I0907 10:51:48.962845 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0907 10:51:48.962996 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0907 10:51:48.963087 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0907 10:51:48.968045 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0907 10:51:48.968749 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0907 10:51:48.968925 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0907 10:51:48.968931 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0907 10:51:48.972774 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0907 10:51:48.989164 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0907 10:51:48.995528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0907 10:51:49.003931 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0907 10:51:49.008210 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0907 10:51:49.008259 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0907 10:51:49.012393 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0907 10:51:49.016443 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0907 10:51:49.020388 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0907 10:51:49.024947 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0907 10:51:49.029183 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0907 10:51:49.036117 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0907 10:51:49.039903 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0907 10:51:49.044092 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0907 10:51:49.048061 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0907 10:51:49.052226 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0907 10:51:49.056502 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0907 10:51:49.056548 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0907 10:51:49.056571 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0907 10:51:49.056634 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0907 10:51:49.062036 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0907 10:51:49.065567 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0907 10:51:49.072371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0907 10:51:49.076415 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0907 10:51:49.076452 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0907 10:51:49.076823 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0907 10:51:49.079799 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:51:49.079900 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:51:49.081548 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:51:49.099778 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:51:49.129606 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:51:49.148753 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:51:49.173750 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:51:49.195045 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:51:49.210205 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:51:49.212858 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0907 10:52:01.320152 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-07 10:52:01.320133283 +0000 UTC m=+12.393586120 I0907 10:52:02.072955 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 10:52:02.072929664 +0000 UTC m=+13.146382521 I0907 10:52:02.073011 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:52:02.073121 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 10:52:02.073110129 +0000 UTC m=+13.146562966 E0907 10:52:02.089370 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 10:52:02.089522 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-07 10:52:02.089505342 +0000 UTC m=+13.162958189 E0907 10:52:02.089589 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 10:52:02.093353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:52:02.093474 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:52:02.093522 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 10:52:02.09351167 +0000 UTC m=+13.166964507 E0907 10:52:02.103798 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0907 10:52:02.104062 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 10:52:02.104149 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 10:52:02.104273 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0907 10:52:02.136867 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:52:02.143435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vsfxz" condition "Approved" to 2026-09-07 10:52:02.143421287 +0000 UTC m=+13.216874134 I0907 10:52:02.159051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-vsfxz" condition "Ready" to 2026-09-07 10:52:02.159034396 +0000 UTC m=+13.232487233 I0907 10:52:02.183789 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:52:02.183772954 +0000 UTC m=+13.257225801 I0907 10:52:02.215380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:52:02.216668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:52:02.216936 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:52:02.216928709 +0000 UTC m=+13.290381516 I0907 10:52:02.230623 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:52:02.235025 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:52:02.235466 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:52:02.235451784 +0000 UTC m=+13.308904621 I0907 10:52:07.105365 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:52:07.105349243 +0000 UTC m=+18.178802090 I0907 10:52:30.440558 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:52:30.440620 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 10:52:30.440605461 +0000 UTC m=+41.514058308 I0907 10:52:30.441302 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-07 10:52:30.441291471 +0000 UTC m=+41.514744318 I0907 10:52:30.453369 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-07 10:52:30.453352046 +0000 UTC m=+41.526804863 I0907 10:52:30.475294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:52:30.475435 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:52:30.475524 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 10:52:30.475513407 +0000 UTC m=+41.548966254 I0907 10:52:30.609672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fbsp5" condition "Approved" to 2026-09-07 10:52:30.609653853 +0000 UTC m=+41.683106690 I0907 10:52:30.642755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fbsp5" condition "Ready" to 2026-09-07 10:52:30.642734846 +0000 UTC m=+41.716187693 I0907 10:52:30.675930 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:52:30.675910441 +0000 UTC m=+41.749363288 I0907 10:52:30.706389 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:52:30.823528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:54:13.448207 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:54:13.448288 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-07 10:54:13.448272713 +0000 UTC m=+144.521725570 I0907 10:54:13.448424 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-07 10:54:13.448399726 +0000 UTC m=+144.521852573 E0907 10:54:13.488749 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 10:54:13.488837 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-07 10:54:13.488827127 +0000 UTC m=+144.562279974 I0907 10:54:13.488863 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 10:54:13.504390 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:54:13.504492 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-07 10:54:13.504479463 +0000 UTC m=+144.577932310 I0907 10:54:13.520633 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:54:13.520687 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-07 10:54:13.520674833 +0000 UTC m=+144.594127660 I0907 10:54:13.528296 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-07 10:54:13.528277829 +0000 UTC m=+144.601730657 E0907 10:54:13.528854 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0907 10:54:13.529209 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 10:54:13.529272 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0907 10:54:13.529370 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0907 10:54:13.548200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:54:13.548389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:54:13.548453 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-07 10:54:13.548442279 +0000 UTC m=+144.621895096 I0907 10:54:13.696028 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-f8rfm" condition "Approved" to 2026-09-07 10:54:13.696008143 +0000 UTC m=+144.769460960 I0907 10:54:13.715035 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-f8rfm" condition "Ready" to 2026-09-07 10:54:13.715020908 +0000 UTC m=+144.788473725 I0907 10:54:13.726295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:54:13.760305 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-mdm6z" condition "Approved" to 2026-09-07 10:54:13.760285553 +0000 UTC m=+144.833738390 I0907 10:54:13.798769 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-mdm6z" condition "Ready" to 2026-09-07 10:54:13.798745737 +0000 UTC m=+144.872198574 I0907 10:54:13.835438 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:54:13.835414146 +0000 UTC m=+144.908866993 I0907 10:54:13.870876 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:54:13.871498 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:54:13.871487798 +0000 UTC m=+144.944940635 I0907 10:54:13.890067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:54:13.890422 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:54:13.89041261 +0000 UTC m=+144.963865427 I0907 10:54:13.894175 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:54:18.530041 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:54:18.530024588 +0000 UTC m=+149.603477425 I0907 10:54:18.547690 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-f8rfm" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:54:18.547666912 +0000 UTC m=+149.621119759 I0907 10:54:18.588188 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:54:18.588150714 +0000 UTC m=+149.661603561 I0907 10:54:18.624896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:54:18.625489 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:54:18.625479994 +0000 UTC m=+149.698932801 I0907 10:54:18.638337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:54:18.658916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:54:18.660708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:54:18.661367 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:54:18.66133314 +0000 UTC m=+149.734785977 I0907 10:57:32.585967 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-27.nip.io-tls" condition "Ready" to 2026-09-07 10:57:32.585203087 +0000 UTC m=+343.658655924 I0907 10:57:32.587930 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-27.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:57:32.587957 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-27.nip.io-tls" condition "Issuing" to 2026-09-07 10:57:32.587953177 +0000 UTC m=+343.661405984 I0907 10:57:32.612277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-27.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-27.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:32.612356 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-27.nip.io-tls" condition "Ready" to 2026-09-07 10:57:32.612348823 +0000 UTC m=+343.685801630 I0907 10:57:32.931841 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-27.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-27.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:32.979738 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-27.nip.io-tls-gsxq5" condition "Approved" to 2026-09-07 10:57:32.979723183 +0000 UTC m=+344.053176000 I0907 10:57:33.005298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-27.nip.io-tls-gsxq5" condition "Ready" to 2026-09-07 10:57:33.005279091 +0000 UTC m=+344.078731928 I0907 10:57:33.042215 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-27.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:57:33.042196949 +0000 UTC m=+344.115649786 I0907 10:57:33.077768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-27.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-27.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:57:33.078205 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-27.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:57:33.078194399 +0000 UTC m=+344.151647246 I0907 10:57:33.100670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-27.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-27.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:58:48.013747 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:58:48.013664 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 10:58:48.013603912 +0000 UTC m=+419.087056749 I0907 10:58:48.013808 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 10:58:48.013796667 +0000 UTC m=+419.087249514 E0907 10:58:48.042033 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 10:58:48.042135 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-07 10:58:48.042124444 +0000 UTC m=+419.115577291 E0907 10:58:48.042168 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0907 10:58:48.046302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:58:48.046403 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:58:48.046430 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 10:58:48.04642395 +0000 UTC m=+419.119876787 E0907 10:58:48.058945 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0907 10:58:48.059076 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 10:58:48.059121 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0907 10:58:48.059171 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0907 10:58:48.110363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:58:48.122792 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6z6nc" condition "Approved" to 2026-09-07 10:58:48.122778729 +0000 UTC m=+419.196231566 I0907 10:58:48.143162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-6z6nc" condition "Ready" to 2026-09-07 10:58:48.143151244 +0000 UTC m=+419.216604061 I0907 10:58:48.183718 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:58:48.183706238 +0000 UTC m=+419.257159085 I0907 10:58:48.224166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:58:48.224649 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:58:48.224639983 +0000 UTC m=+419.298092800 I0907 10:58:48.249621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:58:53.059411 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:58:53.05939863 +0000 UTC m=+424.132851467 I0907 10:59:35.783780 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:59:35.783849 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 10:59:35.783811789 +0000 UTC m=+466.857264606 I0907 10:59:35.784223 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-07 10:59:35.78420697 +0000 UTC m=+466.857659787 I0907 10:59:35.790774 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:59:35.790816 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 10:59:35.790808053 +0000 UTC m=+466.864260870 I0907 10:59:35.790887 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-07 10:59:35.790852244 +0000 UTC m=+466.864305061 I0907 10:59:35.797051 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 10:59:35.797041014 +0000 UTC m=+466.870493831 I0907 10:59:35.799905 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:59:35.799981 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 10:59:35.79997083 +0000 UTC m=+466.873423657 I0907 10:59:35.833038 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:35.833132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:35.833186 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:59:35.833212 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 10:59:35.83320472 +0000 UTC m=+466.906657547 I0907 10:59:35.833488 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:35.844332 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:59:35.834085 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:59:35.847926 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 10:59:35.84790878 +0000 UTC m=+466.921361577 I0907 10:59:35.844361 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 10:59:35.844355036 +0000 UTC m=+466.917807853 I0907 10:59:36.133483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-njfwm" condition "Approved" to 2026-09-07 10:59:36.133469927 +0000 UTC m=+467.206922754 I0907 10:59:36.168751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-njfwm" condition "Ready" to 2026-09-07 10:59:36.168743017 +0000 UTC m=+467.242195824 I0907 10:59:36.178954 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:36.184925 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7xjs7" condition "Approved" to 2026-09-07 10:59:36.184914418 +0000 UTC m=+467.258367225 I0907 10:59:36.189609 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:59:36.189600675 +0000 UTC m=+467.263053492 I0907 10:59:36.200912 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7xjs7" condition "Ready" to 2026-09-07 10:59:36.200899745 +0000 UTC m=+467.274352552 I0907 10:59:36.208658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:36.208910 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:59:36.208904549 +0000 UTC m=+467.282357356 I0907 10:59:36.228810 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lsb85" condition "Approved" to 2026-09-07 10:59:36.22879891 +0000 UTC m=+467.302251717 I0907 10:59:36.230680 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:59:36.230671564 +0000 UTC m=+467.304124371 I0907 10:59:36.487191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-lsb85" condition "Ready" to 2026-09-07 10:59:36.487176582 +0000 UTC m=+467.560629419 I0907 10:59:36.572553 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:36.573132 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:59:36.573122842 +0000 UTC m=+467.646575679 E0907 10:59:36.619805 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"grafana-tls-m5rs4\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" I0907 10:59:37.073666 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:59:37.073646074 +0000 UTC m=+468.147098911 I0907 10:59:37.125970 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:37.217141 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:37.323028 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:37.323653 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:59:37.323641813 +0000 UTC m=+468.397094660 I0907 10:59:37.421692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:37.671768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:37.728323 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:44.633465 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" condition "Ready" to 2026-09-07 10:59:44.633453245 +0000 UTC m=+475.706906062 I0907 10:59:44.635497 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:59:44.635554 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" condition "Issuing" to 2026-09-07 10:59:44.635540197 +0000 UTC m=+475.708993044 I0907 10:59:44.652982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:44.653085 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 10:59:44.653115 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" condition "Issuing" to 2026-09-07 10:59:44.653105669 +0000 UTC m=+475.726558506 I0907 10:59:44.811453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ngdx6-rthpf" condition "Approved" to 2026-09-07 10:59:44.811440062 +0000 UTC m=+475.884892879 I0907 10:59:44.832787 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ngdx6-rthpf" condition "Ready" to 2026-09-07 10:59:44.832776755 +0000 UTC m=+475.906229562 I0907 10:59:44.863965 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:59:44.863953755 +0000 UTC m=+475.937406562 I0907 10:59:44.885547 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:44.885938 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:59:44.885929087 +0000 UTC m=+475.959381904 I0907 10:59:44.910427 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:44.910742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 10:59:44.910854 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 10:59:44.910843584 +0000 UTC m=+475.984296431 I0907 10:59:44.911117 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ngdx6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:00:13.324399 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 11:00:13.324384831 +0000 UTC m=+504.397837648 I0907 11:00:13.324470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:00:13.324513 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-07 11:00:13.324502365 +0000 UTC m=+504.397955202 I0907 11:00:13.341089 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:00:13.341169 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 11:00:13.341159851 +0000 UTC m=+504.414612668 I0907 11:00:13.417369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:00:13.452064 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d292j" condition "Approved" to 2026-09-07 11:00:13.452044558 +0000 UTC m=+504.525497405 I0907 11:00:13.480342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-d292j" condition "Ready" to 2026-09-07 11:00:13.480324373 +0000 UTC m=+504.553777220 I0907 11:00:13.511797 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:00:13.511784202 +0000 UTC m=+504.585237039 I0907 11:00:13.538337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:03:31.343923 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:03:31.344014 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 11:03:31.344003506 +0000 UTC m=+702.417456343 I0907 11:03:31.344073 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 11:03:31.343756509 +0000 UTC m=+702.417209346 I0907 11:03:31.367743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:03:31.367891 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:03:31.367928 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 11:03:31.367917073 +0000 UTC m=+702.441369940 I0907 11:03:31.509898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rwstb" condition "Approved" to 2026-09-07 11:03:31.509879007 +0000 UTC m=+702.583331854 I0907 11:03:31.525772 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-rwstb" condition "Ready" to 2026-09-07 11:03:31.525759237 +0000 UTC m=+702.599212054 I0907 11:03:31.556602 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:03:31.556589299 +0000 UTC m=+702.630042106 I0907 11:03:31.575145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:06:07.606624 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:06:07.606702 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-07 11:06:07.606692127 +0000 UTC m=+858.680144964 I0907 11:06:07.606756 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-07 11:06:07.606737138 +0000 UTC m=+858.680189985 I0907 11:06:07.632887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:06:07.633000 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-07 11:06:07.632989828 +0000 UTC m=+858.706442675 I0907 11:06:07.853822 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:06:07.919382 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-ctgjv" condition "Approved" to 2026-09-07 11:06:07.91937224 +0000 UTC m=+858.992825047 I0907 11:06:07.941408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-ctgjv" condition "Ready" to 2026-09-07 11:06:07.941391251 +0000 UTC m=+859.014844098 I0907 11:06:07.973418 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:06:07.97340273 +0000 UTC m=+859.046855577 I0907 11:06:08.011618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:07:19.408314 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:07:19.408339 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-07 11:07:19.408330958 +0000 UTC m=+930.481783775 I0907 11:07:19.408354 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-07 11:07:19.408346108 +0000 UTC m=+930.481798955 I0907 11:07:19.438033 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:07:19.438108 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-07 11:07:19.438102978 +0000 UTC m=+930.511555795 I0907 11:07:19.609928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:07:19.645809 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6djmw" condition "Approved" to 2026-09-07 11:07:19.645800149 +0000 UTC m=+930.719252966 I0907 11:07:19.673896 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-6djmw" condition "Ready" to 2026-09-07 11:07:19.673885411 +0000 UTC m=+930.747338228 I0907 11:07:19.839128 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:07:19.839105553 +0000 UTC m=+930.912558400 I0907 11:07:20.012034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:07:20.012448 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:07:20.012439853 +0000 UTC m=+931.085892690 I0907 11:07:20.424684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:10:29.296303 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-07 11:10:29.296258646 +0000 UTC m=+1120.369711483 I0907 11:10:29.297303 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:10:29.297334 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-07 11:10:29.297327826 +0000 UTC m=+1120.370780663 I0907 11:10:29.314128 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:10:29.314209 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:10:29.314225 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-07 11:10:29.314219771 +0000 UTC m=+1120.387672568 I0907 11:10:29.831016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7zvln" condition "Approved" to 2026-09-07 11:10:29.831004872 +0000 UTC m=+1120.904457689 I0907 11:10:29.854093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7zvln" condition "Ready" to 2026-09-07 11:10:29.854084048 +0000 UTC m=+1120.927536865 I0907 11:10:29.885880 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:10:29.885861783 +0000 UTC m=+1120.959314670 I0907 11:10:29.907532 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:10:29.907880 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:10:29.90787269 +0000 UTC m=+1120.981325507 I0907 11:10:29.928491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:10:29.928834 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:10:29.928826017 +0000 UTC m=+1121.002278834 I0907 11:16:38.950978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:16:38.951032 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-07 11:16:38.95102628 +0000 UTC m=+1490.024479087 I0907 11:16:38.951155 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-07 11:16:38.951139603 +0000 UTC m=+1490.024592420 I0907 11:16:38.985775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:16:38.985939 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:16:38.986000 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-07 11:16:38.985991771 +0000 UTC m=+1490.059444598 I0907 11:16:39.167108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:16:39.188342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-c49rg" condition "Approved" to 2026-09-07 11:16:39.18832376 +0000 UTC m=+1490.261776577 I0907 11:16:39.217639 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-c49rg" condition "Ready" to 2026-09-07 11:16:39.217621675 +0000 UTC m=+1490.291074522 I0907 11:16:39.252532 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:16:39.252523934 +0000 UTC m=+1490.325976741 I0907 11:16:39.281565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:18:14.250996 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:18:14.251053 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-07 11:18:14.251045338 +0000 UTC m=+1585.324498155 I0907 11:18:14.251062 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-07 11:18:14.251042388 +0000 UTC m=+1585.324495225 I0907 11:18:14.273029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:18:14.273396 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-07 11:18:14.273383753 +0000 UTC m=+1585.346836590 I0907 11:18:14.420462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:18:14.465021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-p5ktk" condition "Approved" to 2026-09-07 11:18:14.464994968 +0000 UTC m=+1585.538447805 I0907 11:18:14.489562 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-p5ktk" condition "Ready" to 2026-09-07 11:18:14.489544414 +0000 UTC m=+1585.562997261 I0907 11:18:14.526920 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:18:14.526902682 +0000 UTC m=+1585.600355529 I0907 11:18:14.548369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:18:14.549064 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:18:14.549053862 +0000 UTC m=+1585.622506679 I0907 11:18:14.572587 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:17.204210 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-07 11:19:17.204138479 +0000 UTC m=+1648.277591326 I0907 11:19:17.205151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:19:17.205191 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-07 11:19:17.205182748 +0000 UTC m=+1648.278635605 I0907 11:19:17.223119 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:17.223211 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:19:17.223239 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-07 11:19:17.223230796 +0000 UTC m=+1648.296683643 I0907 11:19:17.296617 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-wg9nh" condition "Approved" to 2026-09-07 11:19:17.296105752 +0000 UTC m=+1648.369558599 I0907 11:19:17.327706 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-wg9nh" condition "Ready" to 2026-09-07 11:19:17.32769346 +0000 UTC m=+1648.401146277 I0907 11:19:17.361927 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:19:17.361913843 +0000 UTC m=+1648.435366660 I0907 11:19:17.387846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:17.388304 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:19:17.388293019 +0000 UTC m=+1648.461745856 I0907 11:19:17.425181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:17.425369 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:17.425620 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:19:17.425607226 +0000 UTC m=+1648.499060063 I0907 11:19:17.949163 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:19:17.949172 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-07 11:19:17.949160458 +0000 UTC m=+1649.022613275 I0907 11:19:17.949188 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-07 11:19:17.949184159 +0000 UTC m=+1649.022636956 I0907 11:19:17.971542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:17.971667 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:19:17.971695 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-07 11:19:17.971686838 +0000 UTC m=+1649.045139675 I0907 11:19:18.024220 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:18.030937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hzs68" condition "Approved" to 2026-09-07 11:19:18.03091762 +0000 UTC m=+1649.104370467 I0907 11:19:18.048840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-hzs68" condition "Ready" to 2026-09-07 11:19:18.048827812 +0000 UTC m=+1649.122280629 I0907 11:19:18.080096 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:19:18.080080803 +0000 UTC m=+1649.153533640 I0907 11:19:18.105735 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:18.108115 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:19:18.108105424 +0000 UTC m=+1649.181558241 I0907 11:19:18.132979 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:19:18.133383 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:19:18.13337256 +0000 UTC m=+1649.206825387 I0907 11:19:18.852674 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-07 11:19:18.852665641 +0000 UTC m=+1649.926118448 I0907 11:19:19.691877 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-07 11:19:19.691859662 +0000 UTC m=+1650.765312499 I0907 11:20:05.934402 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-07 11:20:05.934385403 +0000 UTC m=+1697.007838220 I0907 11:20:05.935456 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:20:05.935487 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-07 11:20:05.935482713 +0000 UTC m=+1697.008935540 I0907 11:20:05.976106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:20:05.976184 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:20:05.976201 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-07 11:20:05.976196783 +0000 UTC m=+1697.049649590 I0907 11:20:07.732072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-pfdwk" condition "Approved" to 2026-09-07 11:20:07.732043285 +0000 UTC m=+1698.805496122 I0907 11:20:07.758702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-pfdwk" condition "Ready" to 2026-09-07 11:20:07.758683128 +0000 UTC m=+1698.832135965 I0907 11:20:07.800377 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:20:07.800362494 +0000 UTC m=+1698.873815331 I0907 11:20:07.822092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:20:07.822895 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:20:07.822886013 +0000 UTC m=+1698.896338830 I0907 11:20:07.840071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:20:07.850362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:20:07.851486 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:20:07.851469058 +0000 UTC m=+1698.924921905 I0907 11:22:52.473032 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:22:52.473119 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-07 11:22:52.473108754 +0000 UTC m=+1863.546561601 I0907 11:22:52.473094 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-07 11:22:52.473065983 +0000 UTC m=+1863.546518820 I0907 11:22:52.493464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:22:52.493567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:22:52.493593 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-07 11:22:52.493581846 +0000 UTC m=+1863.567034693 I0907 11:22:52.773328 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-lrfkf" condition "Approved" to 2026-09-07 11:22:52.773318245 +0000 UTC m=+1863.846771042 I0907 11:22:52.800167 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-lrfkf" condition "Ready" to 2026-09-07 11:22:52.800149702 +0000 UTC m=+1863.873602549 I0907 11:22:52.845951 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:22:52.845939421 +0000 UTC m=+1863.919392238 I0907 11:22:52.875396 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:22:54.010232 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:22:54.010269 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-07 11:22:54.010262272 +0000 UTC m=+1865.083715079 I0907 11:22:54.010392 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-07 11:22:54.010369595 +0000 UTC m=+1865.083822462 I0907 11:22:54.034224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:22:54.034327 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-07 11:22:54.034317493 +0000 UTC m=+1865.107770330 I0907 11:22:54.276638 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:22:54.323491 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-md5rj" condition "Approved" to 2026-09-07 11:22:54.32347448 +0000 UTC m=+1865.396927297 I0907 11:22:54.358603 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-md5rj" condition "Ready" to 2026-09-07 11:22:54.358586395 +0000 UTC m=+1865.432039202 I0907 11:22:54.392061 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:22:54.392041234 +0000 UTC m=+1865.465494041 I0907 11:22:54.422067 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:22:54.422745 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:22:54.422733718 +0000 UTC m=+1865.496186515 I0907 11:22:54.448373 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:10.815706 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-07 11:26:10.815623937 +0000 UTC m=+2061.889076774 I0907 11:26:10.815859 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:26:10.815932 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-07 11:26:10.815922536 +0000 UTC m=+2061.889375393 I0907 11:26:10.834958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:10.835042 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:26:10.835064 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-07 11:26:10.835058483 +0000 UTC m=+2061.908511290 I0907 11:26:11.063260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-wskd4" condition "Approved" to 2026-09-07 11:26:11.063241908 +0000 UTC m=+2062.136694725 I0907 11:26:11.087503 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-wskd4" condition "Ready" to 2026-09-07 11:26:11.087494979 +0000 UTC m=+2062.160947786 I0907 11:26:11.132449 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:26:11.132437832 +0000 UTC m=+2062.205890639 I0907 11:26:11.162330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:11.163679 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:26:11.163673016 +0000 UTC m=+2062.237125823 I0907 11:26:11.179421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:11.179697 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:26:11.179690958 +0000 UTC m=+2062.253143765 I0907 11:26:48.767935 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-ndjns-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:26:48.767961 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ndjns-vnc" condition "Issuing" to 2026-09-07 11:26:48.767954637 +0000 UTC m=+2099.841407434 I0907 11:26:48.768120 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ndjns-vnc" condition "Ready" to 2026-09-07 11:26:48.768105241 +0000 UTC m=+2099.841558058 I0907 11:26:48.774194 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ndjns-api" condition "Ready" to 2026-09-07 11:26:48.77418205 +0000 UTC m=+2099.847634857 I0907 11:26:48.774446 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-ndjns-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:26:48.774458 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ndjns-api" condition "Issuing" to 2026-09-07 11:26:48.774455787 +0000 UTC m=+2099.847908594 I0907 11:26:48.785650 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-ndjns-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndjns-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:48.785764 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ndjns-vnc" condition "Ready" to 2026-09-07 11:26:48.785755609 +0000 UTC m=+2099.859208406 I0907 11:26:48.789851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-ndjns-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndjns-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:48.789922 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-ndjns-api" condition "Ready" to 2026-09-07 11:26:48.789916545 +0000 UTC m=+2099.863369352 I0907 11:26:48.875074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-ndjns-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndjns-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:48.906508 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-ndjns-vnc-5ndvw" condition "Approved" to 2026-09-07 11:26:48.906500429 +0000 UTC m=+2099.979953236 I0907 11:26:48.924862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-ndjns-vnc-5ndvw" condition "Ready" to 2026-09-07 11:26:48.924851396 +0000 UTC m=+2099.998304213 I0907 11:26:48.951643 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ndjns-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:26:48.951633007 +0000 UTC m=+2100.025085814 I0907 11:26:48.974578 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-ndjns-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndjns-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:48.974960 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ndjns-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:26:48.974952972 +0000 UTC m=+2100.048405779 I0907 11:26:48.978664 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-ndjns-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndjns-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:48.992751 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-ndjns-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndjns-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:48.993034 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ndjns-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:26:48.993027342 +0000 UTC m=+2100.066480149 I0907 11:26:49.333412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-ndjns-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndjns-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:49.611046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-ndjns-api-v5lgp" condition "Approved" to 2026-09-07 11:26:49.611026174 +0000 UTC m=+2100.684479011 I0907 11:26:49.639418 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-ndjns-api-v5lgp" condition "Ready" to 2026-09-07 11:26:49.639407449 +0000 UTC m=+2100.712860256 I0907 11:26:49.674511 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ndjns-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:26:49.67449968 +0000 UTC m=+2100.747952497 I0907 11:26:49.700072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-ndjns-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndjns-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:49.700493 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-ndjns-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:26:49.700487698 +0000 UTC m=+2100.773940515 I0907 11:26:49.713343 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-ndjns-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndjns-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:26:49.725353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-ndjns-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-ndjns-api\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:30:41.013203 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-07 11:30:41.013189442 +0000 UTC m=+2332.086642269 I0907 11:30:41.013628 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:30:41.013681 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-07 11:30:41.013675515 +0000 UTC m=+2332.087128332 I0907 11:30:41.034271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:30:41.034423 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:30:41.034475 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-07 11:30:41.034468684 +0000 UTC m=+2332.107921501 I0907 11:30:41.200822 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-h6xl7" condition "Approved" to 2026-09-07 11:30:41.200806892 +0000 UTC m=+2332.274259729 I0907 11:30:41.227699 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-h6xl7" condition "Ready" to 2026-09-07 11:30:41.227690791 +0000 UTC m=+2332.301143588 I0907 11:30:41.259382 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:30:41.259369174 +0000 UTC m=+2332.332821981 I0907 11:30:41.287585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:30:42.495687 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:30:42.495727 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-07 11:30:42.49571764 +0000 UTC m=+2333.569170487 I0907 11:30:42.495683 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-07 11:30:42.495641548 +0000 UTC m=+2333.569094395 I0907 11:30:42.517110 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:30:42.517212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:30:42.517234 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-07 11:30:42.51722614 +0000 UTC m=+2333.590678977 I0907 11:30:42.679684 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-5d8ww" condition "Approved" to 2026-09-07 11:30:42.679666418 +0000 UTC m=+2333.753119245 I0907 11:30:42.707242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-5d8ww" condition "Ready" to 2026-09-07 11:30:42.707229886 +0000 UTC m=+2333.780682703 I0907 11:30:42.756266 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:30:42.756251923 +0000 UTC m=+2333.829704730 I0907 11:30:42.783091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:30:42.783623 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:30:42.783615376 +0000 UTC m=+2333.857068223 I0907 11:30:42.794366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:30:42.805007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:32:58.265012 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-07 11:32:58.264935367 +0000 UTC m=+2469.338388204 I0907 11:32:58.265135 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:32:58.265267 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-07 11:32:58.265256456 +0000 UTC m=+2469.338709293 E0907 11:32:58.282876 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 11:32:58.282939 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-07 11:32:58.28293059 +0000 UTC m=+2469.356383407 I0907 11:32:58.282960 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 11:32:58.286883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:32:58.286978 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:32:58.287003 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-07 11:32:58.286995473 +0000 UTC m=+2469.360448320 E0907 11:32:58.294299 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0907 11:32:58.294567 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 11:32:58.294611 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0907 11:32:58.294679 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0907 11:32:58.337987 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:32:58.344161 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-tw9h2" condition "Approved" to 2026-09-07 11:32:58.344153469 +0000 UTC m=+2469.417606296 I0907 11:32:58.372044 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-tw9h2" condition "Ready" to 2026-09-07 11:32:58.372028891 +0000 UTC m=+2469.445481738 I0907 11:32:58.401912 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:32:58.401896212 +0000 UTC m=+2469.475349049 I0907 11:32:58.425505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:32:58.425959 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:32:58.425950548 +0000 UTC m=+2469.499403385 I0907 11:32:58.437988 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:32:58.445615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:32:58.446020 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:32:58.446011024 +0000 UTC m=+2469.519463841 I0907 11:32:58.950753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:32:58.950836 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-07 11:32:58.950824165 +0000 UTC m=+2470.024277012 I0907 11:32:58.951019 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-07 11:32:58.95100085 +0000 UTC m=+2470.024453687 E0907 11:32:58.968489 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 11:32:58.968554 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-07 11:32:58.96854109 +0000 UTC m=+2470.041993937 I0907 11:32:58.968632 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 11:32:58.969912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:32:58.970013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:32:58.970035 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-07 11:32:58.970029205 +0000 UTC m=+2470.043482012 E0907 11:32:58.981300 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0907 11:32:58.981411 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0907 11:32:58.981466 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0907 11:32:58.981511 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0907 11:32:59.036698 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-bhk9b" condition "Approved" to 2026-09-07 11:32:59.036678787 +0000 UTC m=+2470.110131644 I0907 11:32:59.056688 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-bhk9b" condition "Ready" to 2026-09-07 11:32:59.056676421 +0000 UTC m=+2470.130129238 I0907 11:32:59.084408 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:32:59.084393688 +0000 UTC m=+2470.157846495 I0907 11:32:59.124094 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:32:59.125042 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:32:59.124993864 +0000 UTC m=+2470.198446721 I0907 11:32:59.183393 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:32:59.824217 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:32:59.824260 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-07 11:32:59.824250665 +0000 UTC m=+2470.897703492 I0907 11:32:59.824301 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-07 11:32:59.824276766 +0000 UTC m=+2470.897729643 I0907 11:32:59.840722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:32:59.840821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:32:59.840841 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-07 11:32:59.840833066 +0000 UTC m=+2470.914285883 I0907 11:32:59.894828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-5btrf" condition "Approved" to 2026-09-07 11:32:59.894814485 +0000 UTC m=+2470.968267302 I0907 11:32:59.911018 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-5btrf" condition "Ready" to 2026-09-07 11:32:59.911003555 +0000 UTC m=+2470.984456402 I0907 11:33:03.295639 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:33:03.295624311 +0000 UTC m=+2474.369077128 I0907 11:33:03.314839 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-5btrf" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:33:03.314820231 +0000 UTC m=+2474.388273068 I0907 11:33:03.344028 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:33:03.344006763 +0000 UTC m=+2474.417459600 I0907 11:33:03.384503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:33:03.443482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:33:03.982069 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:33:03.982052746 +0000 UTC m=+2475.055505583 I0907 11:35:29.969281 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:35:29.969328 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-07 11:35:29.969319077 +0000 UTC m=+2621.042771914 I0907 11:35:29.970013 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-07 11:35:29.970005336 +0000 UTC m=+2621.043458173 I0907 11:35:29.993793 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:35:29.993903 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-07 11:35:29.993893207 +0000 UTC m=+2621.067346054 I0907 11:35:30.117817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:35:30.160329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-5frxf" condition "Approved" to 2026-09-07 11:35:30.160307806 +0000 UTC m=+2621.233760653 I0907 11:35:30.185051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-5frxf" condition "Ready" to 2026-09-07 11:35:30.185041339 +0000 UTC m=+2621.258494146 I0907 11:35:30.223812 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:35:30.22377758 +0000 UTC m=+2621.297230407 I0907 11:35:30.250071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:35:30.250579 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:35:30.250569851 +0000 UTC m=+2621.324022688 I0907 11:35:30.275723 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:18.329172 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-07 11:36:18.329148389 +0000 UTC m=+2669.402601196 I0907 11:36:18.345179 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-07 11:36:18.345167013 +0000 UTC m=+2669.418619820 I0907 11:36:18.345368 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:36:18.345420 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-07 11:36:18.345393019 +0000 UTC m=+2669.418845826 I0907 11:36:18.359782 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:18.359865 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:36:18.359890 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-07 11:36:18.359884059 +0000 UTC m=+2669.433336866 E0907 11:36:18.373738 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0907 11:36:18.432678 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-07 11:36:18.432658431 +0000 UTC m=+2669.506111248 I0907 11:36:18.457517 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-07 11:36:18.457496227 +0000 UTC m=+2669.530949054 I0907 11:36:18.457552 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:36:18.457591 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-07 11:36:18.45758099 +0000 UTC m=+2669.531033837 I0907 11:36:18.474826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:18.474899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:36:18.474921 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-07 11:36:18.474913588 +0000 UTC m=+2669.548366405 E0907 11:36:18.576318 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0907 11:36:18.808446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:18.817391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-5dv6r" condition "Approved" to 2026-09-07 11:36:18.817378354 +0000 UTC m=+2669.890831161 I0907 11:36:18.835932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-5dv6r" condition "Ready" to 2026-09-07 11:36:18.835919966 +0000 UTC m=+2669.909372773 I0907 11:36:18.877210 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:36:18.877197358 +0000 UTC m=+2669.950650165 I0907 11:36:18.895300 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:18.895878 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:36:18.895871554 +0000 UTC m=+2669.969324361 I0907 11:36:18.917478 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:18.917796 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:36:18.91778893 +0000 UTC m=+2669.991241737 I0907 11:36:19.270588 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-07 11:36:19.270570381 +0000 UTC m=+2670.344023188 I0907 11:36:19.305010 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-07 11:36:19.304996012 +0000 UTC m=+2670.378448829 I0907 11:36:19.305023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:36:19.305276 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-07 11:36:19.305260299 +0000 UTC m=+2670.378713106 I0907 11:36:19.340061 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:19.340138 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:36:19.340156 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-07 11:36:19.340150443 +0000 UTC m=+2670.413603250 I0907 11:36:19.453645 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:19.458136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-w4lbg" condition "Approved" to 2026-09-07 11:36:19.458125235 +0000 UTC m=+2670.531578042 I0907 11:36:19.482755 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-w4lbg" condition "Ready" to 2026-09-07 11:36:19.482746104 +0000 UTC m=+2670.556198911 I0907 11:36:19.532223 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:36:19.532211032 +0000 UTC m=+2670.605663839 I0907 11:36:19.548584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:19.548820 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:36:19.54881356 +0000 UTC m=+2670.622266357 I0907 11:36:19.567968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:19.716211 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-07 11:36:19.716198927 +0000 UTC m=+2670.789651734 I0907 11:36:19.733790 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:36:19.737052 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-07 11:36:19.737042683 +0000 UTC m=+2670.810495520 I0907 11:36:19.736710 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-07 11:36:19.736692714 +0000 UTC m=+2670.810145531 I0907 11:36:19.753525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:19.753578 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:36:19.753598 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-07 11:36:19.753593331 +0000 UTC m=+2670.827046138 I0907 11:36:20.041835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:20.049536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-k5pld" condition "Approved" to 2026-09-07 11:36:20.04952211 +0000 UTC m=+2671.122974917 I0907 11:36:20.070626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-k5pld" condition "Ready" to 2026-09-07 11:36:20.070614743 +0000 UTC m=+2671.144067540 I0907 11:36:20.102196 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:36:20.102181366 +0000 UTC m=+2671.175634173 I0907 11:36:20.127290 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:20.127573 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:36:20.127567858 +0000 UTC m=+2671.201020665 I0907 11:36:20.215985 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-07 11:36:20.215972671 +0000 UTC m=+2671.289425478 I0907 11:36:20.230435 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0907 11:36:20.230466 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-07 11:36:20.230459271 +0000 UTC m=+2671.303912078 I0907 11:36:20.230643 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-07 11:36:20.230639646 +0000 UTC m=+2671.304092453 I0907 11:36:20.308255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:20.445872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:20.445937 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-07 11:36:20.445930527 +0000 UTC m=+2671.519383324 I0907 11:36:20.686944 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0907 11:36:20.848806 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-72666" condition "Approved" to 2026-09-07 11:36:20.848791572 +0000 UTC m=+2671.922244379 I0907 11:36:20.910108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-72666" condition "Ready" to 2026-09-07 11:36:20.910092316 +0000 UTC m=+2671.983545123 I0907 11:36:21.416858 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 11:36:21.416838513 +0000 UTC m=+2672.490291350 I0907 11:36:21.538384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"