I0724 05:24:53.623138 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0724 05:24:53.623459 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0724 05:24:53.631521 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0724 05:24:53.631575 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0724 05:24:53.631592 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0724 05:24:53.632197 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0724 05:24:53.632212 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0724 05:24:53.632217 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0724 05:24:53.636378 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0724 05:24:53.649577 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0724 05:24:53.654426 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0724 05:24:53.660314 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0724 05:24:53.663026 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0724 05:24:53.665564 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0724 05:24:53.668390 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0724 05:24:53.673589 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0724 05:24:53.678832 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0724 05:24:53.683326 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0724 05:24:53.686163 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0724 05:24:53.688217 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0724 05:24:53.690432 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0724 05:24:53.690459 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0724 05:24:53.690466 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0724 05:24:53.690494 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0724 05:24:53.690635 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0724 05:24:53.692561 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0724 05:24:53.694211 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0724 05:24:53.694363 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0724 05:24:53.701063 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0724 05:24:53.704946 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0724 05:24:53.707094 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0724 05:24:53.709262 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0724 05:24:53.709358 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0724 05:24:53.711756 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0724 05:24:53.715893 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0724 05:24:53.716008 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0724 05:24:53.716987 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0724 05:24:53.717073 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0724 05:24:53.717401 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0724 05:24:53.717524 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0724 05:24:53.718293 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0724 05:24:53.718397 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0724 05:24:53.718787 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0724 05:24:53.719420 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0724 05:24:53.720069 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0724 05:26:21.088501 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-24 05:26:21.088471094 +0000 UTC m=+87.495630759 I0724 05:26:22.067380 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-24 05:26:22.067370011 +0000 UTC m=+88.474529656 I0724 05:26:22.068120 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 05:26:22.068140 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 05:26:22.068135199 +0000 UTC m=+88.475294844 I0724 05:26:22.445058 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:22.445252 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 05:26:22.445354 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-24 05:26:22.445338345 +0000 UTC m=+88.852498030 E0724 05:26:22.456762 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0724 05:26:22.456824 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-24 05:26:22.456816871 +0000 UTC m=+88.863976506 E0724 05:26:22.457550 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 05:26:22.489490 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0724 05:26:22.489598 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 05:26:22.489631 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0724 05:26:22.489669 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0724 05:26:22.619400 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:22.625691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-24 05:26:22.625675058 +0000 UTC m=+89.032834723 I0724 05:26:22.999243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-24 05:26:22.99923149 +0000 UTC m=+89.406391135 I0724 05:26:23.120098 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:26:23.120083066 +0000 UTC m=+89.527242701 I0724 05:26:23.153620 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:23.154094 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:26:23.154086123 +0000 UTC m=+89.561245758 I0724 05:26:23.159011 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:23.287652 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:27.490131 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:26:27.4901215 +0000 UTC m=+93.897281165 I0724 05:26:27.814437 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-24 05:26:27.814423153 +0000 UTC m=+94.221582788 I0724 05:26:27.814429 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 05:26:27.814713 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 05:26:27.81469672 +0000 UTC m=+94.221856365 I0724 05:26:27.823806 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-24 05:26:27.82379372 +0000 UTC m=+94.230953365 I0724 05:26:27.836448 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:27.836528 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 05:26:27.836550 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-24 05:26:27.836543245 +0000 UTC m=+94.243702870 I0724 05:26:28.489026 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:28.499522 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-24 05:26:28.499506292 +0000 UTC m=+94.906665967 I0724 05:26:28.523594 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-24 05:26:28.52358305 +0000 UTC m=+94.930742685 I0724 05:26:28.555590 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:26:28.55557563 +0000 UTC m=+94.962735295 I0724 05:26:28.570423 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:28.571186 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:26:28.571176151 +0000 UTC m=+94.978335796 I0724 05:26:28.598065 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:33.650997 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 05:26:33.651041 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-24 05:26:33.651030077 +0000 UTC m=+100.058189752 I0724 05:26:33.651632 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-24 05:26:33.65162309 +0000 UTC m=+100.058782765 I0724 05:26:34.110652 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:34.111067 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 05:26:34.111120 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-24 05:26:34.111111891 +0000 UTC m=+100.518271536 I0724 05:26:35.465382 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 05:26:35.465402 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-24 05:26:35.465376053 +0000 UTC m=+101.872535718 I0724 05:26:35.465441 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-24 05:26:35.465427464 +0000 UTC m=+101.872587119 E0724 05:26:35.465350 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0724 05:26:35.465799 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-07-24 05:26:35.465784012 +0000 UTC m=+101.872943657 I0724 05:26:35.465917 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0724 05:26:35.684750 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:35.684850 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 05:26:35.684935 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-24 05:26:35.684875371 +0000 UTC m=+102.092035006 E0724 05:26:35.685460 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" E0724 05:26:35.685613 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0724 05:26:35.685637 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0724 05:26:35.685697 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" I0724 05:26:36.566652 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-24 05:26:36.566639391 +0000 UTC m=+102.973799026 I0724 05:26:36.566823 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 05:26:36.566857 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-24 05:26:36.566847546 +0000 UTC m=+102.974007191 I0724 05:26:37.575467 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:37.578813 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-24 05:26:37.578794278 +0000 UTC m=+103.985953923 I0724 05:26:37.579040 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-24 05:26:37.579030103 +0000 UTC m=+103.986189748 I0724 05:26:37.579206 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 05:26:37.579223 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-24 05:26:37.579220118 +0000 UTC m=+103.986379763 I0724 05:26:37.854355 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:37.854704 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:37.854866 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0724 05:26:37.854908 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-24 05:26:37.854895256 +0000 UTC m=+104.262054931 I0724 05:26:37.855675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-07-24 05:26:37.855654263 +0000 UTC m=+104.262813898 I0724 05:26:38.093936 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-07-24 05:26:38.093919166 +0000 UTC m=+104.501078861 I0724 05:26:38.094227 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:38.433604 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-07-24 05:26:38.433593024 +0000 UTC m=+104.840752669 I0724 05:26:39.528995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-07-24 05:26:39.528981297 +0000 UTC m=+105.936140962 I0724 05:26:39.942684 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" E0724 05:26:40.686090 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0724 05:26:40.686196 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0724 05:26:40.686244 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" I0724 05:26:41.013968 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:26:41.013949963 +0000 UTC m=+107.421109628 I0724 05:26:41.017758 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-24 05:26:41.014845484 +0000 UTC m=+107.422005119 I0724 05:26:41.018544 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:26:41.018536529 +0000 UTC m=+107.425696174 I0724 05:26:41.019745 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-07-24 05:26:41.019726007 +0000 UTC m=+107.426885682 I0724 05:26:41.020587 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-07-24 05:26:41.020577436 +0000 UTC m=+107.427737081 I0724 05:26:43.095796 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:43.097863 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:26:43.100072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-07-24 05:26:43.100050236 +0000 UTC m=+109.507209891 I0724 05:26:43.101131 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-07-24 05:26:43.101119541 +0000 UTC m=+109.508279176 E0724 05:26:44.263203 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"libvirt-api-ca\" not found" logger="cert-manager.controller.setup" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0724 05:26:44.263255 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-24 05:26:44.263249027 +0000 UTC m=+110.670408662 I0724 05:26:44.263272 1 sync.go:62] "Error initializing issuer: secrets \"libvirt-api-ca\" not found" logger="cert-manager.controller" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0724 05:26:46.816433 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"libvirt-api-ca\" not found" logger="cert-manager.controller" key="openstack/libvirt-api" E0724 05:26:46.816586 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"libvirt-api-ca\" not found" logger="cert-manager.controller.setup" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0724 05:26:46.816703 1 sync.go:62] "Error initializing issuer: secrets \"libvirt-api-ca\" not found" logger="cert-manager.controller" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0724 05:26:46.816751 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"libvirt-api-ca\" not found" logger="cert-manager.controller" key="openstack/libvirt-api" E0724 05:26:51.817065 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"libvirt-api-ca\" not found" logger="cert-manager.controller.setup" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0724 05:26:51.817129 1 sync.go:62] "Error initializing issuer: secrets \"libvirt-api-ca\" not found" logger="cert-manager.controller" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0724 05:26:51.817175 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"libvirt-api-ca\" not found" logger="cert-manager.controller" key="openstack/libvirt-api" E0724 05:26:53.096871 1 controller.go:162] "re-queuing item due to error processing" err="Put \"https://10.96.0.1:443/apis/cert-manager.io/v1/namespaces/openstack/certificates/libvirt-vnc-ca/status\": context deadline exceeded" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" E0724 05:26:53.098655 1 controller.go:162] "re-queuing item due to error processing" err="Put \"https://10.96.0.1:443/apis/cert-manager.io/v1/namespaces/openstack/certificates/valkey-ca/status\": context deadline exceeded" logger="cert-manager.controller" key="openstack/valkey-ca" E0724 05:26:53.817577 1 event.go:359] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{libvirt-api-ca-1.18c52289ecb9a4d9 openstack 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:CertificateRequest,Namespace:openstack,Name:libvirt-api-ca-1,UID:3b6ce9e5-b68e-40c3-95ad-55f80e66a247,APIVersion:cert-manager.io/v1,ResourceVersion:2671,FieldPath:,},Reason:cert-manager.io,Message:Certificate request has been approved by cert-manager.io,Source:EventSource{Component:cert-manager-certificaterequests-approver,Host:,},FirstTimestamp:2026-07-24 05:26:43.099722969 +0000 UTC m=+109.506882614,LastTimestamp:2026-07-24 05:26:43.099722969 +0000 UTC m=+109.506882614,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificaterequests-approver,ReportingInstance:,}" E0724 05:26:53.818727 1 event.go:359] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{valkey-server-1.18c52289ecbe90ea openstack 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:CertificateRequest,Namespace:openstack,Name:valkey-server-1,UID:27f61d13-cc24-4bc3-94a8-cded9a7051db,APIVersion:cert-manager.io/v1,ResourceVersion:2688,FieldPath:,},Reason:IssuerNotReady,Message:Referenced issuer does not have a Ready status condition,Source:EventSource{Component:cert-manager-certificaterequests-issuer-ca,Host:,},FirstTimestamp:2026-07-24 05:26:43.100045546 +0000 UTC m=+109.507205201,LastTimestamp:2026-07-24 05:26:43.100045546 +0000 UTC m=+109.507205201,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificaterequests-issuer-ca,ReportingInstance:,}" E0724 05:26:53.818835 1 event.go:359] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{libvirt-api-ca-1.18c52289eccee319 openstack 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:CertificateRequest,Namespace:openstack,Name:libvirt-api-ca-1,UID:3b6ce9e5-b68e-40c3-95ad-55f80e66a247,APIVersion:cert-manager.io/v1,ResourceVersion:2689,FieldPath:,},Reason:CertificateIssued,Message:Certificate fetched from issuer successfully,Source:EventSource{Component:cert-manager-certificaterequests-issuer-selfsigned,Host:,},FirstTimestamp:2026-07-24 05:26:43.101115161 +0000 UTC m=+109.508274796,LastTimestamp:2026-07-24 05:26:43.101115161 +0000 UTC m=+109.508274796,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-certificaterequests-issuer-selfsigned,ReportingInstance:,}" E0724 05:26:53.819083 1 event.go:359] "Server rejected event (will not retry!)" err="etcdserver: request timed out" event="&Event{ObjectMeta:{valkey.18c5228825b73da4 openstack 2631 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Issuer,Namespace:openstack,Name:valkey,UID:9ea8f8ef-05d5-4ba5-8910-e9f057ffa113,APIVersion:cert-manager.io/v1,ResourceVersion:2604,FieldPath:,},Reason:ErrInitIssuer,Message:Error initializing issuer: secrets \"valkey-ca\" not found,Source:EventSource{Component:cert-manager-issuers,Host:,},FirstTimestamp:2026-07-24 05:26:35 +0000 UTC,LastTimestamp:2026-07-24 05:26:40.686204031 +0000 UTC m=+107.093363676,Count:3,Type:Warning,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:cert-manager-issuers,ReportingInstance:,}" E0724 05:26:54.267548 1 controller.go:162] "re-queuing item due to error processing" err="failed to apply secret openstack/libvirt-api-ca: Patch \"https://10.96.0.1:443/api/v1/namespaces/openstack/secrets/libvirt-api-ca?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.controller" key="openstack/libvirt-api-ca" I0724 05:26:59.914142 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:26:59.914125351 +0000 UTC m=+126.321285016 I0724 05:27:00.701874 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:27:00.701863046 +0000 UTC m=+127.109022681 I0724 05:27:04.297214 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:27:04.302624 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:27:04.302598952 +0000 UTC m=+130.709758627 I0724 05:27:08.644014 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:27:09.640267 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:27:09.640253151 +0000 UTC m=+136.047412796 I0724 05:27:10.233000 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:27:11.037668 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:27:11.037805 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0724 05:27:11.038395 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:27:11.038385808 +0000 UTC m=+137.445545443 I0724 05:27:11.818032 1 conditions.go:85] Found status change for Issuer "libvirt-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-24 05:27:11.818017496 +0000 UTC m=+138.225177141 I0724 05:27:13.083795 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" E0724 05:34:41.890369 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path E0724 05:42:03.441151 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path E0724 05:42:35.025282 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path E0724 05:44:08.176518 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path