I0511 07:36:53.259651       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0511 07:36:53.259847       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0511 07:36:53.260063       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0511 07:36:53.267858       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0511 07:36:53.268443       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0511 07:36:53.268580       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0511 07:36:53.268588       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0511 07:36:53.273385       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0511 07:36:53.429918       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0511 07:36:53.436333       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0511 07:36:53.438630       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0511 07:36:53.438953       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0511 07:36:53.446803       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0511 07:36:53.455420       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0511 07:36:53.457207       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0511 07:36:53.459114       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0511 07:36:53.459140       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0511 07:36:53.459148       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0511 07:36:53.459293       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0511 07:36:53.462928       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0511 07:36:53.465942       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0511 07:36:53.468284       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0511 07:36:53.468361       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0511 07:36:53.473704       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0511 07:36:53.476750       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0511 07:36:53.480369       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0511 07:36:53.482737       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0511 07:36:53.482813       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0511 07:36:53.484839       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0511 07:36:53.489787       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0511 07:36:53.489791       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0511 07:36:53.489917       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0511 07:36:53.491562       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0511 07:36:53.495966       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 07:36:53.496377       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 07:36:53.496705       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 07:36:53.497679       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 07:36:53.497792       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 07:36:53.497961       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 07:36:53.498127       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 07:36:53.498358       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 07:36:53.498496       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 07:36:53.622274       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0511 07:37:12.895555       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-11 07:37:12.895542475 +0000 UTC m=+19.668794355
I0511 07:37:13.860377       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-11 07:37:13.860365496 +0000 UTC m=+20.633617376
I0511 07:37:13.861764       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 07:37:13.861905       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-11 07:37:13.861892838 +0000 UTC m=+20.635144748
I0511 07:37:13.898513       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:13.898610       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 07:37:13.898637       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-11 07:37:13.898628679 +0000 UTC m=+20.671880569
E0511 07:37:13.899287       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0511 07:37:13.899332       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-11 07:37:13.899323783 +0000 UTC m=+20.672575673
E0511 07:37:13.899400       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0511 07:37:13.958420       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0511 07:37:13.960718       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0511 07:37:13.960816       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0511 07:37:13.960879       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0511 07:37:18.680264       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f69bn" condition "Approved" to 2026-05-11 07:37:18.680251337 +0000 UTC m=+25.453503237
E0511 07:37:18.959237       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0511 07:37:18.959314       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0511 07:37:18.959378       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0511 07:37:19.110802       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-f69bn" condition "Ready" to 2026-05-11 07:37:19.110790643 +0000 UTC m=+25.884042533
I0511 07:37:19.567892       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:37:19.567872778 +0000 UTC m=+26.341124668
I0511 07:37:19.594713       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:31.598303       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 07:37:31.598352       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-11 07:37:31.598335671 +0000 UTC m=+38.371587551
I0511 07:37:31.598394       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-11 07:37:31.598384583 +0000 UTC m=+38.371636473
I0511 07:37:31.694802       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:31.694872       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-11 07:37:31.694865493 +0000 UTC m=+38.468117383
I0511 07:37:31.808952       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:31.956324       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-8dnf7" condition "Approved" to 2026-05-11 07:37:31.956306057 +0000 UTC m=+38.729557947
I0511 07:37:32.019396       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-8dnf7" condition "Ready" to 2026-05-11 07:37:32.019380928 +0000 UTC m=+38.792632818
I0511 07:37:32.257394       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:37:32.2573686 +0000 UTC m=+39.030620530
I0511 07:37:32.333945       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:34.404957       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-11 07:37:34.404927774 +0000 UTC m=+41.178179704
I0511 07:37:34.405366       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 07:37:34.405433       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-11 07:37:34.40540454 +0000 UTC m=+41.178656430
I0511 07:37:34.733150       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:34.733228       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-11 07:37:34.733219647 +0000 UTC m=+41.506471537
I0511 07:37:34.961217       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:34.970654       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:34.973187       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 07:37:34.973240       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-11 07:37:34.973229597 +0000 UTC m=+41.746481487
I0511 07:37:34.973691       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-11 07:37:34.973684782 +0000 UTC m=+41.746936672
I0511 07:37:35.010259       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:35.010390       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 07:37:35.010425       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-11 07:37:35.010417393 +0000 UTC m=+41.783669273
I0511 07:37:35.011600       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-11 07:37:35.011590773 +0000 UTC m=+41.784842653
I0511 07:37:35.613769       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-wv9dk" condition "Approved" to 2026-05-11 07:37:35.61375566 +0000 UTC m=+42.387007560
I0511 07:37:38.180134       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-11 07:37:38.180122515 +0000 UTC m=+44.953374385
I0511 07:37:38.190722       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-wv9dk" condition "Ready" to 2026-05-11 07:37:38.190715193 +0000 UTC m=+44.963967073
I0511 07:37:38.960640       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:37:38.960614177 +0000 UTC m=+45.733866088
E0511 07:37:41.093257       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers.setup" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0511 07:37:41.093307       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-11 07:37:41.093294139 +0000 UTC m=+47.866546049
I0511 07:37:41.093335       1 sync.go:62] "Error initializing issuer: secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" resource_name="libvirt-api" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0511 07:37:41.095435       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fbk8f" condition "Approved" to 2026-05-11 07:37:41.095421681 +0000 UTC m=+47.868673571
I0511 07:37:41.320987       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:37:41.320974602 +0000 UTC m=+48.094226492
E0511 07:37:41.517932       1 controller.go:167] "re-queuing item due to error processing" err="secret \"libvirt-api-ca\" not found" logger="cert-manager.issuers" key="openstack/libvirt-api"
I0511 07:37:41.518585       1 conditions.go:85] Found status change for Issuer "libvirt-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:37:41.518577419 +0000 UTC m=+48.291829309
I0511 07:37:41.519103       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-fbk8f" condition "Ready" to 2026-05-11 07:37:41.519090406 +0000 UTC m=+48.292342286
I0511 07:37:41.788816       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:41.789019       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:37:41.789010327 +0000 UTC m=+48.562262217
I0511 07:37:42.814473       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:43.319220       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:37:43.319206432 +0000 UTC m=+50.092458322
I0511 07:37:43.907933       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:43.914507       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:43.914848       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:37:43.914838809 +0000 UTC m=+50.688090689
I0511 07:37:44.462358       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:37:44.465545       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:43:02.376797       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 07:43:02.376880       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-11 07:43:02.376872135 +0000 UTC m=+369.150124025
I0511 07:43:02.377384       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-11 07:43:02.37736239 +0000 UTC m=+369.150614310
E0511 07:43:02.400008       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0511 07:43:02.400047       1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-11 07:43:02.400039983 +0000 UTC m=+369.173291863
I0511 07:43:02.400091       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0511 07:43:02.401211       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:43:02.401284       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-11 07:43:02.401278062 +0000 UTC m=+369.174529942
E0511 07:43:02.421712       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
E0511 07:43:02.421849       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0511 07:43:02.421962       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0511 07:43:02.422006       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
I0511 07:43:02.426873       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0511 07:43:02.426928       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-11 07:43:02.426920029 +0000 UTC m=+369.200171919
I0511 07:43:02.426956       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-11 07:43:02.42693882 +0000 UTC m=+369.200190710
I0511 07:43:02.564456       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:43:02.564564       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-11 07:43:02.564553598 +0000 UTC m=+369.337805508
I0511 07:43:02.595641       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:43:02.655822       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-s6z6m" condition "Approved" to 2026-05-11 07:43:02.655803488 +0000 UTC m=+369.429055368
I0511 07:43:02.687401       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-s6z6m" condition "Ready" to 2026-05-11 07:43:02.687387682 +0000 UTC m=+369.460639572
I0511 07:43:02.753750       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:43:02.753734689 +0000 UTC m=+369.526986609
I0511 07:43:02.775090       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:43:02.775475       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:43:02.775465383 +0000 UTC m=+369.548717293
I0511 07:43:02.872045       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:43:03.029096       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0511 07:43:03.512170       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-4qlll" condition "Approved" to 2026-05-11 07:43:03.512145927 +0000 UTC m=+370.285397847
I0511 07:43:03.697412       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-4qlll" condition "Ready" to 2026-05-11 07:43:03.697386485 +0000 UTC m=+370.470638375
I0511 07:43:07.423216       1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:43:07.423204413 +0000 UTC m=+374.196456293
I0511 07:43:08.672694       1 conditions.go:252] Found status change for CertificateRequest "valkey-server-4qlll" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:43:08.672680339 +0000 UTC m=+375.445932239
I0511 07:43:16.713894       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:43:16.713878271 +0000 UTC m=+383.487130151
E0511 07:43:19.849278       1 controller.go:167] "re-queuing item due to error processing" err="Put \"https://10.96.0.1:443/apis/cert-manager.io/v1/namespaces/openstack/certificates/valkey-server/status\": context deadline exceeded" logger="cert-manager.certificates-issuing" key="openstack/valkey-server"
E0511 07:43:23.731878       1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificates-readiness" key="openstack/valkey-server"
I0511 07:43:24.733370       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:43:24.733349321 +0000 UTC m=+391.506601241
E0511 07:43:29.850717       1 controller.go:167] "re-queuing item due to error processing" err="failed to apply secret openstack/valkey-server-certs: Patch \"https://10.96.0.1:443/api/v1/namespaces/openstack/secrets/valkey-server-certs?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.certificates-issuing" key="openstack/valkey-server"
E0511 07:43:31.749884       1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificates-readiness" key="openstack/valkey-server"
I0511 07:43:33.750492       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:43:33.750470646 +0000 UTC m=+400.523722566
E0511 07:43:39.851773       1 controller.go:167] "re-queuing item due to error processing" err="failed to apply secret openstack/valkey-server-certs: Patch \"https://10.96.0.1:443/api/v1/namespaces/openstack/secrets/valkey-server-certs?fieldManager=cert-manager-certificates-issuing&force=true\": context deadline exceeded" logger="cert-manager.certificates-issuing" key="openstack/valkey-server"
E0511 07:43:40.765334       1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificates-readiness" key="openstack/valkey-server"
I0511 07:43:40.765847       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:43:40.765837693 +0000 UTC m=+407.539089603
E0511 07:43:47.781182       1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificates-readiness" key="openstack/valkey-server"
I0511 07:43:47.781958       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:43:47.781946419 +0000 UTC m=+414.555198299
E0511 07:43:54.809196       1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificates-readiness" key="openstack/valkey-server"
I0511 07:43:55.782305       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-11 07:43:55.782289988 +0000 UTC m=+422.555541908
I0511 07:43:57.091677       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
E0511 07:44:04.110968       1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server"
E0511 07:44:04.176135       1 leaderelection.go:369] Failed to update lock: etcdserver: request timed out
E0511 07:44:04.492792       1 controller.go:167] "re-queuing item due to error processing" err="secrets \"valkey-server-nl85s\" not found" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server"
E0511 07:44:11.507460       1 controller.go:167] "re-queuing item due to error processing" err="etcdserver: request timed out" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server"
I0511 07:44:11.715837       1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition
I0511 07:44:15.784686       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
E0511 07:44:26.453689       1 leaderelection.go:308] Failed to release lock: Operation cannot be fulfilled on leases.coordination.k8s.io "cert-manager-controller": the object has been modified; please apply your changes to the latest version and try again
I0511 07:44:26.453876       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-trigger"
I0511 07:44:26.453897       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-metrics"
I0511 07:44:26.453919       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-approver"
I0511 07:44:26.453942       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.ingress-shim"
I0511 07:44:26.454061       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-request-manager"
I0511 07:44:26.454089       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.issuers"
I0511 07:44:26.454074       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.clusterissuers"
I0511 07:44:26.454089       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-venafi"
I0511 07:44:26.454170       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-acme"
I0511 07:44:26.454181       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-readiness"
I0511 07:44:26.454196       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-vault"
I0511 07:44:26.454201       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.challenges"
I0511 07:44:26.454216       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-selfsigned"
I0511 07:44:26.454231       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificaterequests-issuer-ca"
I0511 07:44:26.454134       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.orders"
I0511 07:44:26.454264       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-issuing"
I0511 07:44:26.453881       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-revision-manager"
I0511 07:44:26.454297       1 controller.go:127] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.certificates-key-manager"
E0511 07:44:26.454467       1 main.go:35] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"