I0903 16:23:42.209586 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0903 16:23:42.209855 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0903 16:23:42.215213 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0903 16:23:42.215247 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0903 16:23:42.215267 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0903 16:23:42.215983 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0903 16:23:42.216082 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0903 16:23:42.216082 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0903 16:23:42.223354 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0903 16:23:42.241106 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0903 16:23:42.245995 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0903 16:23:42.251580 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0903 16:23:42.251626 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0903 16:23:42.251639 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0903 16:23:42.251684 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0903 16:23:42.258215 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0903 16:23:42.261298 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0903 16:23:42.264064 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0903 16:23:42.264091 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0903 16:23:42.264178 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0903 16:23:42.266886 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0903 16:23:42.269580 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0903 16:23:42.272224 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0903 16:23:42.276574 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0903 16:23:42.281053 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0903 16:23:42.285069 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0903 16:23:42.285114 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0903 16:23:42.287908 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0903 16:23:42.289997 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0903 16:23:42.292198 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0903 16:23:42.294076 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0903 16:23:42.296798 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0903 16:23:42.300365 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0903 16:23:42.302553 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0903 16:23:42.305616 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:23:42.306211 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:23:42.306371 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:23:42.306994 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:23:42.307251 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:23:42.331617 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:23:42.356110 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:23:42.376596 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:23:42.406084 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:23:42.420023 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:23:42.441320 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0903 16:23:59.856714 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-03 16:23:59.85667749 +0000 UTC m=+17.682428899 I0903 16:24:00.639551 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:24:00.639639 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-03 16:24:00.639627259 +0000 UTC m=+18.465378698 I0903 16:24:00.640481 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-03 16:24:00.640469166 +0000 UTC m=+18.466220535 E0903 16:24:00.655853 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0903 16:24:00.655941 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-03 16:24:00.655932651 +0000 UTC m=+18.481684050 E0903 16:24:00.655970 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0903 16:24:00.655949 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:24:00.656105 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-03 16:24:00.656060053 +0000 UTC m=+18.481811432 E0903 16:24:00.670000 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0903 16:24:00.670424 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 16:24:00.670458 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 16:24:00.670493 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0903 16:24:00.678393 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:24:00.711788 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-03 16:24:00.711774877 +0000 UTC m=+18.537526276 I0903 16:24:00.743612 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-03 16:24:00.743593823 +0000 UTC m=+18.569345232 I0903 16:24:00.774989 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:24:00.774978651 +0000 UTC m=+18.600730020 I0903 16:24:00.790416 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:24:00.790916 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:24:00.790904605 +0000 UTC m=+18.616656014 I0903 16:24:00.832057 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:24:00.848702 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:24:05.670801 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:24:05.670787504 +0000 UTC m=+23.496538913 I0903 16:24:28.134950 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:24:28.135077 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-03 16:24:28.135064245 +0000 UTC m=+45.960815644 I0903 16:24:28.135219 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-03 16:24:28.135191008 +0000 UTC m=+45.960942407 I0903 16:24:28.146594 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-03 16:24:28.146571164 +0000 UTC m=+45.972322573 I0903 16:24:28.158991 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:24:28.162611 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:24:28.162708 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-03 16:24:28.162697412 +0000 UTC m=+45.988448811 I0903 16:24:28.376273 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:24:28.392453 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-03 16:24:28.392429764 +0000 UTC m=+46.218181163 I0903 16:24:28.424581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-03 16:24:28.424564617 +0000 UTC m=+46.250316006 I0903 16:24:28.455728 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:24:28.45570496 +0000 UTC m=+46.281456359 I0903 16:24:28.479452 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:24:28.480268 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:24:28.480241839 +0000 UTC m=+46.305993238 I0903 16:24:28.499753 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:26:12.088151 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-03 16:26:12.088131351 +0000 UTC m=+149.913882750 I0903 16:26:12.088708 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:26:12.088841 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-03 16:26:12.088822186 +0000 UTC m=+149.914573635 E0903 16:26:12.100564 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0903 16:26:12.100675 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-03 16:26:12.10066016 +0000 UTC m=+149.926411559 I0903 16:26:12.100718 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0903 16:26:12.105129 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:26:12.105280 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:26:12.105321 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-03 16:26:12.105312729 +0000 UTC m=+149.931064128 E0903 16:26:12.110583 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" E0903 16:26:12.110729 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0903 16:26:12.110771 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0903 16:26:12.110818 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" I0903 16:26:12.114507 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:26:12.114567 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-03 16:26:12.114552657 +0000 UTC m=+149.940304066 I0903 16:26:12.114574 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-03 16:26:12.114558647 +0000 UTC m=+149.940310056 I0903 16:26:12.129576 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:26:12.129702 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:26:12.129756 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-03 16:26:12.129738701 +0000 UTC m=+149.955490100 I0903 16:26:12.330224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-09-03 16:26:12.33020256 +0000 UTC m=+150.155953989 I0903 16:26:12.353240 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:26:12.357848 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-09-03 16:26:12.35783464 +0000 UTC m=+150.183586019 I0903 16:26:12.367039 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-09-03 16:26:12.366999187 +0000 UTC m=+150.192750566 I0903 16:26:12.387477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-09-03 16:26:12.387465125 +0000 UTC m=+150.213216504 I0903 16:26:12.392471 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:26:12.392450022 +0000 UTC m=+150.218201421 I0903 16:26:12.413667 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:26:12.414669 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:26:12.414655707 +0000 UTC m=+150.240407116 I0903 16:26:12.430095 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:26:12.430664 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:26:12.430654358 +0000 UTC m=+150.256405737 I0903 16:26:12.434056 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:26:17.111576 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:26:17.111562621 +0000 UTC m=+154.937314030 I0903 16:26:17.127516 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:26:17.127495752 +0000 UTC m=+154.953247131 I0903 16:26:17.157943 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:26:17.157931603 +0000 UTC m=+154.983682982 I0903 16:26:17.178933 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:26:17.230103 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:29:43.138302 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-85.nip.io-tls" condition "Ready" to 2026-09-03 16:29:43.13828565 +0000 UTC m=+360.964037049 I0903 16:29:43.138390 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-85.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:29:43.138454 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-85.nip.io-tls" condition "Issuing" to 2026-09-03 16:29:43.138442983 +0000 UTC m=+360.964194382 I0903 16:29:43.159909 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:29:43.160038 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-85.nip.io-tls" condition "Ready" to 2026-09-03 16:29:43.159990718 +0000 UTC m=+360.985742117 I0903 16:29:43.283966 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:29:43.326033 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-85.nip.io-tls-1" condition "Approved" to 2026-09-03 16:29:43.325982783 +0000 UTC m=+361.151734182 I0903 16:29:43.346286 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-85.nip.io-tls-1" condition "Ready" to 2026-09-03 16:29:43.34627149 +0000 UTC m=+361.172022889 I0903 16:29:43.376260 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-85.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:29:43.376244095 +0000 UTC m=+361.201995504 I0903 16:29:43.393790 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:29:43.394748 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-85.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:29:43.394736224 +0000 UTC m=+361.220487623 I0903 16:29:43.414814 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-85.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-85.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:29:43.415762 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-85.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:29:43.415749216 +0000 UTC m=+361.241500615 I0903 16:30:58.388320 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:30:58.388377 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-03 16:30:58.388358229 +0000 UTC m=+436.214109628 I0903 16:30:58.388387 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-03 16:30:58.388377349 +0000 UTC m=+436.214128758 E0903 16:30:58.402768 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0903 16:30:58.402871 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-03 16:30:58.4028611 +0000 UTC m=+436.228612499 E0903 16:30:58.402899 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0903 16:30:58.405129 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:30:58.405239 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:30:58.405270 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-03 16:30:58.405261472 +0000 UTC m=+436.231012841 E0903 16:30:58.415853 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0903 16:30:58.416034 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 16:30:58.416077 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0903 16:30:58.416125 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0903 16:30:58.445213 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:30:58.451324 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-03 16:30:58.451307771 +0000 UTC m=+436.277059170 I0903 16:30:58.468253 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-03 16:30:58.468240054 +0000 UTC m=+436.293991423 I0903 16:30:58.497759 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:30:58.497741087 +0000 UTC m=+436.323492486 I0903 16:30:58.511217 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:30:58.511873 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:30:58.5118619 +0000 UTC m=+436.337613299 I0903 16:30:58.532518 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:03.416837 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:31:03.416822979 +0000 UTC m=+441.242574378 I0903 16:31:46.205734 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:31:46.205779 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-03 16:31:46.205769213 +0000 UTC m=+484.031520592 I0903 16:31:46.206108 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-03 16:31:46.206089541 +0000 UTC m=+484.031840950 I0903 16:31:46.206144 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-03 16:31:46.206138962 +0000 UTC m=+484.031890341 I0903 16:31:46.206360 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:31:46.206356 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-03 16:31:46.206329176 +0000 UTC m=+484.032080585 I0903 16:31:46.211594 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-03 16:31:46.211562978 +0000 UTC m=+484.037314437 I0903 16:31:46.214484 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:31:46.216533 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-03 16:31:46.216519064 +0000 UTC m=+484.042270443 I0903 16:31:46.232841 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:46.232927 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-03 16:31:46.232917607 +0000 UTC m=+484.058668986 I0903 16:31:46.236046 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:46.236264 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:46.236761 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:31:46.236829 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-03 16:31:46.236817901 +0000 UTC m=+484.062569290 I0903 16:31:46.237032 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:31:46.237066 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-03 16:31:46.237059336 +0000 UTC m=+484.062810715 I0903 16:31:46.463099 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:46.510621 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-03 16:31:46.510606149 +0000 UTC m=+484.336357548 I0903 16:31:46.511812 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-03 16:31:46.511801865 +0000 UTC m=+484.337553274 I0903 16:31:46.527546 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-03 16:31:46.527537142 +0000 UTC m=+484.353288511 I0903 16:31:46.531712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-03 16:31:46.531706372 +0000 UTC m=+484.357457741 I0903 16:31:46.561915 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:31:46.56190006 +0000 UTC m=+484.387651429 I0903 16:31:46.562335 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:31:46.562324419 +0000 UTC m=+484.388075788 I0903 16:31:46.569724 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:46.587939 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-03 16:31:46.587927199 +0000 UTC m=+484.413678578 I0903 16:31:46.588043 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:46.588927 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:31:46.58892092 +0000 UTC m=+484.414672289 I0903 16:31:46.594960 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:46.758295 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-03 16:31:46.758277527 +0000 UTC m=+484.584028936 I0903 16:31:47.252665 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:47.396412 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:47.602579 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:31:47.602538262 +0000 UTC m=+485.428289661 I0903 16:31:47.795894 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:47.796785 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:31:47.796753282 +0000 UTC m=+485.622504691 I0903 16:31:48.045739 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:48.096359 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:55.979683 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mm28r-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:31:55.979716 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mm28r-tls" condition "Issuing" to 2026-09-03 16:31:55.979709239 +0000 UTC m=+493.805460608 I0903 16:31:55.980025 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mm28r-tls" condition "Ready" to 2026-09-03 16:31:55.979995756 +0000 UTC m=+493.805747125 I0903 16:31:55.991112 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mm28r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mm28r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:55.991191 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-mm28r-tls" condition "Ready" to 2026-09-03 16:31:55.991183196 +0000 UTC m=+493.816934565 I0903 16:31:56.104005 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mm28r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mm28r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:56.127924 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mm28r-tls-1" condition "Approved" to 2026-09-03 16:31:56.127913771 +0000 UTC m=+493.953665140 I0903 16:31:56.145891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-mm28r-tls-1" condition "Ready" to 2026-09-03 16:31:56.145882717 +0000 UTC m=+493.971634086 I0903 16:31:56.180705 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mm28r-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:31:56.180694044 +0000 UTC m=+494.006445413 I0903 16:31:56.192672 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mm28r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mm28r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:31:56.193264 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-mm28r-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:31:56.193256094 +0000 UTC m=+494.019007463 I0903 16:31:56.210852 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-mm28r-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-mm28r-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:32:24.843707 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-03 16:32:24.843689546 +0000 UTC m=+522.669440955 I0903 16:32:24.844332 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:32:24.844375 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-03 16:32:24.84436648 +0000 UTC m=+522.670117879 I0903 16:32:24.855408 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:32:24.855495 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-03 16:32:24.855486489 +0000 UTC m=+522.681237858 I0903 16:32:25.002308 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:32:25.025840 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-03 16:32:25.025817426 +0000 UTC m=+522.851568825 I0903 16:32:25.046107 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-03 16:32:25.046097482 +0000 UTC m=+522.871848851 I0903 16:32:25.070501 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:32:25.070483285 +0000 UTC m=+522.896234684 I0903 16:32:25.086292 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:35:56.960329 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-03 16:35:56.960309722 +0000 UTC m=+734.786061121 I0903 16:35:56.960401 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:35:56.960476 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-03 16:35:56.960467675 +0000 UTC m=+734.786219084 I0903 16:35:56.974669 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:35:56.974895 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-03 16:35:56.974881902 +0000 UTC m=+734.800633291 I0903 16:35:57.262332 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:35:57.311821 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-03 16:35:57.311805517 +0000 UTC m=+735.137556886 I0903 16:35:57.335133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-03 16:35:57.335118063 +0000 UTC m=+735.160869442 I0903 16:35:57.376861 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:35:57.376842261 +0000 UTC m=+735.202593640 I0903 16:35:57.400011 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:38:37.342333 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:38:37.342388 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-03 16:38:37.342380676 +0000 UTC m=+895.168132035 I0903 16:38:37.342606 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-03 16:38:37.34258553 +0000 UTC m=+895.168336939 I0903 16:38:37.364394 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:38:37.364590 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:38:37.364640 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-03 16:38:37.364626494 +0000 UTC m=+895.190377903 I0903 16:38:37.597906 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:38:37.618994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Approved" to 2026-09-03 16:38:37.618983538 +0000 UTC m=+895.444734917 I0903 16:38:37.637739 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Ready" to 2026-09-03 16:38:37.637726501 +0000 UTC m=+895.463477890 I0903 16:38:37.661079 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:38:37.661062022 +0000 UTC m=+895.486813401 I0903 16:38:37.683524 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:39:57.229951 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:39:57.230019 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-03 16:39:57.23001025 +0000 UTC m=+975.055761659 I0903 16:39:57.230173 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-03 16:39:57.230167314 +0000 UTC m=+975.055918683 I0903 16:39:57.251527 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:39:57.251877 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-03 16:39:57.251868608 +0000 UTC m=+975.077619987 I0903 16:39:57.447944 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:39:57.486307 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Approved" to 2026-09-03 16:39:57.4862884 +0000 UTC m=+975.312039809 I0903 16:39:57.506599 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Ready" to 2026-09-03 16:39:57.506581795 +0000 UTC m=+975.332333154 I0903 16:39:57.546538 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:39:57.546517353 +0000 UTC m=+975.372268752 I0903 16:39:57.565650 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:39:57.566468 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:39:57.566456681 +0000 UTC m=+975.392208080 I0903 16:39:57.589020 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:39:57.590588 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:39:57.590579658 +0000 UTC m=+975.416331037 I0903 16:39:57.600457 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:43:12.155429 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:43:12.155520 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-03 16:43:12.155507187 +0000 UTC m=+1169.981258596 I0903 16:43:12.155592 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-03 16:43:12.155570118 +0000 UTC m=+1169.981321527 I0903 16:43:12.169007 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:43:12.169322 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:43:12.169364 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-03 16:43:12.169353863 +0000 UTC m=+1169.995105262 I0903 16:43:12.479505 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:43:12.496934 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Approved" to 2026-09-03 16:43:12.496919811 +0000 UTC m=+1170.322671220 I0903 16:43:12.517145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Ready" to 2026-09-03 16:43:12.517135002 +0000 UTC m=+1170.342886361 I0903 16:43:12.544400 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:43:12.544389625 +0000 UTC m=+1170.370141004 I0903 16:43:12.562613 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:43:12.563233 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:43:12.563226367 +0000 UTC m=+1170.388977756 I0903 16:43:12.585056 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:51:12.148689 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:51:12.148764 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-03 16:51:12.14875399 +0000 UTC m=+1649.974505399 I0903 16:51:12.148921 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-03 16:51:12.148899823 +0000 UTC m=+1649.974651252 I0903 16:51:12.165424 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:51:12.165559 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-03 16:51:12.16554604 +0000 UTC m=+1649.991297449 I0903 16:51:12.301184 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:51:12.342012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Approved" to 2026-09-03 16:51:12.341999761 +0000 UTC m=+1650.167751130 I0903 16:51:12.359354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Ready" to 2026-09-03 16:51:12.359337332 +0000 UTC m=+1650.185088731 I0903 16:51:12.390161 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:51:12.390144623 +0000 UTC m=+1650.215896022 I0903 16:51:12.404298 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:51:12.404932 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:51:12.40492434 +0000 UTC m=+1650.230675719 I0903 16:51:12.421160 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:53:01.562338 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:53:01.562383 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-03 16:53:01.562372517 +0000 UTC m=+1759.388123916 I0903 16:53:01.562645 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-03 16:53:01.562626842 +0000 UTC m=+1759.388378271 I0903 16:53:01.577068 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:53:01.577593 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:53:01.577647 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-03 16:53:01.577635654 +0000 UTC m=+1759.403387063 I0903 16:53:01.896868 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:53:01.912841 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-09-03 16:53:01.912821756 +0000 UTC m=+1759.738573155 I0903 16:53:01.933938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-09-03 16:53:01.933920349 +0000 UTC m=+1759.759671728 I0903 16:53:01.967369 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:53:01.967358295 +0000 UTC m=+1759.793109664 I0903 16:53:01.986226 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:53:02.027123 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:05.537249 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-03 16:54:05.537232163 +0000 UTC m=+1823.362983562 I0903 16:54:05.537536 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:54:05.537618 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-03 16:54:05.537607752 +0000 UTC m=+1823.363359151 I0903 16:54:05.551257 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:05.551415 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:54:05.551494 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-03 16:54:05.551480498 +0000 UTC m=+1823.377231897 I0903 16:54:05.594516 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:05.604120 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-09-03 16:54:05.604102208 +0000 UTC m=+1823.429853607 I0903 16:54:05.622258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-09-03 16:54:05.622242808 +0000 UTC m=+1823.447994217 I0903 16:54:05.649639 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:54:05.649627885 +0000 UTC m=+1823.475379264 I0903 16:54:05.669400 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:05.671114 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:54:05.671101306 +0000 UTC m=+1823.496852705 I0903 16:54:05.679161 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:05.688255 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:05.688589 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:54:05.688581391 +0000 UTC m=+1823.514332770 I0903 16:54:05.690271 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:06.211568 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-03 16:54:06.211549422 +0000 UTC m=+1824.037300821 I0903 16:54:06.212020 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:54:06.212047 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-03 16:54:06.212040982 +0000 UTC m=+1824.037792381 I0903 16:54:06.226660 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:06.226785 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:54:06.226820 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-03 16:54:06.2268107 +0000 UTC m=+1824.052562109 I0903 16:54:06.276294 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-09-03 16:54:06.276269821 +0000 UTC m=+1824.102021210 I0903 16:54:06.292205 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-09-03 16:54:06.292187652 +0000 UTC m=+1824.117939041 I0903 16:54:06.330468 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:54:06.330432613 +0000 UTC m=+1824.156183992 I0903 16:54:06.354236 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:06.958104 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-03 16:54:06.958089851 +0000 UTC m=+1824.783841260 I0903 16:54:07.593607 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-03 16:54:07.593593166 +0000 UTC m=+1825.419344565 I0903 16:54:54.070119 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-03 16:54:54.070105424 +0000 UTC m=+1871.895856803 I0903 16:54:54.070586 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:54:54.070610 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-03 16:54:54.070606595 +0000 UTC m=+1871.896357964 I0903 16:54:54.100480 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:54.100586 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-03 16:54:54.100579038 +0000 UTC m=+1871.926330407 I0903 16:54:57.953824 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:57.997448 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Approved" to 2026-09-03 16:54:57.997439242 +0000 UTC m=+1875.823190601 I0903 16:54:58.031629 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Ready" to 2026-09-03 16:54:58.031618406 +0000 UTC m=+1875.857369775 I0903 16:54:58.066449 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:54:58.066439063 +0000 UTC m=+1875.892190442 I0903 16:54:58.078281 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:58.079998 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:54:58.079989123 +0000 UTC m=+1875.905740512 I0903 16:54:58.094625 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:54:58.098933 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:57:53.322930 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-03 16:57:53.32291302 +0000 UTC m=+2051.148664429 I0903 16:57:53.323052 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:57:53.323132 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-03 16:57:53.323124255 +0000 UTC m=+2051.148875664 I0903 16:57:53.337393 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:57:53.337499 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-03 16:57:53.337491213 +0000 UTC m=+2051.163242582 I0903 16:57:53.541685 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:57:53.583370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Approved" to 2026-09-03 16:57:53.583352639 +0000 UTC m=+2051.409104038 I0903 16:57:53.602104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Ready" to 2026-09-03 16:57:53.60209228 +0000 UTC m=+2051.427843659 I0903 16:57:53.629922 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:57:53.629900957 +0000 UTC m=+2051.455652376 I0903 16:57:53.646286 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:57:53.646737 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:57:53.646730198 +0000 UTC m=+2051.472481567 I0903 16:57:53.661993 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:57:54.825937 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-03 16:57:54.82592347 +0000 UTC m=+2052.651674839 I0903 16:57:54.826273 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 16:57:54.826306 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-03 16:57:54.826303668 +0000 UTC m=+2052.652055037 I0903 16:57:54.839293 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:57:54.839362 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-03 16:57:54.839354968 +0000 UTC m=+2052.665106337 I0903 16:57:54.997187 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 16:57:55.027652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Approved" to 2026-09-03 16:57:55.027635278 +0000 UTC m=+2052.853386677 I0903 16:57:55.047128 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Ready" to 2026-09-03 16:57:55.047111776 +0000 UTC m=+2052.872863155 I0903 16:57:55.078494 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 16:57:55.078476399 +0000 UTC m=+2052.904227778 I0903 16:57:55.096611 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:30.803463 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:01:30.803539 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-03 17:01:30.80352874 +0000 UTC m=+2268.629280149 I0903 17:01:30.803907 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-03 17:01:30.803891617 +0000 UTC m=+2268.629643046 I0903 17:01:30.827969 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:30.828292 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-03 17:01:30.828279349 +0000 UTC m=+2268.654030778 I0903 17:01:30.990006 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:31.035580 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Approved" to 2026-09-03 17:01:31.035570105 +0000 UTC m=+2268.861321474 I0903 17:01:31.054471 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Ready" to 2026-09-03 17:01:31.054461049 +0000 UTC m=+2268.880212428 I0903 17:01:31.082407 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:01:31.082393897 +0000 UTC m=+2268.908145276 I0903 17:01:31.099088 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:31.099508 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:01:31.099502123 +0000 UTC m=+2268.925253492 I0903 17:01:31.112738 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:31.113043 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:34.104078 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-r52pg-api" condition "Ready" to 2026-09-03 17:01:34.10405978 +0000 UTC m=+2271.929811159 I0903 17:01:34.104221 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-r52pg-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:01:34.104291 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-r52pg-api" condition "Issuing" to 2026-09-03 17:01:34.104282465 +0000 UTC m=+2271.930033834 I0903 17:01:34.106170 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-r52pg-vnc" condition "Ready" to 2026-09-03 17:01:34.106164424 +0000 UTC m=+2271.931915803 I0903 17:01:34.106174 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-r52pg-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:01:34.106308 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-r52pg-vnc" condition "Issuing" to 2026-09-03 17:01:34.106290077 +0000 UTC m=+2271.932041456 I0903 17:01:34.125478 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-r52pg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-r52pg-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:34.125919 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-r52pg-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:01:34.125971 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-r52pg-vnc" condition "Issuing" to 2026-09-03 17:01:34.125964358 +0000 UTC m=+2271.951715737 I0903 17:01:34.131527 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-r52pg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-r52pg-api\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:34.131603 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-r52pg-api" condition "Ready" to 2026-09-03 17:01:34.131597148 +0000 UTC m=+2271.957348527 I0903 17:01:34.296462 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-r52pg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-r52pg-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:34.300814 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-r52pg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-r52pg-api\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:34.306691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-r52pg-vnc-1" condition "Approved" to 2026-09-03 17:01:34.306681755 +0000 UTC m=+2272.132433124 I0903 17:01:34.323331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-r52pg-vnc-1" condition "Ready" to 2026-09-03 17:01:34.323322961 +0000 UTC m=+2272.149074330 I0903 17:01:34.328742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-r52pg-api-1" condition "Approved" to 2026-09-03 17:01:34.328729807 +0000 UTC m=+2272.154481186 I0903 17:01:34.344966 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-r52pg-api-1" condition "Ready" to 2026-09-03 17:01:34.344955343 +0000 UTC m=+2272.170706722 I0903 17:01:34.352040 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-r52pg-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:01:34.352030775 +0000 UTC m=+2272.177782144 I0903 17:01:34.363068 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-r52pg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-r52pg-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:34.368019 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-r52pg-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:01:34.368005917 +0000 UTC m=+2272.193757286 I0903 17:01:34.380413 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-r52pg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-r52pg-api\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:34.380881 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-r52pg-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:01:34.380875702 +0000 UTC m=+2272.206627061 I0903 17:01:34.395784 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-r52pg-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-r52pg-api\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:01:34.397530 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-r52pg-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-r52pg-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:06:24.814622 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-03 17:06:24.81460678 +0000 UTC m=+2562.640358239 I0903 17:06:24.814694 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:06:24.814785 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-03 17:06:24.814774884 +0000 UTC m=+2562.640526343 I0903 17:06:24.831686 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:06:24.831940 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-03 17:06:24.8318905 +0000 UTC m=+2562.657641909 I0903 17:06:25.105592 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:06:25.158551 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Approved" to 2026-09-03 17:06:25.158537339 +0000 UTC m=+2562.984288748 I0903 17:06:25.174835 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Ready" to 2026-09-03 17:06:25.174825538 +0000 UTC m=+2563.000576917 I0903 17:06:25.205268 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:06:25.205250958 +0000 UTC m=+2563.031002367 I0903 17:06:25.224366 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:06:25.275561 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:06:26.426765 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:06:26.426813 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-03 17:06:26.426793785 +0000 UTC m=+2564.252545244 I0903 17:06:26.426845 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-03 17:06:26.426835626 +0000 UTC m=+2564.252587035 I0903 17:06:26.443570 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:06:26.443704 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-03 17:06:26.443692666 +0000 UTC m=+2564.269444065 I0903 17:06:26.835130 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:06:26.868556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Approved" to 2026-09-03 17:06:26.868539596 +0000 UTC m=+2564.694290985 I0903 17:06:26.886800 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Ready" to 2026-09-03 17:06:26.886789617 +0000 UTC m=+2564.712540986 I0903 17:06:26.909939 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:06:26.909924702 +0000 UTC m=+2564.735676081 I0903 17:06:26.930025 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:06:26.930833 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:06:26.930825039 +0000 UTC m=+2564.756576438 I0903 17:06:26.945565 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:06:26.947068 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:06:26.947058257 +0000 UTC m=+2564.772809646 I0903 17:06:26.949151 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:11:18.115967 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-03 17:11:18.115948392 +0000 UTC m=+2855.941699791 I0903 17:11:18.116198 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:11:18.116303 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-03 17:11:18.116291899 +0000 UTC m=+2855.942043278 I0903 17:11:18.129068 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" E0903 17:11:18.129216 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0903 17:11:18.129283 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-03 17:11:18.129271438 +0000 UTC m=+2855.955022847 I0903 17:11:18.129357 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0903 17:11:18.129786 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-03 17:11:18.129753368 +0000 UTC m=+2855.955504777 E0903 17:11:18.143183 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" E0903 17:11:18.143270 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0903 17:11:18.143294 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0903 17:11:18.143513 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" I0903 17:11:18.151960 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:11:18.181869 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Approved" to 2026-09-03 17:11:18.181856776 +0000 UTC m=+2856.007608175 I0903 17:11:18.194650 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Ready" to 2026-09-03 17:11:18.194635919 +0000 UTC m=+2856.020387328 I0903 17:11:18.215955 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:11:18.215943667 +0000 UTC m=+2856.041695076 I0903 17:11:18.227596 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:11:18.236719 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:11:18.762301 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-03 17:11:18.762278247 +0000 UTC m=+2856.588029696 I0903 17:11:18.762311 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:11:18.762368 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-03 17:11:18.762361109 +0000 UTC m=+2856.588112478 E0903 17:11:18.776303 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0903 17:11:18.776364 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-03 17:11:18.776353319 +0000 UTC m=+2856.602104718 I0903 17:11:18.776427 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0903 17:11:18.782815 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:11:18.783048 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-03 17:11:18.783034202 +0000 UTC m=+2856.608785631 E0903 17:11:18.790791 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" E0903 17:11:18.791538 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0903 17:11:18.791699 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0903 17:11:18.791810 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" I0903 17:11:18.796471 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:11:18.796566 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-03 17:11:18.796557593 +0000 UTC m=+2856.622308962 I0903 17:11:18.812756 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Approved" to 2026-09-03 17:11:18.81273958 +0000 UTC m=+2856.638490979 I0903 17:11:18.826513 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Ready" to 2026-09-03 17:11:18.826503075 +0000 UTC m=+2856.652254434 I0903 17:11:18.847728 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:11:18.84771829 +0000 UTC m=+2856.673469659 I0903 17:11:18.862112 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:11:18.970736 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:11:19.537021 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:11:19.537069 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-03 17:11:19.537058629 +0000 UTC m=+2857.362810038 I0903 17:11:19.537503 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-03 17:11:19.537494958 +0000 UTC m=+2857.363246357 I0903 17:11:19.548479 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:11:19.548637 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:11:19.548680 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-03 17:11:19.548670768 +0000 UTC m=+2857.374422177 I0903 17:11:19.598556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Approved" to 2026-09-03 17:11:19.598538567 +0000 UTC m=+2857.424289976 I0903 17:11:19.614392 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Ready" to 2026-09-03 17:11:19.614371067 +0000 UTC m=+2857.440122476 I0903 17:11:23.143881 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:11:23.143872925 +0000 UTC m=+2860.969624294 I0903 17:11:23.156157 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:11:23.156139327 +0000 UTC m=+2860.981890726 I0903 17:11:23.183822 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:11:23.183805441 +0000 UTC m=+2861.009556830 I0903 17:11:23.204152 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:11:23.204533 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:11:23.204525266 +0000 UTC m=+2861.030276635 I0903 17:11:23.220268 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:11:23.792008 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:11:23.791994538 +0000 UTC m=+2861.617745947 I0903 17:14:05.195953 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:14:05.196004 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-03 17:14:05.195994306 +0000 UTC m=+3023.021745715 I0903 17:14:05.196006 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-03 17:14:05.195994316 +0000 UTC m=+3023.021745715 I0903 17:14:05.211163 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:05.211292 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:14:05.211335 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-03 17:14:05.211322354 +0000 UTC m=+3023.037073763 I0903 17:14:05.422133 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:05.439929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Approved" to 2026-09-03 17:14:05.439912578 +0000 UTC m=+3023.265663957 I0903 17:14:05.466119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Ready" to 2026-09-03 17:14:05.46610414 +0000 UTC m=+3023.291855569 I0903 17:14:05.493083 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:14:05.493063328 +0000 UTC m=+3023.318814727 I0903 17:14:05.507235 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:05.507768 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:14:05.507759604 +0000 UTC m=+3023.333510983 I0903 17:14:05.514613 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:05.523378 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:05.527125 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:52.471003 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-03 17:14:52.470987325 +0000 UTC m=+3070.296738724 I0903 17:14:52.514829 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-03 17:14:52.514805956 +0000 UTC m=+3070.340557375 I0903 17:14:52.515011 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:14:52.515083 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-03 17:14:52.515073592 +0000 UTC m=+3070.340824991 I0903 17:14:52.535249 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:52.535380 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-03 17:14:52.535365077 +0000 UTC m=+3070.361116486 E0903 17:14:52.550608 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller" I0903 17:14:52.595112 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-03 17:14:52.595093067 +0000 UTC m=+3070.420844476 I0903 17:14:52.618201 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-03 17:14:52.618179684 +0000 UTC m=+3070.443931093 I0903 17:14:52.618308 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:14:52.618359 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-03 17:14:52.618349437 +0000 UTC m=+3070.444100836 I0903 17:14:52.633226 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:52.633363 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-03 17:14:52.633350659 +0000 UTC m=+3070.459102088 E0903 17:14:52.704943 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" I0903 17:14:52.812468 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:52.844172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-09-03 17:14:52.844157641 +0000 UTC m=+3070.669909050 I0903 17:14:52.888819 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-09-03 17:14:52.888762238 +0000 UTC m=+3070.714513617 I0903 17:14:52.937202 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:14:52.937185668 +0000 UTC m=+3070.762937067 I0903 17:14:52.961100 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:52.961649 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:14:52.961641401 +0000 UTC m=+3070.787392780 I0903 17:14:52.978438 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:52.993575 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:53.463847 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-03 17:14:53.463810595 +0000 UTC m=+3071.289561964 I0903 17:14:53.484852 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:14:53.484896 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-03 17:14:53.484888466 +0000 UTC m=+3071.310639835 I0903 17:14:53.485385 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-03 17:14:53.484927207 +0000 UTC m=+3071.310678576 I0903 17:14:53.502856 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:53.502928 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-03 17:14:53.502920524 +0000 UTC m=+3071.328671913 I0903 17:14:53.640330 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:53.716277 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-09-03 17:14:53.71626219 +0000 UTC m=+3071.542013579 I0903 17:14:53.775891 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-09-03 17:14:53.775874289 +0000 UTC m=+3071.601625658 I0903 17:14:53.808163 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:14:53.808149242 +0000 UTC m=+3071.633900601 I0903 17:14:53.823399 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:53.823993 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:14:53.823984601 +0000 UTC m=+3071.649735980 I0903 17:14:53.845079 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:53.846195 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:53.919839 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-03 17:14:53.919825577 +0000 UTC m=+3071.745576946 I0903 17:14:53.938906 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-03 17:14:53.938892586 +0000 UTC m=+3071.764643955 I0903 17:14:53.939819 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:14:53.939834 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-03 17:14:53.939830917 +0000 UTC m=+3071.765582286 I0903 17:14:53.949802 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:53.949861 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:14:53.949884 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-03 17:14:53.949877962 +0000 UTC m=+3071.775629331 I0903 17:14:54.170639 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:54.181340 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-09-03 17:14:54.181329818 +0000 UTC m=+3072.007081187 I0903 17:14:54.204691 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-09-03 17:14:54.204677088 +0000 UTC m=+3072.030428457 I0903 17:14:54.343862 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:14:54.343854134 +0000 UTC m=+3072.169605503 I0903 17:14:54.386085 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-03 17:14:54.38606987 +0000 UTC m=+3072.211821239 I0903 17:14:54.403804 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0903 17:14:54.403833 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-03 17:14:54.4038265 +0000 UTC m=+3072.229577869 I0903 17:14:54.403970 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-03 17:14:54.403966723 +0000 UTC m=+3072.229718092 I0903 17:14:54.425772 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:54.426624 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:14:54.426616809 +0000 UTC m=+3072.252368178 I0903 17:14:54.675780 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:54.675857 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-03 17:14:54.675850196 +0000 UTC m=+3072.501601575 I0903 17:14:54.777547 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:54.927317 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:55.076550 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0903 17:14:55.231937 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-09-03 17:14:55.231923546 +0000 UTC m=+3073.057674915 I0903 17:14:55.289166 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-09-03 17:14:55.289151723 +0000 UTC m=+3073.114903102 I0903 17:14:55.783856 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-03 17:14:55.783841566 +0000 UTC m=+3073.609592975 I0903 17:14:55.926931 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"