I0522 11:35:51.780582 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0522 11:35:51.780829 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0522 11:35:51.781007 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0522 11:35:51.787929 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0522 11:35:51.788652 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0522 11:35:51.788867 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0522 11:35:51.788920 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0522 11:35:51.792977 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0522 11:35:51.838861 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0522 11:35:51.844842 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0522 11:35:51.847379 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0522 11:35:51.847425 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0522 11:35:51.847458 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0522 11:35:51.863664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0522 11:35:51.868544 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0522 11:35:51.870493 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0522 11:35:51.873282 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0522 11:35:51.875808 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0522 11:35:51.877980 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0522 11:35:51.879779 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0522 11:35:51.885068 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0522 11:35:51.885155 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0522 11:35:51.888059 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0522 11:35:51.888195 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0522 11:35:51.890497 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0522 11:35:51.890552 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0522 11:35:51.893204 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0522 11:35:51.895004 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0522 11:35:51.896900 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0522 11:35:51.897064 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0522 11:35:51.899002 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0522 11:35:51.900904 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0522 11:35:51.903229 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0522 11:35:51.905932 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 11:35:51.908951 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 11:35:51.909005 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 11:35:51.910763 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 11:35:51.927234 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 11:35:51.949212 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 11:35:51.966367 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 11:35:51.994854 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 11:35:52.035419 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 11:35:52.036018 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0522 11:36:05.771002 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-05-22 11:36:05.770986718 +0000 UTC m=+14.024897696 I0522 11:36:06.536460 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-05-22 11:36:06.536438217 +0000 UTC m=+14.790349225 I0522 11:36:06.536513 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:36:06.536597 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-22 11:36:06.536586601 +0000 UTC m=+14.790497579 E0522 11:36:06.689166 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0522 11:36:06.689267 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-05-22 11:36:06.68925618 +0000 UTC m=+14.943167158 E0522 11:36:06.689301 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0522 11:36:06.693370 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:36:06.693556 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:36:06.693611 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-05-22 11:36:06.69360179 +0000 UTC m=+14.947512778 E0522 11:36:06.887299 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0522 11:36:06.887574 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0522 11:36:06.887655 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0522 11:36:06.887725 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0522 11:36:07.137817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b7dq4" condition "Approved" to 2026-05-22 11:36:07.13780119 +0000 UTC m=+15.391712168 I0522 11:36:07.197608 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-b7dq4" condition "Ready" to 2026-05-22 11:36:07.197593141 +0000 UTC m=+15.451504129 I0522 11:36:07.220669 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:36:07.220660183 +0000 UTC m=+15.474571141 I0522 11:36:07.238147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:36:07.238580 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:36:07.238572917 +0000 UTC m=+15.492483885 I0522 11:36:07.245005 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:36:07.259718 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:36:11.888687 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:36:11.888674275 +0000 UTC m=+20.142585253 I0522 11:36:59.058985 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-22 11:36:59.058933667 +0000 UTC m=+67.312844655 I0522 11:36:59.059479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:36:59.059773 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-05-22 11:36:59.059760498 +0000 UTC m=+67.313671476 I0522 11:36:59.080677 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-05-22 11:36:59.080662295 +0000 UTC m=+67.334573253 I0522 11:36:59.094990 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:36:59.095118 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-05-22 11:36:59.095076389 +0000 UTC m=+67.348987377 I0522 11:36:59.357035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:36:59.403268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-98cwd" condition "Approved" to 2026-05-22 11:36:59.40325674 +0000 UTC m=+67.657167688 I0522 11:36:59.467915 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-98cwd" condition "Ready" to 2026-05-22 11:36:59.4679038 +0000 UTC m=+67.721814758 I0522 11:36:59.553706 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:36:59.553689002 +0000 UTC m=+67.807599980 I0522 11:36:59.589716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:39:17.006423 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-22 11:39:17.006032267 +0000 UTC m=+205.259943245 I0522 11:39:17.006546 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:39:17.006761 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-05-22 11:39:17.006746576 +0000 UTC m=+205.260657584 E0522 11:39:17.121791 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0522 11:39:17.122117 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-05-22 11:39:17.122071414 +0000 UTC m=+205.375982392 I0522 11:39:17.122168 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0522 11:39:17.125887 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:39:17.126116 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-05-22 11:39:17.126099335 +0000 UTC m=+205.380010373 E0522 11:39:17.146952 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0522 11:39:17.147089 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0522 11:39:17.147129 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0522 11:39:17.147175 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0522 11:39:17.151834 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-05-22 11:39:17.151817941 +0000 UTC m=+205.405728929 I0522 11:39:17.151856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:39:17.151901 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-22 11:39:17.151891193 +0000 UTC m=+205.405802171 I0522 11:39:17.342012 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:39:17.342137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:39:17.342167 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-05-22 11:39:17.342158295 +0000 UTC m=+205.596069263 I0522 11:39:17.544858 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:39:17.936191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-g4nvm" condition "Approved" to 2026-05-22 11:39:17.936156014 +0000 UTC m=+206.190066992 I0522 11:39:17.986458 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-g4nvm" condition "Ready" to 2026-05-22 11:39:17.986442468 +0000 UTC m=+206.240353426 I0522 11:39:18.016335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-4jx67" condition "Approved" to 2026-05-22 11:39:18.01632068 +0000 UTC m=+206.270231638 I0522 11:39:18.046942 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-4jx67" condition "Ready" to 2026-05-22 11:39:18.046923379 +0000 UTC m=+206.300834357 I0522 11:39:18.051287 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:39:18.051268348 +0000 UTC m=+206.305179306 I0522 11:39:18.072433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:39:22.148471 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:39:22.148456495 +0000 UTC m=+210.402367473 I0522 11:39:22.163065 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-4jx67" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:39:22.163053832 +0000 UTC m=+210.416964790 I0522 11:39:22.199430 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:39:22.199416655 +0000 UTC m=+210.453327613 I0522 11:39:22.217855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:39:22.218312 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:39:22.218303251 +0000 UTC m=+210.472214209 I0522 11:39:22.221059 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:39:22.237034 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:39:22.237788 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:39:22.23777299 +0000 UTC m=+210.491683978 I0522 11:39:22.241412 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:41:59.190451 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready" to 2026-05-22 11:41:59.190398055 +0000 UTC m=+367.444309013 I0522 11:41:59.190521 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:41:59.190846 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Issuing" to 2026-05-22 11:41:59.190831976 +0000 UTC m=+367.444742954 I0522 11:41:59.209174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:41:59.209449 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-89.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:41:59.209485 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Issuing" to 2026-05-22 11:41:59.209473329 +0000 UTC m=+367.463384317 I0522 11:41:59.370132 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:41:59.380226 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-89.nip.io-tls-cjd26" condition "Approved" to 2026-05-22 11:41:59.380208036 +0000 UTC m=+367.634118994 I0522 11:41:59.402077 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-89.nip.io-tls-cjd26" condition "Ready" to 2026-05-22 11:41:59.402064 +0000 UTC m=+367.655974958 I0522 11:41:59.431692 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:41:59.431674451 +0000 UTC m=+367.685585429 I0522 11:41:59.453469 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:41:59.453985 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:41:59.453976456 +0000 UTC m=+367.707887434 I0522 11:41:59.475166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:41:59.477022 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:41:59.477226 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-89.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:41:59.477218155 +0000 UTC m=+367.731129103 I0522 11:41:59.477557 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-89.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-89.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:10.794017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:43:10.794069 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-22 11:43:10.794060033 +0000 UTC m=+439.047970991 I0522 11:43:10.794494 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-05-22 11:43:10.793894739 +0000 UTC m=+439.047805727 E0522 11:43:10.808049 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0522 11:43:10.808089 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-05-22 11:43:10.8080814 +0000 UTC m=+439.061992348 E0522 11:43:10.808254 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0522 11:43:10.808367 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:10.808463 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:43:10.808484 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-05-22 11:43:10.80847958 +0000 UTC m=+439.062390538 E0522 11:43:10.815348 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0522 11:43:10.815388 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0522 11:43:10.815407 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0522 11:43:10.815533 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0522 11:43:10.842837 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:10.847553 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gx5l8" condition "Approved" to 2026-05-22 11:43:10.847531975 +0000 UTC m=+439.101442943 I0522 11:43:10.863469 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-gx5l8" condition "Ready" to 2026-05-22 11:43:10.863458261 +0000 UTC m=+439.117369219 I0522 11:43:10.892642 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:43:10.892626723 +0000 UTC m=+439.146537701 I0522 11:43:10.907261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:10.943749 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:15.816891 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:43:15.816874902 +0000 UTC m=+444.070785890 I0522 11:43:55.291333 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-05-22 11:43:55.29131797 +0000 UTC m=+483.545228928 I0522 11:43:55.291434 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:43:55.291462 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-22 11:43:55.291456773 +0000 UTC m=+483.545367721 I0522 11:43:55.291610 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:43:55.291622 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-05-22 11:43:55.291619647 +0000 UTC m=+483.545530585 I0522 11:43:55.291657 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-22 11:43:55.291645028 +0000 UTC m=+483.545555986 I0522 11:43:55.305078 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-22 11:43:55.30506574 +0000 UTC m=+483.558976688 I0522 11:43:55.304119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:43:55.305190 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-05-22 11:43:55.305181793 +0000 UTC m=+483.559092761 I0522 11:43:55.313380 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:55.313515 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-05-22 11:43:55.313504895 +0000 UTC m=+483.567415863 I0522 11:43:55.331614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:55.331684 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:43:55.331706 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-05-22 11:43:55.331701467 +0000 UTC m=+483.585612415 I0522 11:43:55.383392 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:55.383507 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-05-22 11:43:55.383496497 +0000 UTC m=+483.637407455 I0522 11:43:55.540727 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m7pgr" condition "Approved" to 2026-05-22 11:43:55.540711571 +0000 UTC m=+483.794622529 I0522 11:43:55.570098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-m7pgr" condition "Ready" to 2026-05-22 11:43:55.570086259 +0000 UTC m=+483.823997227 I0522 11:43:55.618253 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:55.627376 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:43:55.627363538 +0000 UTC m=+483.881274486 I0522 11:43:55.639764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:55.640100 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:43:55.640092702 +0000 UTC m=+483.894003650 I0522 11:43:55.647425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:55.662018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:55.817011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:55.890195 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8dcsk" condition "Approved" to 2026-05-22 11:43:55.890179782 +0000 UTC m=+484.144090750 I0522 11:43:55.915573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-8dcsk" condition "Ready" to 2026-05-22 11:43:55.915561268 +0000 UTC m=+484.169472226 I0522 11:43:56.237780 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xscm8" condition "Approved" to 2026-05-22 11:43:56.237766525 +0000 UTC m=+484.491677473 I0522 11:43:56.446443 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-xscm8" condition "Ready" to 2026-05-22 11:43:56.446431158 +0000 UTC m=+484.700342106 E0522 11:43:56.776063 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-qj5g6\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0522 11:43:56.777036 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" resource_name="grafana-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="grafana-tls-8dcsk" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="grafana-tls-z7qf8" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0522 11:43:57.090982 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" resource_name="alertmanager-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="alertmanager-tls-xscm8" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="alertmanager-tls-t8dq6" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0522 11:43:57.138754 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bj7j7" condition "Approved" to 2026-05-22 11:43:57.13873883 +0000 UTC m=+485.392649788 I0522 11:43:57.649607 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bj7j7" condition "Ready" to 2026-05-22 11:43:57.649584491 +0000 UTC m=+485.903495469 I0522 11:43:57.686539 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9nkzk" condition "Approved" to 2026-05-22 11:43:57.686514452 +0000 UTC m=+485.940425410 E0522 11:43:57.734614 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"alertmanager-tls-t8dq6\" already exists" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" I0522 11:43:58.262237 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-9nkzk" condition "Ready" to 2026-05-22 11:43:58.262226544 +0000 UTC m=+486.516137502 I0522 11:43:58.271946 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:43:58.271935902 +0000 UTC m=+486.525846860 I0522 11:43:58.482004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:58.482779 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:43:58.482767361 +0000 UTC m=+486.736678349 I0522 11:43:58.587612 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:43:58.587597121 +0000 UTC m=+486.841508099 I0522 11:43:58.879614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:58.879906 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:43:58.879900586 +0000 UTC m=+487.133811534 I0522 11:43:58.881521 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:43:59.134136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:44:07.416729 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:44:07.416775 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls" condition "Issuing" to 2026-05-22 11:44:07.416764537 +0000 UTC m=+495.670675525 I0522 11:44:07.416998 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls" condition "Ready" to 2026-05-22 11:44:07.416974292 +0000 UTC m=+495.670885270 I0522 11:44:07.440287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:44:07.440365 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls" condition "Ready" to 2026-05-22 11:44:07.440352308 +0000 UTC m=+495.694263266 I0522 11:44:07.532829 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:44:07.603892 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tdj6t-bb6v7" condition "Approved" to 2026-05-22 11:44:07.603876372 +0000 UTC m=+495.857787320 I0522 11:44:07.624247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-tdj6t-bb6v7" condition "Ready" to 2026-05-22 11:44:07.624233311 +0000 UTC m=+495.878144269 I0522 11:44:07.656123 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:44:07.656110113 +0000 UTC m=+495.910021101 I0522 11:44:07.674590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:44:07.727869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-tdj6t-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:44:48.956047 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-22 11:44:48.95600281 +0000 UTC m=+537.209913768 I0522 11:44:48.956086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:44:48.956262 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-05-22 11:44:48.956245097 +0000 UTC m=+537.210156055 I0522 11:44:48.975848 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:44:48.975950 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-05-22 11:44:48.975940949 +0000 UTC m=+537.229851907 I0522 11:44:49.275072 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:44:49.308784 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5b4bv" condition "Approved" to 2026-05-22 11:44:49.308764785 +0000 UTC m=+537.562675773 I0522 11:44:49.333298 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-5b4bv" condition "Ready" to 2026-05-22 11:44:49.33327948 +0000 UTC m=+537.587190448 I0522 11:44:49.369880 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:44:49.369866861 +0000 UTC m=+537.623777809 I0522 11:44:49.394320 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:44:49.394796 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:44:49.394786386 +0000 UTC m=+537.648697344 I0522 11:44:49.410062 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:44:49.410501 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:44:49.410490936 +0000 UTC m=+537.664401894 I0522 11:48:13.847076 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-05-22 11:48:13.847027324 +0000 UTC m=+742.100938312 I0522 11:48:13.847599 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:48:13.847713 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-22 11:48:13.847700771 +0000 UTC m=+742.101611749 I0522 11:48:13.862644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:48:13.862730 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:48:13.862800 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-05-22 11:48:13.862750005 +0000 UTC m=+742.116660963 I0522 11:48:14.090149 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fntxs" condition "Approved" to 2026-05-22 11:48:14.090134315 +0000 UTC m=+742.344045263 I0522 11:48:14.109585 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-fntxs" condition "Ready" to 2026-05-22 11:48:14.109572161 +0000 UTC m=+742.363483119 I0522 11:48:14.139849 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:48:14.139835643 +0000 UTC m=+742.393746601 I0522 11:48:14.167613 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:48:14.167932 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:48:14.16792563 +0000 UTC m=+742.421836578 I0522 11:48:14.177597 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:48:14.192594 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:48:14.194171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:48:14.194557 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:48:14.194547239 +0000 UTC m=+742.448458197 I0522 11:50:45.605499 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:50:45.605580 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-22 11:50:45.605569764 +0000 UTC m=+893.859480752 I0522 11:50:45.606299 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-05-22 11:50:45.606279663 +0000 UTC m=+893.860190631 I0522 11:50:45.779586 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:50:45.779771 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:50:45.779826 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-05-22 11:50:45.779815508 +0000 UTC m=+894.033726486 I0522 11:50:46.111833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8kr49" condition "Approved" to 2026-05-22 11:50:46.111809491 +0000 UTC m=+894.365720479 I0522 11:50:46.136472 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-8kr49" condition "Ready" to 2026-05-22 11:50:46.13642125 +0000 UTC m=+894.390332208 I0522 11:50:46.175852 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:50:46.175836217 +0000 UTC m=+894.429747205 I0522 11:50:46.200410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:50:46.200764 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:50:46.200754894 +0000 UTC m=+894.454665852 I0522 11:50:46.224321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:52:09.142818 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-05-22 11:52:09.142796417 +0000 UTC m=+977.396707375 I0522 11:52:09.143678 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:52:09.143729 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-22 11:52:09.143722292 +0000 UTC m=+977.397633240 I0522 11:52:09.161700 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:52:09.161802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:52:09.161827 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-05-22 11:52:09.161819205 +0000 UTC m=+977.415730163 I0522 11:52:09.582446 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-sjz4w" condition "Approved" to 2026-05-22 11:52:09.582435373 +0000 UTC m=+977.836346321 I0522 11:52:09.607108 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-sjz4w" condition "Ready" to 2026-05-22 11:52:09.607093424 +0000 UTC m=+977.861004402 I0522 11:52:09.640245 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:52:09.640223652 +0000 UTC m=+977.894134610 I0522 11:52:09.668892 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:55:21.923798 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-22 11:55:21.923783869 +0000 UTC m=+1170.177694827 I0522 11:55:21.924022 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 11:55:21.924091 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-05-22 11:55:21.924082537 +0000 UTC m=+1170.177993495 I0522 11:55:21.939572 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:55:21.939676 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-05-22 11:55:21.939665827 +0000 UTC m=+1170.193576775 I0522 11:55:22.265517 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:55:22.304142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-6jsj7" condition "Approved" to 2026-05-22 11:55:22.304122218 +0000 UTC m=+1170.558033206 I0522 11:55:22.323406 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-6jsj7" condition "Ready" to 2026-05-22 11:55:22.323392341 +0000 UTC m=+1170.577303309 I0522 11:55:22.353513 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:55:22.353500721 +0000 UTC m=+1170.607411679 I0522 11:55:22.374091 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 11:55:22.374539 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 11:55:22.37453239 +0000 UTC m=+1170.628443348 I0522 11:55:22.394139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:03:23.239059 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 12:03:23.239178 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-05-22 12:03:23.23917242 +0000 UTC m=+1651.493083378 I0522 12:03:23.239063 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-22 12:03:23.239053936 +0000 UTC m=+1651.492964894 I0522 12:03:23.259890 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:03:23.259991 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-05-22 12:03:23.259983513 +0000 UTC m=+1651.513894501 I0522 12:03:23.389183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:03:23.423757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-pqcsc" condition "Approved" to 2026-05-22 12:03:23.42374298 +0000 UTC m=+1651.677653978 I0522 12:03:23.443124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-pqcsc" condition "Ready" to 2026-05-22 12:03:23.443114837 +0000 UTC m=+1651.697025785 I0522 12:03:23.472044 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:03:23.472030929 +0000 UTC m=+1651.725941907 I0522 12:03:23.498644 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:03:23.499004 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:03:23.498997199 +0000 UTC m=+1651.752908147 I0522 12:03:23.507671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:03:23.519186 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:05:01.405248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 12:05:01.405357 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-05-22 12:05:01.405344955 +0000 UTC m=+1749.659255943 I0522 12:05:01.406433 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-22 12:05:01.406422312 +0000 UTC m=+1749.660333300 I0522 12:05:01.424497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:05:01.424569 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-05-22 12:05:01.424564176 +0000 UTC m=+1749.678475134 I0522 12:05:01.545048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:05:01.582276 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-vzf7b" condition "Approved" to 2026-05-22 12:05:01.582256388 +0000 UTC m=+1749.836167356 I0522 12:05:01.600814 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-vzf7b" condition "Ready" to 2026-05-22 12:05:01.600801963 +0000 UTC m=+1749.854712911 I0522 12:05:01.630499 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:05:01.630487874 +0000 UTC m=+1749.884398832 I0522 12:05:01.656484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:05:01.714542 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:06:07.565460 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 12:06:07.565510 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-22 12:06:07.56550014 +0000 UTC m=+1815.819411128 I0522 12:06:07.565528 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-05-22 12:06:07.56550779 +0000 UTC m=+1815.819418768 I0522 12:06:07.587120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:06:07.587197 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 12:06:07.587238 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-05-22 12:06:07.587228956 +0000 UTC m=+1815.841139934 I0522 12:06:07.638574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:06:07.644194 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-p5fxq" condition "Approved" to 2026-05-22 12:06:07.644178526 +0000 UTC m=+1815.898089484 I0522 12:06:07.663204 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-p5fxq" condition "Ready" to 2026-05-22 12:06:07.663188502 +0000 UTC m=+1815.917099460 I0522 12:06:07.695802 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:06:07.695784888 +0000 UTC m=+1815.949695846 I0522 12:06:07.720476 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:06:07.720782 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:06:07.720773428 +0000 UTC m=+1815.974684386 I0522 12:06:07.738224 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:06:08.226227 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 12:06:08.226332 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-05-22 12:06:08.226316722 +0000 UTC m=+1816.480227700 I0522 12:06:08.227057 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-22 12:06:08.227047262 +0000 UTC m=+1816.480958250 I0522 12:06:08.247694 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:06:08.247829 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-05-22 12:06:08.247815513 +0000 UTC m=+1816.501726501 I0522 12:06:08.266076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:06:08.302026 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-56fwv" condition "Approved" to 2026-05-22 12:06:08.302000031 +0000 UTC m=+1816.555910989 I0522 12:06:08.319107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-56fwv" condition "Ready" to 2026-05-22 12:06:08.31909069 +0000 UTC m=+1816.573001668 I0522 12:06:08.346210 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:06:08.346190054 +0000 UTC m=+1816.600101012 I0522 12:06:08.369052 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:06:08.421966 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:06:08.943125 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-05-22 12:06:08.94311512 +0000 UTC m=+1817.197026068 I0522 12:06:09.559520 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-05-22 12:06:09.559505684 +0000 UTC m=+1817.813416662 I0522 12:06:55.691593 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-22 12:06:55.691565972 +0000 UTC m=+1863.945476930 I0522 12:06:55.692129 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 12:06:55.692201 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-05-22 12:06:55.692187797 +0000 UTC m=+1863.946098775 I0522 12:06:55.739625 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:06:55.742840 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-05-22 12:06:55.742827155 +0000 UTC m=+1863.996738113 I0522 12:06:56.944074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:06:56.989851 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-pk2bk" condition "Approved" to 2026-05-22 12:06:56.989835788 +0000 UTC m=+1865.243746746 I0522 12:06:57.020413 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-pk2bk" condition "Ready" to 2026-05-22 12:06:57.020404402 +0000 UTC m=+1865.274315340 I0522 12:06:57.061179 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:06:57.061163347 +0000 UTC m=+1865.315074305 I0522 12:06:57.080823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:09:40.709425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 12:09:40.709427 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-05-22 12:09:40.70937546 +0000 UTC m=+2028.963286448 I0522 12:09:40.709486 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-22 12:09:40.709481593 +0000 UTC m=+2028.963392551 I0522 12:09:40.730707 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:09:40.730803 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 12:09:40.730826 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-05-22 12:09:40.730817879 +0000 UTC m=+2028.984728867 I0522 12:09:41.014952 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:09:41.022971 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-8vrhh" condition "Approved" to 2026-05-22 12:09:41.022954725 +0000 UTC m=+2029.276865673 I0522 12:09:41.042494 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-8vrhh" condition "Ready" to 2026-05-22 12:09:41.042482575 +0000 UTC m=+2029.296393533 I0522 12:09:41.073361 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:09:41.073337226 +0000 UTC m=+2029.327248214 I0522 12:09:41.096098 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:09:41.096514 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:09:41.096504859 +0000 UTC m=+2029.350415847 I0522 12:09:41.107856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:09:41.116599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:09:42.343260 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 12:09:42.343344 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-05-22 12:09:42.343299674 +0000 UTC m=+2030.597210632 I0522 12:09:42.343569 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-22 12:09:42.34354834 +0000 UTC m=+2030.597459318 I0522 12:09:42.361745 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:09:42.361812 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-05-22 12:09:42.361806698 +0000 UTC m=+2030.615717656 I0522 12:09:42.595023 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:09:42.625864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-j8lnm" condition "Approved" to 2026-05-22 12:09:42.625851734 +0000 UTC m=+2030.879762692 I0522 12:09:42.650512 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-j8lnm" condition "Ready" to 2026-05-22 12:09:42.650492545 +0000 UTC m=+2030.904403503 I0522 12:09:42.683778 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:09:42.683758318 +0000 UTC m=+2030.937669266 I0522 12:09:42.707266 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:09:42.707791 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:09:42.707777432 +0000 UTC m=+2030.961688390 I0522 12:09:42.747515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:13:04.662424 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0522 12:13:04.662445 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-22 12:13:04.662432489 +0000 UTC m=+2232.916343447 I0522 12:13:04.662503 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-05-22 12:13:04.662494341 +0000 UTC m=+2232.916405309 I0522 12:13:04.681874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:13:04.681969 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-05-22 12:13:04.681959879 +0000 UTC m=+2232.935870847 I0522 12:13:04.981674 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:13:05.019100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-6slws" condition "Approved" to 2026-05-22 12:13:05.019085152 +0000 UTC m=+2233.272996120 I0522 12:13:05.039643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-6slws" condition "Ready" to 2026-05-22 12:13:05.039629168 +0000 UTC m=+2233.293540156 I0522 12:13:05.072367 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:13:05.072354076 +0000 UTC m=+2233.326265064 I0522 12:13:05.092743 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:13:05.093276 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-05-22 12:13:05.093266911 +0000 UTC m=+2233.347177889 I0522 12:13:05.099795 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0522 12:13:05.112341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"