I0528 00:36:47.458588 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0528 00:36:47.458729 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0528 00:36:47.458821 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0528 00:36:47.464921 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0528 00:36:47.465372 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0528 00:36:47.465521 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0528 00:36:47.465547 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0528 00:36:47.468021 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0528 00:36:47.485158 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0528 00:36:47.489566 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0528 00:36:47.494148 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0528 00:36:47.501389 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0528 00:36:47.501552 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0528 00:36:47.505606 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0528 00:36:47.508651 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0528 00:36:47.511057 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0528 00:36:47.513600 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0528 00:36:47.516129 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0528 00:36:47.516157 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0528 00:36:47.516369 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0528 00:36:47.518183 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0528 00:36:47.523754 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0528 00:36:47.526476 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0528 00:36:47.529176 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0528 00:36:47.529209 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0528 00:36:47.529221 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0528 00:36:47.532079 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0528 00:36:47.534149 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0528 00:36:47.536044 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0528 00:36:47.538001 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0528 00:36:47.539691 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0528 00:36:47.539787 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0528 00:36:47.545444 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0528 00:36:47.548357 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 00:36:47.549842 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 00:36:47.549850 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 00:36:47.550359 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 00:36:47.564921 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 00:36:47.582868 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 00:36:47.600176 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 00:36:47.616632 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 00:36:47.632029 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 00:36:47.638430 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0528 00:37:04.519952 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-28 00:37:04.519927922 +0000 UTC m=+17.092981267 I0528 00:37:05.328708 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-28 00:37:05.328688309 +0000 UTC m=+17.901741634 I0528 00:37:05.329896 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:37:05.330000 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-28 00:37:05.329988495 +0000 UTC m=+17.903041840 E0528 00:37:05.343952 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0528 00:37:05.344024 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-28 00:37:05.344018409 +0000 UTC m=+17.917071734 E0528 00:37:05.344052 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0528 00:37:05.347498 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:37:05.347598 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:37:05.347641 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-28 00:37:05.347631272 +0000 UTC m=+17.920684597 E0528 00:37:05.352486 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0528 00:37:05.352647 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 00:37:05.352707 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 00:37:05.352755 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0528 00:37:05.382652 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:37:05.383626 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9d7jf" condition "Approved" to 2026-05-28 00:37:05.383600978 +0000 UTC m=+17.956654333 I0528 00:37:05.394593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-9d7jf" condition "Ready" to 2026-05-28 00:37:05.39457759 +0000 UTC m=+17.967630935 I0528 00:37:05.417196 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:37:05.417180967 +0000 UTC m=+17.990234292 I0528 00:37:05.433522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:37:10.353820 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:37:10.35379347 +0000 UTC m=+22.926846815 I0528 00:37:32.668663 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:37:32.668774 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-28 00:37:32.668763912 +0000 UTC m=+45.241817227 I0528 00:37:32.668908 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-28 00:37:32.668889045 +0000 UTC m=+45.241942370 I0528 00:37:32.678101 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-28 00:37:32.678078141 +0000 UTC m=+45.251131476 I0528 00:37:32.700620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:37:32.700807 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-28 00:37:32.70079489 +0000 UTC m=+45.273848205 I0528 00:37:32.781809 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:37:32.818632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-khdh6" condition "Approved" to 2026-05-28 00:37:32.81861091 +0000 UTC m=+45.391664255 I0528 00:37:32.855505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-khdh6" condition "Ready" to 2026-05-28 00:37:32.855490614 +0000 UTC m=+45.428543929 I0528 00:37:32.892197 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:37:32.892177115 +0000 UTC m=+45.465230440 I0528 00:37:32.911277 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:37:32.911725 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:37:32.9117139 +0000 UTC m=+45.484767225 I0528 00:37:32.932807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:37:32.939960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:37:32.940372 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:37:32.940361799 +0000 UTC m=+45.513415114 I0528 00:39:20.051958 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:39:20.052200 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-28 00:39:20.052034189 +0000 UTC m=+152.625087544 I0528 00:39:20.052867 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-28 00:39:20.052841375 +0000 UTC m=+152.625894720 E0528 00:39:20.068929 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0528 00:39:20.069181 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-28 00:39:20.069167306 +0000 UTC m=+152.642220631 I0528 00:39:20.069327 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0528 00:39:20.073180 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:39:20.073332 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:39:20.073370 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-28 00:39:20.07335943 +0000 UTC m=+152.646412775 E0528 00:39:20.081714 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0528 00:39:20.082678 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0528 00:39:20.082874 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0528 00:39:20.083041 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0528 00:39:20.085013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:39:20.085068 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-28 00:39:20.085057126 +0000 UTC m=+152.658110471 I0528 00:39:20.085018 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-28 00:39:20.085006125 +0000 UTC m=+152.658059460 I0528 00:39:20.100648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:39:20.100820 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-28 00:39:20.100808335 +0000 UTC m=+152.673861680 I0528 00:39:20.288960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:39:20.327151 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-chk8j" condition "Approved" to 2026-05-28 00:39:20.327118997 +0000 UTC m=+152.900172342 I0528 00:39:20.344652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-chk8j" condition "Ready" to 2026-05-28 00:39:20.344636431 +0000 UTC m=+152.917689756 I0528 00:39:20.537161 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:39:20.541068 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2nl4s" condition "Approved" to 2026-05-28 00:39:20.541058829 +0000 UTC m=+153.114112154 I0528 00:39:20.567862 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-2nl4s" condition "Ready" to 2026-05-28 00:39:20.567853971 +0000 UTC m=+153.140907296 I0528 00:39:20.600798 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:39:20.600779216 +0000 UTC m=+153.173832541 I0528 00:39:20.626260 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:39:25.082503 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:39:25.082489152 +0000 UTC m=+157.655542497 I0528 00:39:25.101300 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-chk8j" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:39:25.101291772 +0000 UTC m=+157.674345097 I0528 00:39:25.133954 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:39:25.133934422 +0000 UTC m=+157.706987777 I0528 00:39:25.159758 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:39:25.160373 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:39:25.160363265 +0000 UTC m=+157.733416620 I0528 00:39:25.178527 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:39:25.178968 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:39:25.178958282 +0000 UTC m=+157.752011607 I0528 00:41:58.733789 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready" to 2026-05-28 00:41:58.733759241 +0000 UTC m=+311.306812586 I0528 00:41:58.733885 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:41:58.733927 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-05-28 00:41:58.733914184 +0000 UTC m=+311.306967529 I0528 00:41:58.760570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:41:58.760744 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-95.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:41:58.760772 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Issuing" to 2026-05-28 00:41:58.760762877 +0000 UTC m=+311.333816222 I0528 00:41:58.956874 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-hb8q9" condition "Approved" to 2026-05-28 00:41:58.956837618 +0000 UTC m=+311.529890973 I0528 00:41:58.978412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-95.nip.io-tls-hb8q9" condition "Ready" to 2026-05-28 00:41:58.978393563 +0000 UTC m=+311.551446888 I0528 00:41:59.008211 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-95.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:41:59.008190606 +0000 UTC m=+311.581243961 I0528 00:41:59.027142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-95.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-95.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:10.906480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:43:10.906656 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-28 00:43:10.906639112 +0000 UTC m=+383.479692457 I0528 00:43:10.906800 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-28 00:43:10.906770124 +0000 UTC m=+383.479823469 I0528 00:43:10.923027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:10.923233 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-28 00:43:10.923218596 +0000 UTC m=+383.496271911 E0528 00:43:10.924912 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0528 00:43:10.924968 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-28 00:43:10.924957352 +0000 UTC m=+383.498010677 E0528 00:43:10.925261 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 00:43:10.936350 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0528 00:43:10.936477 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 00:43:10.936550 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0528 00:43:10.936579 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0528 00:43:10.943797 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:10.966272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-552h2" condition "Approved" to 2026-05-28 00:43:10.966259656 +0000 UTC m=+383.539313011 I0528 00:43:10.981631 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-552h2" condition "Ready" to 2026-05-28 00:43:10.981607826 +0000 UTC m=+383.554661151 I0528 00:43:11.009204 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:43:11.009180794 +0000 UTC m=+383.582234119 I0528 00:43:11.035145 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:11.035442 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:43:11.035431955 +0000 UTC m=+383.608485280 I0528 00:43:11.050136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:11.050607 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:43:11.050592591 +0000 UTC m=+383.623645936 I0528 00:43:11.061113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:15.937366 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:43:15.937348139 +0000 UTC m=+388.510401494 I0528 00:43:56.899755 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-28 00:43:56.899735765 +0000 UTC m=+429.472789080 I0528 00:43:56.901023 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:43:56.901085 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-28 00:43:56.901076562 +0000 UTC m=+429.474129897 I0528 00:43:56.904321 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-28 00:43:56.904310977 +0000 UTC m=+429.477364282 I0528 00:43:56.904695 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:43:56.904716 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-28 00:43:56.904712885 +0000 UTC m=+429.477766200 I0528 00:43:56.905119 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-28 00:43:56.905116134 +0000 UTC m=+429.478169449 I0528 00:43:56.905459 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:43:56.905511 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-28 00:43:56.905502761 +0000 UTC m=+429.478556116 I0528 00:43:56.927874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:56.927973 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:43:56.928021 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-28 00:43:56.928007295 +0000 UTC m=+429.501060640 I0528 00:43:56.934808 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:56.934877 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-28 00:43:56.934868734 +0000 UTC m=+429.507922049 I0528 00:43:56.937463 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:56.937673 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-28 00:43:56.93766078 +0000 UTC m=+429.510714115 I0528 00:43:57.131999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:57.132999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nzspt" condition "Approved" to 2026-05-28 00:43:57.132979344 +0000 UTC m=+429.706032659 I0528 00:43:57.155731 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-nzspt" condition "Ready" to 2026-05-28 00:43:57.155719793 +0000 UTC m=+429.728773118 I0528 00:43:57.188912 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:43:57.188896203 +0000 UTC m=+429.761949528 I0528 00:43:57.223618 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:57.226360 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:57.371071 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:57.411429 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ptc79" condition "Approved" to 2026-05-28 00:43:57.411408235 +0000 UTC m=+429.984461590 I0528 00:43:57.438397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-ptc79" condition "Ready" to 2026-05-28 00:43:57.43838294 +0000 UTC m=+430.011436265 I0528 00:43:57.470359 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:43:57.470306144 +0000 UTC m=+430.043359469 I0528 00:43:57.500374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:43:57.991843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fwchx" condition "Approved" to 2026-05-28 00:43:57.991820273 +0000 UTC m=+430.564873618 I0528 00:43:58.313332 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-fwchx" condition "Ready" to 2026-05-28 00:43:58.313319794 +0000 UTC m=+430.886373109 E0528 00:43:58.428178 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-7552h\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0528 00:43:58.853069 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-fwchx" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-kzb2k" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0528 00:43:58.879342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nf2v4" condition "Approved" to 2026-05-28 00:43:58.879322011 +0000 UTC m=+431.452375356 I0528 00:43:59.143266 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-nf2v4" condition "Ready" to 2026-05-28 00:43:59.143252291 +0000 UTC m=+431.716305626 I0528 00:43:59.336827 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:43:59.336810379 +0000 UTC m=+431.909863704 I0528 00:43:59.437370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:44:04.818965 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:44:04.819006 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls" condition "Ready" to 2026-05-28 00:44:04.818979081 +0000 UTC m=+437.392032436 I0528 00:44:04.819022 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls" condition "Issuing" to 2026-05-28 00:44:04.819011021 +0000 UTC m=+437.392064346 I0528 00:44:04.836503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:44:04.836591 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:44:04.836650 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls" condition "Issuing" to 2026-05-28 00:44:04.836641697 +0000 UTC m=+437.409695022 I0528 00:44:04.987528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gvvpd-6lpsg" condition "Approved" to 2026-05-28 00:44:04.987509383 +0000 UTC m=+437.560562738 I0528 00:44:05.009949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-gvvpd-6lpsg" condition "Ready" to 2026-05-28 00:44:05.009929486 +0000 UTC m=+437.582982811 I0528 00:44:05.044509 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:44:05.044490463 +0000 UTC m=+437.617543788 I0528 00:44:05.064780 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:44:05.065136 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:44:05.065122929 +0000 UTC m=+437.638176254 I0528 00:44:05.099297 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-gvvpd-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:44:28.151648 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-28 00:44:28.151608845 +0000 UTC m=+460.724662170 I0528 00:44:28.152093 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:44:28.152120 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-28 00:44:28.152115475 +0000 UTC m=+460.725168800 I0528 00:44:28.166528 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:44:28.166589 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:44:28.166640 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-28 00:44:28.166632438 +0000 UTC m=+460.739685763 I0528 00:44:28.686337 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:44:28.704605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wwwjv" condition "Approved" to 2026-05-28 00:44:28.704583668 +0000 UTC m=+461.277637013 I0528 00:44:28.726584 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-wwwjv" condition "Ready" to 2026-05-28 00:44:28.726571722 +0000 UTC m=+461.299625047 I0528 00:44:28.762610 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:44:28.76259263 +0000 UTC m=+461.335645945 I0528 00:44:28.788458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:44:28.788767 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:44:28.788755678 +0000 UTC m=+461.361809003 I0528 00:44:28.798392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:44:28.815730 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:44:28.816104 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:44:28.81609358 +0000 UTC m=+461.389146905 I0528 00:47:49.429738 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:47:49.429862 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-28 00:47:49.429808955 +0000 UTC m=+662.002862310 I0528 00:47:49.430387 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-28 00:47:49.429754944 +0000 UTC m=+662.002808269 I0528 00:47:49.450693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:47:49.450778 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-28 00:47:49.450767537 +0000 UTC m=+662.023820862 I0528 00:47:49.583283 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:47:49.619136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j2h72" condition "Approved" to 2026-05-28 00:47:49.619116835 +0000 UTC m=+662.192170170 I0528 00:47:49.639144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-j2h72" condition "Ready" to 2026-05-28 00:47:49.639128129 +0000 UTC m=+662.212181454 I0528 00:47:49.670701 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:47:49.670685647 +0000 UTC m=+662.243738972 I0528 00:47:49.699054 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:47:49.699366 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:47:49.699357685 +0000 UTC m=+662.272411020 I0528 00:47:49.720401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:50:26.910197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:50:26.910259 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-28 00:50:26.910230972 +0000 UTC m=+819.483284317 I0528 00:50:26.910592 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-28 00:50:26.910553608 +0000 UTC m=+819.483606963 I0528 00:50:26.930299 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:50:26.930460 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-28 00:50:26.93044556 +0000 UTC m=+819.503498905 I0528 00:50:27.099420 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:50:27.131752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-d66d7" condition "Approved" to 2026-05-28 00:50:27.131709997 +0000 UTC m=+819.704763322 I0528 00:50:27.155282 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-d66d7" condition "Ready" to 2026-05-28 00:50:27.155269804 +0000 UTC m=+819.728323119 I0528 00:50:27.190894 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:50:27.190881782 +0000 UTC m=+819.763935087 I0528 00:50:27.211662 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:50:27.267018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:51:35.882227 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:51:35.882306 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-28 00:51:35.882298323 +0000 UTC m=+888.455351648 I0528 00:51:35.882446 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-28 00:51:35.882427796 +0000 UTC m=+888.455481121 I0528 00:51:35.898444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:51:35.898554 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:51:35.898586 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-28 00:51:35.898577772 +0000 UTC m=+888.471631127 I0528 00:51:36.320146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:51:36.327479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fvsvj" condition "Approved" to 2026-05-28 00:51:36.327463189 +0000 UTC m=+888.900516504 I0528 00:51:36.349262 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-fvsvj" condition "Ready" to 2026-05-28 00:51:36.349247919 +0000 UTC m=+888.922301244 I0528 00:51:36.380213 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:51:36.380200515 +0000 UTC m=+888.953253840 I0528 00:51:36.403604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:51:36.403978 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:51:36.403968705 +0000 UTC m=+888.977022030 I0528 00:51:36.424254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:54:50.659241 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:54:50.659377 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-28 00:54:50.659329352 +0000 UTC m=+1083.232382697 I0528 00:54:50.659376 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-28 00:54:50.659341523 +0000 UTC m=+1083.232394868 I0528 00:54:50.676729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:54:50.676857 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 00:54:50.676891 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-28 00:54:50.676882468 +0000 UTC m=+1083.249935793 I0528 00:54:50.797041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:54:50.805717 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pdmns" condition "Approved" to 2026-05-28 00:54:50.805703289 +0000 UTC m=+1083.378756614 I0528 00:54:50.821596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-pdmns" condition "Ready" to 2026-05-28 00:54:50.821581049 +0000 UTC m=+1083.394634374 I0528 00:54:50.851018 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:54:50.851006304 +0000 UTC m=+1083.424059609 I0528 00:54:50.869592 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 00:54:50.869892 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 00:54:50.869883255 +0000 UTC m=+1083.442936580 I0528 00:54:50.899848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:02:52.535267 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-28 01:02:52.535216838 +0000 UTC m=+1565.108270183 I0528 01:02:52.535671 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 01:02:52.535784 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-28 01:02:52.535773129 +0000 UTC m=+1565.108826474 I0528 01:02:52.552292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:02:52.552389 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 01:02:52.552510 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-28 01:02:52.552500906 +0000 UTC m=+1565.125554261 I0528 01:02:52.653150 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-d5ffp" condition "Approved" to 2026-05-28 01:02:52.653136935 +0000 UTC m=+1565.226190260 I0528 01:02:52.670932 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-d5ffp" condition "Ready" to 2026-05-28 01:02:52.670912953 +0000 UTC m=+1565.243966308 I0528 01:02:52.710203 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:02:52.710188465 +0000 UTC m=+1565.283241780 I0528 01:02:52.789479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:02:52.789830 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:02:52.78982498 +0000 UTC m=+1565.362878295 I0528 01:02:52.809374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:02:52.809659 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:02:52.80964932 +0000 UTC m=+1565.382702645 I0528 01:04:34.767510 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-28 01:04:34.767486739 +0000 UTC m=+1667.340540084 I0528 01:04:34.767994 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 01:04:34.768078 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-28 01:04:34.76806667 +0000 UTC m=+1667.341120025 I0528 01:04:34.785291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:04:34.785404 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 01:04:34.785453 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-28 01:04:34.78544461 +0000 UTC m=+1667.358497925 I0528 01:04:35.054781 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:04:35.067957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wjh9c" condition "Approved" to 2026-05-28 01:04:35.067944599 +0000 UTC m=+1667.640997924 I0528 01:04:35.085868 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wjh9c" condition "Ready" to 2026-05-28 01:04:35.08585635 +0000 UTC m=+1667.658909705 I0528 01:04:35.114573 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:04:35.114564999 +0000 UTC m=+1667.687618324 I0528 01:04:35.136795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:04:35.137377 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:04:35.137370508 +0000 UTC m=+1667.710423833 I0528 01:04:35.160338 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:05:30.108761 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-28 01:05:30.108737152 +0000 UTC m=+1722.681790497 I0528 01:05:30.109174 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 01:05:30.109207 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-28 01:05:30.109199661 +0000 UTC m=+1722.682253016 I0528 01:05:30.128986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:05:30.129046 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-28 01:05:30.12904161 +0000 UTC m=+1722.702094935 I0528 01:05:30.153875 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:05:30.181815 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-97mft" condition "Approved" to 2026-05-28 01:05:30.181804153 +0000 UTC m=+1722.754857478 I0528 01:05:30.200867 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-97mft" condition "Ready" to 2026-05-28 01:05:30.200852127 +0000 UTC m=+1722.773905452 I0528 01:05:30.226291 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:05:30.226266848 +0000 UTC m=+1722.799320193 I0528 01:05:30.253744 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:05:30.253977 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:05:30.253971807 +0000 UTC m=+1722.827025132 I0528 01:05:30.262633 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:05:30.271767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:05:30.272219 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:05:30.272206693 +0000 UTC m=+1722.845260048 I0528 01:05:30.807333 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-28 01:05:30.80731429 +0000 UTC m=+1723.380367605 I0528 01:05:30.807753 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 01:05:30.807818 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-28 01:05:30.80779973 +0000 UTC m=+1723.380853085 I0528 01:05:30.828764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:05:30.828898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 01:05:30.828939 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-28 01:05:30.828927736 +0000 UTC m=+1723.401981081 I0528 01:05:30.879568 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-vgfr7" condition "Approved" to 2026-05-28 01:05:30.879541885 +0000 UTC m=+1723.452595280 I0528 01:05:30.899666 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-vgfr7" condition "Ready" to 2026-05-28 01:05:30.89965666 +0000 UTC m=+1723.472710005 I0528 01:05:30.925792 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:05:30.925773725 +0000 UTC m=+1723.498827050 I0528 01:05:30.949306 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:05:30.949605 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:05:30.949595535 +0000 UTC m=+1723.522648850 I0528 01:05:30.968835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:05:31.536119 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-28 01:05:31.536098547 +0000 UTC m=+1724.109151922 I0528 01:05:32.207346 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-28 01:05:32.207309475 +0000 UTC m=+1724.780362820 I0528 01:06:19.379702 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 01:06:19.379818 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-28 01:06:19.379796684 +0000 UTC m=+1771.952850039 I0528 01:06:19.380055 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-28 01:06:19.380035589 +0000 UTC m=+1771.953088904 I0528 01:06:19.417794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:06:19.417925 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-28 01:06:19.417914773 +0000 UTC m=+1771.990968088 I0528 01:06:20.769671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:06:20.823557 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-2f67m" condition "Approved" to 2026-05-28 01:06:20.82354109 +0000 UTC m=+1773.396594425 I0528 01:06:20.849615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-2f67m" condition "Ready" to 2026-05-28 01:06:20.849601636 +0000 UTC m=+1773.422654961 I0528 01:06:20.884124 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:06:20.8841083 +0000 UTC m=+1773.457161615 I0528 01:06:20.905024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:06:20.905605 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:06:20.905597953 +0000 UTC m=+1773.478651258 I0528 01:06:20.928831 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:09:04.109100 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-28 01:09:04.109080515 +0000 UTC m=+1936.682133840 I0528 01:09:04.109893 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 01:09:04.110115 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-28 01:09:04.110100466 +0000 UTC m=+1936.683153811 I0528 01:09:04.130433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:09:04.130602 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-28 01:09:04.130590919 +0000 UTC m=+1936.703644244 I0528 01:09:04.260362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:09:04.291830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-qmftm" condition "Approved" to 2026-05-28 01:09:04.291812798 +0000 UTC m=+1936.864866153 I0528 01:09:04.313168 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-qmftm" condition "Ready" to 2026-05-28 01:09:04.313155178 +0000 UTC m=+1936.886208503 I0528 01:09:04.343283 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:09:04.343270546 +0000 UTC m=+1936.916323901 I0528 01:09:04.372913 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:09:04.373159 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:09:04.373154289 +0000 UTC m=+1936.946207614 I0528 01:09:04.395312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:09:04.395538 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:09:04.39553365 +0000 UTC m=+1936.968586975 I0528 01:09:04.403348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:09:05.733253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 01:09:05.733315 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-28 01:09:05.733305953 +0000 UTC m=+1938.306359278 I0528 01:09:05.733597 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-28 01:09:05.733576978 +0000 UTC m=+1938.306630293 I0528 01:09:05.750896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:09:05.751026 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 01:09:05.751053 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-28 01:09:05.75104705 +0000 UTC m=+1938.324100355 I0528 01:09:05.959156 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-lqfcv" condition "Approved" to 2026-05-28 01:09:05.959130925 +0000 UTC m=+1938.532184270 I0528 01:09:05.993993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-lqfcv" condition "Ready" to 2026-05-28 01:09:05.993982177 +0000 UTC m=+1938.567035492 I0528 01:09:06.030953 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:09:06.030934872 +0000 UTC m=+1938.603988207 I0528 01:09:06.057632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:12:30.410574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0528 01:12:30.410636 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-28 01:12:30.410627082 +0000 UTC m=+2142.983680407 I0528 01:12:30.410817 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-28 01:12:30.410759366 +0000 UTC m=+2142.983812721 I0528 01:12:30.435802 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:12:30.435942 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-28 01:12:30.435930272 +0000 UTC m=+2143.008983617 I0528 01:12:30.914884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0528 01:12:30.952144 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-dswgw" condition "Approved" to 2026-05-28 01:12:30.952129527 +0000 UTC m=+2143.525182842 I0528 01:12:30.977212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-dswgw" condition "Ready" to 2026-05-28 01:12:30.977198442 +0000 UTC m=+2143.550251767 I0528 01:12:31.007912 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-28 01:12:31.007894231 +0000 UTC m=+2143.580947566 I0528 01:12:31.033675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"