-10 02:49:00.582202643 +0000 UTC m=+2858.347329482 I0910 02:49:00.618516 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:49:00.618555 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-10 02:49:00.618548503 +0000 UTC m=+2858.383675332 I0910 02:49:00.619107 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-10 02:49:00.619102997 +0000 UTC m=+2858.384229826 I0910 02:49:00.638471 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:00.638575 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-10 02:49:00.638565885 +0000 UTC m=+2858.403692724 I0910 02:49:01.016332 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:01.057892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-lkbd7" condition "Approved" to 2026-09-10 02:49:01.057861685 +0000 UTC m=+2858.822988514 I0910 02:49:01.079351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-lkbd7" condition "Ready" to 2026-09-10 02:49:01.079337976 +0000 UTC m=+2858.844464805 I0910 02:49:01.105000 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:49:01.104990436 +0000 UTC m=+2858.870117265 I0910 02:49:01.127591 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:01.127910 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:49:01.127903254 +0000 UTC m=+2858.893030083 I0910 02:49:01.130841 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-10 02:49:01.130834621 +0000 UTC m=+2858.895961450 I0910 02:49:01.132927 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:01.153606 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:01.155187 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-10 02:49:01.155171506 +0000 UTC m=+2858.920298335 I0910 02:49:01.155518 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:49:01.155537 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-10 02:49:01.155533626 +0000 UTC m=+2858.920660445 I0910 02:49:01.176667 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:01.176735 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-10 02:49:01.176728889 +0000 UTC m=+2858.941855718 I0910 02:49:01.335832 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:01.365193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-k99xf" condition "Approved" to 2026-09-10 02:49:01.36518028 +0000 UTC m=+2859.130307109 I0910 02:49:01.382937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-k99xf" condition "Ready" to 2026-09-10 02:49:01.382927214 +0000 UTC m=+2859.148054043 I0910 02:49:01.421100 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:49:01.42109174 +0000 UTC m=+2859.186218569 I0910 02:49:01.492817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:01.493090 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:49:01.49308576 +0000 UTC m=+2859.258212579 I0910 02:49:01.538648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:01.699617 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-10 02:49:01.699603374 +0000 UTC m=+2859.464730203 I0910 02:49:01.723998 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-10 02:49:01.72398419 +0000 UTC m=+2859.489111019 I0910 02:49:01.724372 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:49:01.724389 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-10 02:49:01.724386251 +0000 UTC m=+2859.489513080 I0910 02:49:01.738555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:01.738604 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:49:01.738618 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-10 02:49:01.738612353 +0000 UTC m=+2859.503739172 I0910 02:49:02.082916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-p8k8h" condition "Approved" to 2026-09-10 02:49:02.082898814 +0000 UTC m=+2859.848025643 I0910 02:49:02.105546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-p8k8h" condition "Ready" to 2026-09-10 02:49:02.105532595 +0000 UTC m=+2859.870659424 I0910 02:49:02.297379 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:49:02.297365654 +0000 UTC m=+2860.062492483 I0910 02:49:02.440122 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:02.440638 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:49:02.440631456 +0000 UTC m=+2860.205758285 I0910 02:49:02.694988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:49:02.747786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"