I0729 14:06:28.728702       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0729 14:06:28.728837       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0729 14:06:28.732371       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0729 14:06:28.732394       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0729 14:06:28.732403       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0729 14:06:28.732758       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0729 14:06:28.732806       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0729 14:06:28.732928       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0729 14:06:28.735836       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0729 14:06:28.752023       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0729 14:06:28.758591       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0729 14:06:28.762087       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0729 14:06:28.764360       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0729 14:06:28.766716       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0729 14:06:28.770671       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0729 14:06:28.773071       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0729 14:06:28.773183       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0729 14:06:28.775987       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0729 14:06:28.779094       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0729 14:06:28.779245       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0729 14:06:28.781419       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0729 14:06:28.784761       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0729 14:06:28.789445       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0729 14:06:28.789480       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0729 14:06:28.789532       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0729 14:06:28.793904       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0729 14:06:28.795942       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0729 14:06:28.797541       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0729 14:06:28.799253       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0729 14:06:28.799273       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0729 14:06:28.799363       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0729 14:06:28.801363       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0729 14:06:28.803186       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0729 14:06:28.808811       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0729 14:06:28.811686       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0729 14:06:28.811765       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0729 14:06:28.812141       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0729 14:06:28.812244       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0729 14:06:28.812595       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0729 14:06:28.813215       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0729 14:06:28.813280       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0729 14:06:28.813466       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0729 14:06:28.813814       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0729 14:06:28.827829       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0729 14:06:28.851646       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0729 14:06:42.519632       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-29 14:06:42.519595049 +0000 UTC m=+13.819064377
I0729 14:06:43.264741       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0729 14:06:43.264815       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-29 14:06:43.264798922 +0000 UTC m=+14.564268240
I0729 14:06:43.264861       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-29 14:06:43.264847953 +0000 UTC m=+14.564317321
E0729 14:06:43.275146       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0729 14:06:43.275211       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-29 14:06:43.275198925 +0000 UTC m=+14.574668253
E0729 14:06:43.275272       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0729 14:06:43.279826       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:06:43.280028       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-29 14:06:43.279943709 +0000 UTC m=+14.579413037
E0729 14:06:43.285347       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0729 14:06:43.285432       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0729 14:06:43.285450       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0729 14:06:43.285476       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0729 14:06:43.293692       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:06:43.322283       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-29 14:06:43.322264509 +0000 UTC m=+14.621733867
I0729 14:06:43.344970       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-29 14:06:43.34495937 +0000 UTC m=+14.644428688
I0729 14:06:43.363346       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 14:06:43.363336056 +0000 UTC m=+14.662805374
I0729 14:06:43.382646       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:06:43.383242       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 14:06:43.3832224 +0000 UTC m=+14.682691718
I0729 14:06:43.400267       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:06:43.400794       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 14:06:43.400778547 +0000 UTC m=+14.700247885
I0729 14:06:48.286439       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 14:06:48.286420256 +0000 UTC m=+19.585889594
I0729 14:07:09.537381       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0729 14:07:09.537460       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-29 14:07:09.53745052 +0000 UTC m=+40.836919858
I0729 14:07:09.537473       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-29 14:07:09.53745611 +0000 UTC m=+40.836925448
I0729 14:07:09.547093       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-29 14:07:09.547082684 +0000 UTC m=+40.846552002
I0729 14:07:09.552230       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:07:09.552483       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-29 14:07:09.552433144 +0000 UTC m=+40.851902452
I0729 14:07:09.804419       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:07:09.831408       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-29 14:07:09.831392784 +0000 UTC m=+41.130862112
I0729 14:07:09.855934       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-29 14:07:09.855925531 +0000 UTC m=+41.155394849
I0729 14:07:09.885052       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 14:07:09.885033119 +0000 UTC m=+41.184502437
I0729 14:07:09.900992       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:21:23.474129       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Ready" to 2026-07-29 14:21:23.474111597 +0000 UTC m=+894.773580955
I0729 14:21:23.474360       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0729 14:21:23.474578       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Issuing" to 2026-07-29 14:21:23.474562197 +0000 UTC m=+894.774031535
I0729 14:21:23.484879       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:21:23.485020       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-23.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0729 14:21:23.485068       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Issuing" to 2026-07-29 14:21:23.485055445 +0000 UTC m=+894.784524763
I0729 14:21:23.760520       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-23.nip.io-tls-1" condition "Approved" to 2026-07-29 14:21:23.760507536 +0000 UTC m=+895.059976854
I0729 14:21:23.777170       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-23.nip.io-tls-1" condition "Ready" to 2026-07-29 14:21:23.777158004 +0000 UTC m=+895.076627322
I0729 14:21:23.800338       1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-23.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 14:21:23.800324141 +0000 UTC m=+895.099793459
I0729 14:21:23.815714       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:21:23.854233       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-23.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-23.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:25:14.475903       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0729 14:25:14.475936       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-29 14:25:14.475922985 +0000 UTC m=+1125.775392313
I0729 14:25:14.475974       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-29 14:25:14.475965016 +0000 UTC m=+1125.775434334
I0729 14:25:14.488681       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:25:14.488759       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0729 14:25:14.488782       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-29 14:25:14.488772251 +0000 UTC m=+1125.788241569
I0729 14:25:14.598486       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:25:14.612145       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-29 14:25:14.612126108 +0000 UTC m=+1125.911595456
I0729 14:25:14.625853       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-29 14:25:14.625840683 +0000 UTC m=+1125.925310001
I0729 14:25:14.648382       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 14:25:14.648367826 +0000 UTC m=+1125.947837124
I0729 14:25:14.660734       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:25:14.661329       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 14:25:14.661322164 +0000 UTC m=+1125.960791472
I0729 14:25:14.679093       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:29:40.568303       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0729 14:29:40.568378       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-29 14:29:40.568367811 +0000 UTC m=+1391.867837149
I0729 14:29:40.568607       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-29 14:29:40.568518135 +0000 UTC m=+1391.867987483
I0729 14:29:40.585845       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:29:40.585953       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0729 14:29:40.585993       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-29 14:29:40.585974383 +0000 UTC m=+1391.885443691
I0729 14:29:40.794414       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Approved" to 2026-07-29 14:29:40.794398667 +0000 UTC m=+1392.093867985
I0729 14:29:40.808744       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Ready" to 2026-07-29 14:29:40.808734299 +0000 UTC m=+1392.108203617
I0729 14:29:40.829302       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 14:29:40.829284773 +0000 UTC m=+1392.128754091
I0729 14:29:40.844555       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0729 14:29:40.845659       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-29 14:29:40.845646205 +0000 UTC m=+1392.145115553
I0729 14:29:40.859039       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"