I0816 12:54:28.591904 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0816 12:54:28.592062 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0816 12:54:28.592154 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0816 12:54:28.596202 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0816 12:54:28.596652 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0816 12:54:28.596716 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0816 12:54:28.596743 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0816 12:54:28.599777 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0816 12:54:28.614320 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0816 12:54:28.618546 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0816 12:54:28.624514 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0816 12:54:28.627095 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0816 12:54:28.629569 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0816 12:54:28.631496 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0816 12:54:28.633323 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0816 12:54:28.635129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0816 12:54:28.637845 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0816 12:54:28.642829 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0816 12:54:28.642857 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0816 12:54:28.642867 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0816 12:54:28.642876 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0816 12:54:28.642991 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0816 12:54:28.645447 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0816 12:54:28.647872 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0816 12:54:28.650331 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0816 12:54:28.650445 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0816 12:54:28.652859 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0816 12:54:28.654948 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0816 12:54:28.656491 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0816 12:54:28.658210 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0816 12:54:28.665272 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0816 12:54:28.665323 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0816 12:54:28.668089 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0816 12:54:28.670455 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:54:28.671521 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:54:28.672680 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:54:28.701679 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:54:28.717085 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:54:28.733018 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:54:28.751667 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:54:28.758460 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:54:28.767931 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:54:28.783610 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0816 12:54:39.831214 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-16 12:54:39.831190342 +0000 UTC m=+11.269412081 I0816 12:54:40.554277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:54:40.554316 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-16 12:54:40.554308286 +0000 UTC m=+11.992530015 I0816 12:54:40.554396 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-16 12:54:40.554366508 +0000 UTC m=+11.992588217 E0816 12:54:40.568255 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0816 12:54:40.568336 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-16 12:54:40.568329768 +0000 UTC m=+12.006551477 E0816 12:54:40.568360 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0816 12:54:40.572857 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:54:40.572991 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-16 12:54:40.572978978 +0000 UTC m=+12.011200707 E0816 12:54:40.582287 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0816 12:54:40.582440 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0816 12:54:40.582534 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0816 12:54:40.582680 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0816 12:54:40.586820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:54:40.586911 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-16 12:54:40.586904247 +0000 UTC m=+12.025125946 I0816 12:54:40.588819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f9cgz" condition "Approved" to 2026-08-16 12:54:40.58879853 +0000 UTC m=+12.027020269 I0816 12:54:40.602803 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f9cgz" condition "Ready" to 2026-08-16 12:54:40.602791191 +0000 UTC m=+12.041012930 I0816 12:54:40.627523 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:54:40.627505342 +0000 UTC m=+12.065727061 I0816 12:54:40.645140 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:54:40.688374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:54:45.583592 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:54:45.583559941 +0000 UTC m=+17.021781670 I0816 12:55:06.632476 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:55:06.632607 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-16 12:55:06.632598323 +0000 UTC m=+38.070820042 I0816 12:55:06.632711 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-16 12:55:06.632691626 +0000 UTC m=+38.070913365 I0816 12:55:06.644367 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-16 12:55:06.644349612 +0000 UTC m=+38.082571351 I0816 12:55:06.659620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:55:06.660072 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-16 12:55:06.660063441 +0000 UTC m=+38.098285160 I0816 12:55:07.031889 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:55:07.067126 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-clbvp" condition "Approved" to 2026-08-16 12:55:07.06711036 +0000 UTC m=+38.505332099 I0816 12:55:07.102135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-clbvp" condition "Ready" to 2026-08-16 12:55:07.102124599 +0000 UTC m=+38.540346298 I0816 12:55:07.135395 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:55:07.135367028 +0000 UTC m=+38.573588737 I0816 12:55:07.155410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:55:07.155824 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:55:07.15581614 +0000 UTC m=+38.594037859 I0816 12:55:07.176587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:50.855079 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-08-16 12:56:50.855038505 +0000 UTC m=+142.293260244 I0816 12:56:50.855137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:56:50.855186 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-08-16 12:56:50.855175449 +0000 UTC m=+142.293397188 E0816 12:56:50.870696 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0816 12:56:50.870781 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-08-16 12:56:50.870772921 +0000 UTC m=+142.308994630 I0816 12:56:50.870827 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0816 12:56:50.873352 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:50.873565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:56:50.873605 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-08-16 12:56:50.873596639 +0000 UTC m=+142.311818348 E0816 12:56:50.882318 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0816 12:56:50.883082 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0816 12:56:50.883134 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0816 12:56:50.883186 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0816 12:56:50.883279 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:56:50.883316 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-08-16 12:56:50.883307508 +0000 UTC m=+142.321529217 I0816 12:56:50.883311 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-08-16 12:56:50.883304498 +0000 UTC m=+142.321526197 I0816 12:56:50.898618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:50.898856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:56:50.898894 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-08-16 12:56:50.89888488 +0000 UTC m=+142.337106619 I0816 12:56:51.053212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-nrw4d" condition "Approved" to 2026-08-16 12:56:51.053190606 +0000 UTC m=+142.491412325 I0816 12:56:51.098818 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-nrw4d" condition "Ready" to 2026-08-16 12:56:51.09880893 +0000 UTC m=+142.537030619 I0816 12:56:51.124595 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:56:51.124583124 +0000 UTC m=+142.562804833 I0816 12:56:51.126420 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bm44r" condition "Approved" to 2026-08-16 12:56:51.126399104 +0000 UTC m=+142.564620833 I0816 12:56:51.144056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:51.147179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-bm44r" condition "Ready" to 2026-08-16 12:56:51.147159619 +0000 UTC m=+142.585381348 I0816 12:56:51.198783 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:56:55.883017 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:56:55.883004066 +0000 UTC m=+147.321225805 I0816 12:56:55.900882 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-bm44r" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:56:55.900863971 +0000 UTC m=+147.339085720 I0816 12:56:55.934904 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:56:55.934884484 +0000 UTC m=+147.373106223 I0816 12:56:55.958870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:59:28.608913 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready" to 2026-08-16 12:59:28.608879121 +0000 UTC m=+300.047100830 I0816 12:59:28.609261 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-222.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:59:28.609360 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Issuing" to 2026-08-16 12:59:28.609348124 +0000 UTC m=+300.047569863 I0816 12:59:28.629584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:59:28.629636 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-222.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 12:59:28.629649 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Issuing" to 2026-08-16 12:59:28.62964365 +0000 UTC m=+300.067865349 I0816 12:59:28.929932 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 12:59:28.939970 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-222.nip.io-tls-fhtfj" condition "Approved" to 2026-08-16 12:59:28.939951091 +0000 UTC m=+300.378172830 I0816 12:59:28.960748 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-222.nip.io-tls-fhtfj" condition "Ready" to 2026-08-16 12:59:28.960740032 +0000 UTC m=+300.398961741 I0816 12:59:29.008046 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 12:59:29.008038602 +0000 UTC m=+300.446260311 I0816 12:59:29.026982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:00:43.065217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:00:43.065267 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-16 13:00:43.065250041 +0000 UTC m=+374.503471770 I0816 13:00:43.065770 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-16 13:00:43.065744975 +0000 UTC m=+374.503966684 E0816 13:00:43.080505 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0816 13:00:43.080665 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-16 13:00:43.08064799 +0000 UTC m=+374.518869719 E0816 13:00:43.080790 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0816 13:00:43.082762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:00:43.082880 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-16 13:00:43.082868061 +0000 UTC m=+374.521089800 E0816 13:00:43.094964 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0816 13:00:43.096253 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0816 13:00:43.098000 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0816 13:00:43.098156 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0816 13:00:43.100325 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:00:43.100386 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-16 13:00:43.100377118 +0000 UTC m=+374.538598827 I0816 13:00:43.104189 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:00:43.106369 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-c7zz7" condition "Approved" to 2026-08-16 13:00:43.106354624 +0000 UTC m=+374.544576363 I0816 13:00:43.120465 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-c7zz7" condition "Ready" to 2026-08-16 13:00:43.120455506 +0000 UTC m=+374.558677215 I0816 13:00:43.145338 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:00:43.145326067 +0000 UTC m=+374.583547796 I0816 13:00:43.162139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:00:48.095295 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:00:48.095284402 +0000 UTC m=+379.533506111 I0816 13:01:29.458360 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-16 13:01:29.458344463 +0000 UTC m=+420.896566172 I0816 13:01:29.458925 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-16 13:01:29.458919519 +0000 UTC m=+420.897141228 I0816 13:01:29.459384 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:01:29.459415 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-16 13:01:29.459408292 +0000 UTC m=+420.897630001 I0816 13:01:29.459671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:01:29.459701 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-16 13:01:29.459697631 +0000 UTC m=+420.897919340 I0816 13:01:29.461120 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-16 13:01:29.46110656 +0000 UTC m=+420.899328259 I0816 13:01:29.461878 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:01:29.461901 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-16 13:01:29.461896862 +0000 UTC m=+420.900118561 I0816 13:01:29.503237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:29.503309 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-16 13:01:29.503302513 +0000 UTC m=+420.941524212 I0816 13:01:29.503661 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:29.504581 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-16 13:01:29.504572058 +0000 UTC m=+420.942793767 I0816 13:01:29.506355 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:29.506471 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:01:29.506637 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-16 13:01:29.506494462 +0000 UTC m=+420.944716171 I0816 13:01:29.568236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:29.612992 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-thhrr" condition "Approved" to 2026-08-16 13:01:29.612982862 +0000 UTC m=+421.051204561 I0816 13:01:29.642014 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-thhrr" condition "Ready" to 2026-08-16 13:01:29.641999098 +0000 UTC m=+421.080220827 I0816 13:01:29.685482 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:01:29.685467457 +0000 UTC m=+421.123689156 I0816 13:01:29.687329 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:29.711097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:29.711463 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:01:29.711456499 +0000 UTC m=+421.149678208 I0816 13:01:29.721286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mv95z" condition "Approved" to 2026-08-16 13:01:29.721266242 +0000 UTC m=+421.159487981 I0816 13:01:29.733790 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:29.734246 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:01:29.734236612 +0000 UTC m=+421.172458321 I0816 13:01:29.741611 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-mv95z" condition "Ready" to 2026-08-16 13:01:29.741596117 +0000 UTC m=+421.179817826 I0816 13:01:29.857968 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:01:29.857956311 +0000 UTC m=+421.296178020 I0816 13:01:30.044707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:30.045033 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:01:30.045027791 +0000 UTC m=+421.483249490 I0816 13:01:30.096755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:30.150881 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pk8fv" condition "Approved" to 2026-08-16 13:01:30.150862173 +0000 UTC m=+421.589083912 I0816 13:01:30.404161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-pk8fv" condition "Ready" to 2026-08-16 13:01:30.404141514 +0000 UTC m=+421.842363243 I0816 13:01:30.746265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:30.795586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:31.098677 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:01:31.098660549 +0000 UTC m=+422.536882258 I0816 13:01:31.246243 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:31.547858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:38.173034 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:01:38.173062 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls" condition "Issuing" to 2026-08-16 13:01:38.173055367 +0000 UTC m=+429.611277056 I0816 13:01:38.173118 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls" condition "Ready" to 2026-08-16 13:01:38.173094868 +0000 UTC m=+429.611316627 I0816 13:01:38.191160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:38.191255 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls" condition "Ready" to 2026-08-16 13:01:38.191239742 +0000 UTC m=+429.629461481 I0816 13:01:38.356686 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:38.386192 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8jxp9-xzlhq" condition "Approved" to 2026-08-16 13:01:38.386177911 +0000 UTC m=+429.824399620 I0816 13:01:38.428716 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-8jxp9-xzlhq" condition "Ready" to 2026-08-16 13:01:38.428705493 +0000 UTC m=+429.866927202 I0816 13:01:38.490342 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:01:38.490327956 +0000 UTC m=+429.928549695 I0816 13:01:38.514654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:38.515220 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:01:38.515208358 +0000 UTC m=+429.953430097 I0816 13:01:38.519663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:38.533387 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:01:38.533753 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-8jxp9-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:01:38.533744273 +0000 UTC m=+429.971965982 I0816 13:02:02.844420 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:02:02.844468 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-16 13:02:02.844448047 +0000 UTC m=+454.282669756 I0816 13:02:02.844714 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-16 13:02:02.844697953 +0000 UTC m=+454.282919652 I0816 13:02:02.865322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:02:02.865427 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-16 13:02:02.865416281 +0000 UTC m=+454.303638010 I0816 13:02:03.219818 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:02:03.537070 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lcnfh" condition "Approved" to 2026-08-16 13:02:03.537054818 +0000 UTC m=+454.975276547 I0816 13:02:03.771465 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-lcnfh" condition "Ready" to 2026-08-16 13:02:03.77144889 +0000 UTC m=+455.209670629 I0816 13:02:03.824754 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:02:03.824736795 +0000 UTC m=+455.262958504 I0816 13:02:03.844018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:02:03.844485 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:02:03.844476395 +0000 UTC m=+455.282698124 I0816 13:02:03.871762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:05:25.691007 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-16 13:05:25.690972062 +0000 UTC m=+657.129193771 I0816 13:05:25.691071 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:05:25.691141 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-16 13:05:25.691132266 +0000 UTC m=+657.129353975 I0816 13:05:25.707574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:05:25.707659 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-16 13:05:25.707651695 +0000 UTC m=+657.145873414 I0816 13:05:25.905627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:05:25.937808 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5zqmk" condition "Approved" to 2026-08-16 13:05:25.937793354 +0000 UTC m=+657.376015053 I0816 13:05:25.958025 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5zqmk" condition "Ready" to 2026-08-16 13:05:25.958014226 +0000 UTC m=+657.396235935 I0816 13:05:25.984860 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:05:25.984845631 +0000 UTC m=+657.423067340 I0816 13:05:26.006716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:05:26.053159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:07:56.335356 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:07:56.336099 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-16 13:07:56.33607202 +0000 UTC m=+807.774293719 I0816 13:07:56.336733 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-08-16 13:07:56.335428582 +0000 UTC m=+807.773650291 I0816 13:07:56.358658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:07:56.358735 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-16 13:07:56.358729081 +0000 UTC m=+807.796950770 I0816 13:07:56.454610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:07:56.489576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qwws5" condition "Approved" to 2026-08-16 13:07:56.489566381 +0000 UTC m=+807.927788090 I0816 13:07:56.516961 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-qwws5" condition "Ready" to 2026-08-16 13:07:56.516947323 +0000 UTC m=+807.955169032 I0816 13:07:56.544506 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:07:56.54448006 +0000 UTC m=+807.982701799 I0816 13:07:56.563684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:07:56.563996 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:07:56.563988402 +0000 UTC m=+808.002210111 I0816 13:07:56.590500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:08:58.853629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:08:58.853843 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-08-16 13:08:58.853794127 +0000 UTC m=+870.292015836 I0816 13:08:58.853939 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-08-16 13:08:58.853919931 +0000 UTC m=+870.292141650 I0816 13:08:58.872971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:08:58.873128 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-08-16 13:08:58.873116434 +0000 UTC m=+870.311338153 I0816 13:08:58.937402 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:08:58.984166 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-j5wjr" condition "Approved" to 2026-08-16 13:08:58.98415517 +0000 UTC m=+870.422376879 I0816 13:08:59.006217 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-j5wjr" condition "Ready" to 2026-08-16 13:08:59.006204543 +0000 UTC m=+870.444426252 I0816 13:08:59.038927 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:08:59.038911622 +0000 UTC m=+870.477133331 I0816 13:08:59.061386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:08:59.131026 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:12:03.731616 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:12:03.731790 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-08-16 13:12:03.731727114 +0000 UTC m=+1055.169948843 I0816 13:12:03.732715 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-08-16 13:12:03.731741935 +0000 UTC m=+1055.169963644 I0816 13:12:03.748149 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:12:03.748226 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-08-16 13:12:03.748217193 +0000 UTC m=+1055.186438902 I0816 13:12:03.938294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:12:03.970646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xznn8" condition "Approved" to 2026-08-16 13:12:03.970633598 +0000 UTC m=+1055.408855307 I0816 13:12:03.989900 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-xznn8" condition "Ready" to 2026-08-16 13:12:03.989889105 +0000 UTC m=+1055.428110814 I0816 13:12:04.016750 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:12:04.016737222 +0000 UTC m=+1055.454958941 I0816 13:12:04.039761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:12:04.040376 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:12:04.04036927 +0000 UTC m=+1055.478590979 I0816 13:12:04.055167 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:12:04.055599 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:12:04.055590345 +0000 UTC m=+1055.493812054 I0816 13:18:12.220992 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:18:12.221024 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-08-16 13:18:12.220975598 +0000 UTC m=+1423.659197327 I0816 13:18:12.221038 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-08-16 13:18:12.221025769 +0000 UTC m=+1423.659247478 I0816 13:18:12.237137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:18:12.237302 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-08-16 13:18:12.237237521 +0000 UTC m=+1423.675459250 I0816 13:18:12.316012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:18:12.354102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-nswng" condition "Approved" to 2026-08-16 13:18:12.354084687 +0000 UTC m=+1423.792306396 I0816 13:18:12.392099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-nswng" condition "Ready" to 2026-08-16 13:18:12.392083355 +0000 UTC m=+1423.830305054 I0816 13:18:12.424725 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:18:12.424707755 +0000 UTC m=+1423.862929464 I0816 13:18:12.447049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:18:12.447493 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:18:12.447485389 +0000 UTC m=+1423.885707098 I0816 13:18:12.455917 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:18:12.471459 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:19:41.430440 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:19:41.430504 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-08-16 13:19:41.430473462 +0000 UTC m=+1512.868695171 I0816 13:19:41.430578 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-08-16 13:19:41.430563395 +0000 UTC m=+1512.868785104 I0816 13:19:41.448071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:19:41.448133 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-08-16 13:19:41.448126514 +0000 UTC m=+1512.886348213 I0816 13:19:41.680978 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:19:41.717212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-rs8wf" condition "Approved" to 2026-08-16 13:19:41.717176791 +0000 UTC m=+1513.155398530 I0816 13:19:41.743189 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-rs8wf" condition "Ready" to 2026-08-16 13:19:41.743168505 +0000 UTC m=+1513.181390244 I0816 13:19:41.796719 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:19:41.796698347 +0000 UTC m=+1513.234920076 I0816 13:19:41.825362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:19:41.826172 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:19:41.826162107 +0000 UTC m=+1513.264383816 I0816 13:19:41.835183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:19:41.848166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:19:41.848690 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:19:41.848678115 +0000 UTC m=+1513.286899824 I0816 13:20:38.897157 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:20:38.897222 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-16 13:20:38.897213713 +0000 UTC m=+1570.335435422 I0816 13:20:38.897612 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-08-16 13:20:38.897607774 +0000 UTC m=+1570.335829473 I0816 13:20:38.950930 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:20:38.951013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:20:38.951030 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-16 13:20:38.951025212 +0000 UTC m=+1570.389246911 I0816 13:20:39.007102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-fzdx8" condition "Approved" to 2026-08-16 13:20:39.007073784 +0000 UTC m=+1570.445295523 I0816 13:20:39.032968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-fzdx8" condition "Ready" to 2026-08-16 13:20:39.032949495 +0000 UTC m=+1570.471171234 I0816 13:20:39.061050 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:20:39.061031368 +0000 UTC m=+1570.499253077 I0816 13:20:39.081555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:20:39.082273 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:20:39.082259879 +0000 UTC m=+1570.520481618 I0816 13:20:39.105045 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:20:39.105483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:20:39.579772 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:20:39.579905 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-08-16 13:20:39.579892544 +0000 UTC m=+1571.018114283 I0816 13:20:39.580468 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-16 13:20:39.580439499 +0000 UTC m=+1571.018661228 I0816 13:20:39.601255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:20:39.601429 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-16 13:20:39.601413514 +0000 UTC m=+1571.039635243 I0816 13:20:39.619214 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:20:39.646832 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-lkkjq" condition "Approved" to 2026-08-16 13:20:39.646817069 +0000 UTC m=+1571.085038768 I0816 13:20:39.665179 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-lkkjq" condition "Ready" to 2026-08-16 13:20:39.66516086 +0000 UTC m=+1571.103382589 I0816 13:20:39.691831 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:20:39.691811312 +0000 UTC m=+1571.130033051 I0816 13:20:39.712157 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:20:39.772698 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:20:40.307380 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-08-16 13:20:40.307358443 +0000 UTC m=+1571.745580182 I0816 13:20:40.990186 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-08-16 13:20:40.990164277 +0000 UTC m=+1572.428386016 I0816 13:21:27.086073 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:21:27.086104 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-08-16 13:21:27.086098825 +0000 UTC m=+1618.524320524 I0816 13:21:27.086437 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-08-16 13:21:27.086432965 +0000 UTC m=+1618.524654654 I0816 13:21:27.111095 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:21:27.111273 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-08-16 13:21:27.111259425 +0000 UTC m=+1618.549481154 I0816 13:21:30.547503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:21:30.591434 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-kxcl2" condition "Approved" to 2026-08-16 13:21:30.591419142 +0000 UTC m=+1622.029640841 I0816 13:21:30.618987 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-kxcl2" condition "Ready" to 2026-08-16 13:21:30.618973129 +0000 UTC m=+1622.057194838 I0816 13:21:30.654302 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:21:30.654286281 +0000 UTC m=+1622.092508000 I0816 13:21:30.672948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:21:30.674777 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:21:30.67474057 +0000 UTC m=+1622.112962289 I0816 13:21:30.694786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:24:06.158146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:24:06.158580 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-08-16 13:24:06.15857157 +0000 UTC m=+1777.596793279 I0816 13:24:06.158144 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-08-16 13:24:06.158129158 +0000 UTC m=+1777.596350867 I0816 13:24:06.175706 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:24:06.175922 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:24:06.176003 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-08-16 13:24:06.175993704 +0000 UTC m=+1777.614215433 I0816 13:24:06.435626 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:24:06.445110 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-8cnjr" condition "Approved" to 2026-08-16 13:24:06.445100257 +0000 UTC m=+1777.883321956 I0816 13:24:06.463171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-8cnjr" condition "Ready" to 2026-08-16 13:24:06.463160589 +0000 UTC m=+1777.901382298 I0816 13:24:06.497655 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:24:06.497644008 +0000 UTC m=+1777.935865707 I0816 13:24:06.521056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:24:06.521664 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:24:06.521653466 +0000 UTC m=+1777.959875205 I0816 13:24:06.543988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:24:06.545112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:24:06.545710 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:24:06.545697805 +0000 UTC m=+1777.983919544 I0816 13:24:07.756314 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:24:07.756357 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-08-16 13:24:07.756347728 +0000 UTC m=+1779.194569457 I0816 13:24:07.756876 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-16 13:24:07.756867043 +0000 UTC m=+1779.195088772 I0816 13:24:07.789076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:24:07.789178 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-16 13:24:07.789172012 +0000 UTC m=+1779.227393711 I0816 13:24:08.108838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:24:08.142657 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-glxlr" condition "Approved" to 2026-08-16 13:24:08.14264171 +0000 UTC m=+1779.580863439 I0816 13:24:08.167123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-glxlr" condition "Ready" to 2026-08-16 13:24:08.16710171 +0000 UTC m=+1779.605323429 I0816 13:24:08.207699 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:24:08.207686019 +0000 UTC m=+1779.645907718 I0816 13:24:08.225132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:24:08.225527 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:24:08.225517285 +0000 UTC m=+1779.663738994 I0816 13:24:08.259048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:24:08.259429 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:24:08.259421257 +0000 UTC m=+1779.697642966 I0816 13:27:13.173138 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-08-16 13:27:13.173120237 +0000 UTC m=+1964.611341946 I0816 13:27:13.173543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:27:13.173609 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-08-16 13:27:13.173603901 +0000 UTC m=+1964.611825590 I0816 13:27:13.191687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:27:13.191792 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:27:13.191818 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-08-16 13:27:13.191810557 +0000 UTC m=+1964.630032266 I0816 13:27:13.429887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:27:13.441041 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-7whlb" condition "Approved" to 2026-08-16 13:27:13.441026917 +0000 UTC m=+1964.879248666 I0816 13:27:13.460472 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-7whlb" condition "Ready" to 2026-08-16 13:27:13.460457187 +0000 UTC m=+1964.898678916 I0816 13:27:13.502295 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:27:13.50227916 +0000 UTC m=+1964.940500869 I0816 13:27:13.532568 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:27:13.533115 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:27:13.533105847 +0000 UTC m=+1964.971327556 I0816 13:27:13.562827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:27:13.563294 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:27:13.563283716 +0000 UTC m=+1965.001505415 I0816 13:28:06.035998 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w7p7k-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:28:06.036033 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w7p7k-vnc" condition "Issuing" to 2026-08-16 13:28:06.036024724 +0000 UTC m=+2017.474246433 I0816 13:28:06.036402 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w7p7k-vnc" condition "Ready" to 2026-08-16 13:28:06.036398035 +0000 UTC m=+2017.474619724 I0816 13:28:06.038373 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w7p7k-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:28:06.038414 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w7p7k-api" condition "Issuing" to 2026-08-16 13:28:06.03840428 +0000 UTC m=+2017.476625979 I0816 13:28:06.038824 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w7p7k-api" condition "Ready" to 2026-08-16 13:28:06.038804232 +0000 UTC m=+2017.477025931 I0816 13:28:06.067555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w7p7k-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w7p7k-api\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:28:06.067643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w7p7k-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w7p7k-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:28:06.067682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w7p7k-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:28:06.067695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-w7p7k-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:28:06.067709 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w7p7k-vnc" condition "Issuing" to 2026-08-16 13:28:06.067704545 +0000 UTC m=+2017.505926254 I0816 13:28:06.067704 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-w7p7k-api" condition "Issuing" to 2026-08-16 13:28:06.067695845 +0000 UTC m=+2017.505917574 I0816 13:28:06.426142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w7p7k-vnc-5mf89" condition "Approved" to 2026-08-16 13:28:06.426125962 +0000 UTC m=+2017.864347681 I0816 13:28:06.437501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w7p7k-api-jjptg" condition "Approved" to 2026-08-16 13:28:06.437492498 +0000 UTC m=+2017.875714187 I0816 13:28:06.447390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w7p7k-vnc-5mf89" condition "Ready" to 2026-08-16 13:28:06.447378582 +0000 UTC m=+2017.885600291 I0816 13:28:06.452557 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-w7p7k-api-jjptg" condition "Ready" to 2026-08-16 13:28:06.452530196 +0000 UTC m=+2017.890751925 I0816 13:28:06.479478 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-w7p7k-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:28:06.479466035 +0000 UTC m=+2017.917687744 I0816 13:28:06.481022 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-w7p7k-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:28:06.481016748 +0000 UTC m=+2017.919238457 I0816 13:28:06.507722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-w7p7k-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w7p7k-api\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:28:06.508414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-w7p7k-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-w7p7k-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:31:58.145570 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:31:58.146382 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-16 13:31:58.145664568 +0000 UTC m=+2249.583886297 I0816 13:31:58.148550 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-08-16 13:31:58.148529687 +0000 UTC m=+2249.586751636 I0816 13:31:58.179313 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:31:58.179824 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:31:58.179861 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-16 13:31:58.179854006 +0000 UTC m=+2249.618075715 I0816 13:31:58.547584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:31:58.557683 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-5g8q5" condition "Approved" to 2026-08-16 13:31:58.55767201 +0000 UTC m=+2249.995893749 I0816 13:31:58.583522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-5g8q5" condition "Ready" to 2026-08-16 13:31:58.583507266 +0000 UTC m=+2250.021729025 I0816 13:31:58.618927 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:31:58.618909768 +0000 UTC m=+2250.057131477 I0816 13:31:58.641374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:31:58.644844 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:31:58.644828776 +0000 UTC m=+2250.083050465 I0816 13:31:58.644954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:31:58.662356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:31:58.662777 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:31:58.662765503 +0000 UTC m=+2250.100987212 I0816 13:31:59.686924 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-16 13:31:59.686901215 +0000 UTC m=+2251.125122954 I0816 13:31:59.687212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:31:59.687270 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-08-16 13:31:59.687255585 +0000 UTC m=+2251.125477314 I0816 13:31:59.704914 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:31:59.705019 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:31:59.705053 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-08-16 13:31:59.705042348 +0000 UTC m=+2251.143264087 I0816 13:31:59.957073 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-d2m4m" condition "Approved" to 2026-08-16 13:31:59.957059985 +0000 UTC m=+2251.395281724 I0816 13:31:59.977873 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-d2m4m" condition "Ready" to 2026-08-16 13:31:59.977867402 +0000 UTC m=+2251.416089111 I0816 13:32:00.007527 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:32:00.007508194 +0000 UTC m=+2251.445729923 I0816 13:32:00.033807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:34:28.395246 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:34:28.395307 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-16 13:34:28.395274886 +0000 UTC m=+2399.833496595 I0816 13:34:28.395335 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-08-16 13:34:28.395313197 +0000 UTC m=+2399.833534956 E0816 13:34:28.411451 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0816 13:34:28.411517 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-08-16 13:34:28.411509516 +0000 UTC m=+2399.849731205 I0816 13:34:28.411534 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0816 13:34:28.411660 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:34:28.411750 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:34:28.411773 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-16 13:34:28.411766173 +0000 UTC m=+2399.849987882 E0816 13:34:28.419908 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0816 13:34:28.420013 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0816 13:34:28.420050 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0816 13:34:28.420095 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0816 13:34:28.466844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-kk5p8" condition "Approved" to 2026-08-16 13:34:28.466820259 +0000 UTC m=+2399.905041998 I0816 13:34:28.492053 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-kk5p8" condition "Ready" to 2026-08-16 13:34:28.492040379 +0000 UTC m=+2399.930262088 I0816 13:34:28.522179 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:34:28.522158764 +0000 UTC m=+2399.960380473 I0816 13:34:28.544838 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:34:28.545161 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:34:28.545156161 +0000 UTC m=+2399.983377850 I0816 13:34:28.574493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:34:29.116506 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-08-16 13:34:29.11649093 +0000 UTC m=+2400.554712639 I0816 13:34:29.116653 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:34:29.116747 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-16 13:34:29.116735337 +0000 UTC m=+2400.554957066 E0816 13:34:29.129707 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0816 13:34:29.129742 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-08-16 13:34:29.129735457 +0000 UTC m=+2400.567957166 I0816 13:34:29.129780 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0816 13:34:29.132456 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:34:29.132585 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-08-16 13:34:29.132575706 +0000 UTC m=+2400.570797415 E0816 13:34:29.142685 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0816 13:34:29.142792 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0816 13:34:29.142830 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0816 13:34:29.142873 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0816 13:34:29.152036 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:34:29.181710 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-lrqjp" condition "Approved" to 2026-08-16 13:34:29.181697628 +0000 UTC m=+2400.619919337 I0816 13:34:29.196914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-lrqjp" condition "Ready" to 2026-08-16 13:34:29.196900349 +0000 UTC m=+2400.635122088 I0816 13:34:29.223093 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:34:29.223081705 +0000 UTC m=+2400.661303404 I0816 13:34:29.247758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:34:29.248101 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:34:29.248093149 +0000 UTC m=+2400.686314848 I0816 13:34:29.252692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:34:29.266942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:34:29.884325 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-08-16 13:34:29.884309176 +0000 UTC m=+2401.322530885 I0816 13:34:29.884424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:34:29.884469 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-16 13:34:29.884457501 +0000 UTC m=+2401.322679240 I0816 13:34:29.913404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:34:29.913507 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:34:29.913525 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-16 13:34:29.913520266 +0000 UTC m=+2401.351741965 I0816 13:34:29.957623 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-vvhsc" condition "Approved" to 2026-08-16 13:34:29.957605628 +0000 UTC m=+2401.395827337 I0816 13:34:29.979305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-vvhsc" condition "Ready" to 2026-08-16 13:34:29.97929116 +0000 UTC m=+2401.417512859 I0816 13:34:33.420607 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:34:33.420594752 +0000 UTC m=+2404.858816461 I0816 13:34:33.433687 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-vvhsc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:34:33.433673194 +0000 UTC m=+2404.871894923 I0816 13:34:33.461247 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:34:33.461229138 +0000 UTC m=+2404.899450867 I0816 13:34:33.485947 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:34:33.486253 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:34:33.486243342 +0000 UTC m=+2404.924465051 I0816 13:34:33.506803 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:34:34.144299 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:34:34.144278954 +0000 UTC m=+2405.582500663 I0816 13:36:50.547484 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:36:50.548098 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-08-16 13:36:50.547529951 +0000 UTC m=+2541.985751660 I0816 13:36:50.551493 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-08-16 13:36:50.55146532 +0000 UTC m=+2541.989687279 I0816 13:36:50.566676 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:36:50.566761 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-08-16 13:36:50.566754764 +0000 UTC m=+2542.004976463 I0816 13:36:51.039037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:36:51.073055 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-kf258" condition "Approved" to 2026-08-16 13:36:51.073042938 +0000 UTC m=+2542.511264637 I0816 13:36:51.095273 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-kf258" condition "Ready" to 2026-08-16 13:36:51.095249494 +0000 UTC m=+2542.533471223 I0816 13:36:51.124785 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:36:51.124769953 +0000 UTC m=+2542.562991662 I0816 13:36:51.142180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:36:51.142558 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:36:51.142552375 +0000 UTC m=+2542.580774084 I0816 13:36:51.173274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:38.109837 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-16 13:37:38.109782622 +0000 UTC m=+2589.548004351 I0816 13:37:38.132534 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:37:38.132586 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-16 13:37:38.132573093 +0000 UTC m=+2589.570794832 I0816 13:37:38.133440 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-16 13:37:38.133428037 +0000 UTC m=+2589.571649776 I0816 13:37:38.167722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:38.167814 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-16 13:37:38.16780357 +0000 UTC m=+2589.606025259 E0816 13:37:38.170258 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0816 13:37:38.229206 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-16 13:37:38.229183462 +0000 UTC m=+2589.667405181 I0816 13:37:38.249389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:37:38.249435 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-16 13:37:38.249424953 +0000 UTC m=+2589.687646662 I0816 13:37:38.250181 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-16 13:37:38.250173814 +0000 UTC m=+2589.688395513 I0816 13:37:38.276971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:38.277350 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-16 13:37:38.277338897 +0000 UTC m=+2589.715560626 E0816 13:37:38.491406 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0816 13:37:38.838479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:38.877695 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-cdchk" condition "Approved" to 2026-08-16 13:37:38.87767582 +0000 UTC m=+2590.315897529 I0816 13:37:38.897218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-cdchk" condition "Ready" to 2026-08-16 13:37:38.897205921 +0000 UTC m=+2590.335427640 I0816 13:37:38.931737 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:37:38.931723378 +0000 UTC m=+2590.369945077 I0816 13:37:38.957482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:39.260908 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-16 13:37:39.260886383 +0000 UTC m=+2590.699108082 I0816 13:37:39.289526 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:37:39.289544 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-16 13:37:39.289530058 +0000 UTC m=+2590.727751777 I0816 13:37:39.289561 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-16 13:37:39.289557348 +0000 UTC m=+2590.727779047 I0816 13:37:39.308530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:39.308682 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:37:39.308772 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-16 13:37:39.308763461 +0000 UTC m=+2590.746985170 I0816 13:37:39.837955 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-16 13:37:39.837939391 +0000 UTC m=+2591.276161100 I0816 13:37:39.865684 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:37:39.865726 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-16 13:37:39.865718771 +0000 UTC m=+2591.303940470 I0816 13:37:39.866146 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-16 13:37:39.866141493 +0000 UTC m=+2591.304363192 I0816 13:37:39.890174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:39.890392 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-16 13:37:39.890376495 +0000 UTC m=+2591.328598224 I0816 13:37:40.013369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:40.065935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-45pjx" condition "Approved" to 2026-08-16 13:37:40.065920241 +0000 UTC m=+2591.504141950 I0816 13:37:40.099535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:40.100205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-gh4c8" condition "Approved" to 2026-08-16 13:37:40.100190171 +0000 UTC m=+2591.538411880 I0816 13:37:40.103294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-45pjx" condition "Ready" to 2026-08-16 13:37:40.103276807 +0000 UTC m=+2591.541498516 I0816 13:37:40.122123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-gh4c8" condition "Ready" to 2026-08-16 13:37:40.122109649 +0000 UTC m=+2591.560331348 I0816 13:37:40.147693 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:37:40.147673958 +0000 UTC m=+2591.585895697 I0816 13:37:40.173454 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:37:40.173437722 +0000 UTC m=+2591.611659451 I0816 13:37:40.179378 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:40.179843 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:37:40.179832699 +0000 UTC m=+2591.618054418 I0816 13:37:40.205012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:40.223798 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:40.239987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:40.443680 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-16 13:37:40.443665114 +0000 UTC m=+2591.881886823 I0816 13:37:40.463281 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0816 13:37:40.463322 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-16 13:37:40.463314268 +0000 UTC m=+2591.901535977 I0816 13:37:40.463684 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-16 13:37:40.463677698 +0000 UTC m=+2591.901899407 I0816 13:37:40.499573 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:40.499626 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-16 13:37:40.499620665 +0000 UTC m=+2591.937842364 I0816 13:37:41.063611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0816 13:37:41.128374 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-hcvd9" condition "Approved" to 2026-08-16 13:37:41.128362494 +0000 UTC m=+2592.566584183 I0816 13:37:41.191930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-hcvd9" condition "Ready" to 2026-08-16 13:37:41.191914566 +0000 UTC m=+2592.630136275 I0816 13:37:41.379654 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-16 13:37:41.379639851 +0000 UTC m=+2592.817861570 I0816 13:37:41.527437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"