I0812 17:37:27.295850 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0812 17:37:27.296038 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0812 17:37:27.296143 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0812 17:37:27.302752 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0812 17:37:27.303431 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0812 17:37:27.303579 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0812 17:37:27.303654 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0812 17:37:27.306462 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0812 17:37:27.324750 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0812 17:37:27.330138 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0812 17:37:27.338129 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0812 17:37:27.341371 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0812 17:37:27.343949 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0812 17:37:27.346528 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0812 17:37:27.348935 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0812 17:37:27.350707 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0812 17:37:27.350811 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0812 17:37:27.353136 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0812 17:37:27.353960 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0812 17:37:27.359829 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0812 17:37:27.362467 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0812 17:37:27.364816 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0812 17:37:27.366662 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0812 17:37:27.366683 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0812 17:37:27.366693 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0812 17:37:27.366738 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0812 17:37:27.368664 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0812 17:37:27.370515 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0812 17:37:27.372370 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0812 17:37:27.374385 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0812 17:37:27.380352 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0812 17:37:27.384452 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0812 17:37:27.384823 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0812 17:37:27.388508 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 17:37:27.389022 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 17:37:27.390178 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 17:37:27.410607 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 17:37:27.433164 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 17:37:27.450692 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 17:37:27.468037 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 17:37:27.486541 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 17:37:27.494003 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 17:37:27.504792 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0812 17:37:41.682872 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-12 17:37:41.682847329 +0000 UTC m=+14.422526126 I0812 17:37:42.523520 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-12 17:37:42.523501434 +0000 UTC m=+15.263180231 I0812 17:37:42.523642 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:37:42.523762 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-12 17:37:42.52374739 +0000 UTC m=+15.263426187 E0812 17:37:42.538492 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 17:37:42.538604 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-12 17:37:42.538594481 +0000 UTC m=+15.278273248 E0812 17:37:42.538635 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 17:37:42.541658 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:37:42.541856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:37:42.541890 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-12 17:37:42.541881626 +0000 UTC m=+15.281560403 E0812 17:37:42.549604 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0812 17:37:42.549776 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 17:37:42.550051 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 17:37:42.550104 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0812 17:37:42.584957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-l56b8" condition "Approved" to 2026-08-12 17:37:42.584939547 +0000 UTC m=+15.324618344 I0812 17:37:42.600496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-l56b8" condition "Ready" to 2026-08-12 17:37:42.600472373 +0000 UTC m=+15.340151180 I0812 17:37:42.634709 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:37:42.63469517 +0000 UTC m=+15.374373947 I0812 17:37:42.665108 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:37:42.719847 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:37:47.550932 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:37:47.550908637 +0000 UTC m=+20.290587434 I0812 17:38:13.452877 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-12 17:38:13.452860994 +0000 UTC m=+46.192539761 I0812 17:38:13.452917 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:38:13.452951 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-12 17:38:13.452943406 +0000 UTC m=+46.192622183 I0812 17:38:13.463411 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-12 17:38:13.463392237 +0000 UTC m=+46.203071044 I0812 17:38:13.471817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:38:13.471971 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:38:13.472017 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-12 17:38:13.472004246 +0000 UTC m=+46.211683053 I0812 17:38:13.704515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:38:13.740351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-djbww" condition "Approved" to 2026-08-12 17:38:13.740335894 +0000 UTC m=+46.480014701 I0812 17:38:13.855279 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-djbww" condition "Ready" to 2026-08-12 17:38:13.855255924 +0000 UTC m=+46.594934731 I0812 17:38:13.894317 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:38:13.894293174 +0000 UTC m=+46.633971991 I0812 17:38:13.920824 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:38:13.921107 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:38:13.921101683 +0000 UTC m=+46.660780450 I0812 17:38:13.934671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:38:13.991993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:40:01.920733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:40:01.920795 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-08-12 17:40:01.920784265 +0000 UTC m=+154.660463042 I0812 17:40:01.920735 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-08-12 17:40:01.920632992 +0000 UTC m=+154.660311759 E0812 17:40:01.934482 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 17:40:01.934531 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-08-12 17:40:01.934523652 +0000 UTC m=+154.674202429 I0812 17:40:01.934575 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 17:40:01.937588 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:40:01.937676 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:40:01.937697 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-08-12 17:40:01.937691153 +0000 UTC m=+154.677369920 E0812 17:40:01.944009 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0812 17:40:01.944612 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 17:40:01.944667 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0812 17:40:01.944715 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0812 17:40:01.947295 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:40:01.947320 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-08-12 17:40:01.947315618 +0000 UTC m=+154.686994385 I0812 17:40:01.947581 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-08-12 17:40:01.947551854 +0000 UTC m=+154.687230661 I0812 17:40:01.963118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:40:01.963218 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-08-12 17:40:01.963204234 +0000 UTC m=+154.702883011 I0812 17:40:02.061316 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:40:02.106437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-9cv9s" condition "Approved" to 2026-08-12 17:40:02.10641287 +0000 UTC m=+154.846091667 I0812 17:40:02.170058 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-9cv9s" condition "Ready" to 2026-08-12 17:40:02.170046914 +0000 UTC m=+154.909725681 I0812 17:40:02.296329 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-xvq8m" condition "Approved" to 2026-08-12 17:40:02.29630275 +0000 UTC m=+155.035981547 I0812 17:40:02.326511 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-xvq8m" condition "Ready" to 2026-08-12 17:40:02.326490446 +0000 UTC m=+155.066169233 I0812 17:40:02.353450 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:40:02.353434399 +0000 UTC m=+155.093113206 I0812 17:40:02.377965 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:40:02.427487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:40:06.945319 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:40:06.945303265 +0000 UTC m=+159.684982062 I0812 17:40:06.961093 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-9cv9s" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:40:06.961079028 +0000 UTC m=+159.700757805 I0812 17:40:06.995626 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:40:06.995612881 +0000 UTC m=+159.735291688 I0812 17:40:07.015648 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:43:33.638644 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-19-213-68.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:43:33.638689 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-68.nip.io-tls" condition "Issuing" to 2026-08-12 17:43:33.638680393 +0000 UTC m=+366.378359160 I0812 17:43:33.638827 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-68.nip.io-tls" condition "Ready" to 2026-08-12 17:43:33.638811117 +0000 UTC m=+366.378489884 I0812 17:43:33.661697 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-68.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-68.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:43:33.661781 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-68.nip.io-tls" condition "Ready" to 2026-08-12 17:43:33.661770278 +0000 UTC m=+366.401449075 I0812 17:43:33.924855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-68.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-68.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:43:33.955559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-68.nip.io-tls-jnnm5" condition "Approved" to 2026-08-12 17:43:33.955543653 +0000 UTC m=+366.695222460 I0812 17:43:33.975360 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-68.nip.io-tls-jnnm5" condition "Ready" to 2026-08-12 17:43:33.975341822 +0000 UTC m=+366.715020619 I0812 17:43:34.002997 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-68.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:43:34.002987241 +0000 UTC m=+366.742666028 I0812 17:43:34.024350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-68.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-68.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:43:34.024683 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-68.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:43:34.024675292 +0000 UTC m=+366.764354069 I0812 17:43:34.041126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-19-213-68.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-68.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:43:34.041294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-19-213-68.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-68.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:43:34.041722 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-68.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:43:34.041713086 +0000 UTC m=+366.781391863 I0812 17:44:45.236055 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:44:45.236096 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-12 17:44:45.23608854 +0000 UTC m=+437.975767317 I0812 17:44:45.236048 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-12 17:44:45.236028869 +0000 UTC m=+437.975707666 E0812 17:44:45.251467 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 17:44:45.251579 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-12 17:44:45.251564046 +0000 UTC m=+437.991242853 E0812 17:44:45.251628 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0812 17:44:45.254213 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:44:45.254301 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:44:45.254330 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-12 17:44:45.25432479 +0000 UTC m=+437.994003567 E0812 17:44:45.260245 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0812 17:44:45.260325 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 17:44:45.260351 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0812 17:44:45.260390 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0812 17:44:45.300143 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fz7tl" condition "Approved" to 2026-08-12 17:44:45.300121803 +0000 UTC m=+438.039800580 I0812 17:44:45.314115 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-fz7tl" condition "Ready" to 2026-08-12 17:44:45.314098974 +0000 UTC m=+438.053777751 I0812 17:44:45.337431 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:44:45.3374157 +0000 UTC m=+438.077094507 I0812 17:44:45.356729 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:44:45.424107 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:44:50.261522 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:44:50.261509156 +0000 UTC m=+443.001187953 I0812 17:45:29.625991 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-12 17:45:29.625966974 +0000 UTC m=+482.365645751 I0812 17:45:29.626029 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:45:29.628151 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-12 17:45:29.628091723 +0000 UTC m=+482.367770580 I0812 17:45:29.641603 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:45:29.641636 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-12 17:45:29.641628534 +0000 UTC m=+482.381307311 I0812 17:45:29.641891 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-12 17:45:29.641875069 +0000 UTC m=+482.381553836 I0812 17:45:29.643192 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-12 17:45:29.643187449 +0000 UTC m=+482.382866216 I0812 17:45:29.643278 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:45:29.643303 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-12 17:45:29.643300062 +0000 UTC m=+482.382978829 I0812 17:45:29.659969 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:29.660054 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:45:29.660094 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-12 17:45:29.660086278 +0000 UTC m=+482.399765055 I0812 17:45:29.664948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:29.665047 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-12 17:45:29.665040282 +0000 UTC m=+482.404719049 I0812 17:45:29.667263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:29.667331 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-12 17:45:29.667324574 +0000 UTC m=+482.407003341 I0812 17:45:29.908761 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-v6vqv" condition "Approved" to 2026-08-12 17:45:29.908749695 +0000 UTC m=+482.648428462 I0812 17:45:29.924560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:29.934616 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-v6vqv" condition "Ready" to 2026-08-12 17:45:29.934602779 +0000 UTC m=+482.674281556 I0812 17:45:29.972695 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:45:29.972681085 +0000 UTC m=+482.712359852 I0812 17:45:29.994866 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:30.057196 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:30.100166 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-c5pdd" condition "Approved" to 2026-08-12 17:45:30.100151535 +0000 UTC m=+482.839830302 I0812 17:45:30.116877 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-c5pdd" condition "Ready" to 2026-08-12 17:45:30.116866899 +0000 UTC m=+482.856545666 I0812 17:45:30.155335 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:45:30.155323574 +0000 UTC m=+482.895002351 I0812 17:45:30.174142 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:30.174514 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:45:30.174502574 +0000 UTC m=+482.914181361 I0812 17:45:30.467417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:30.522415 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:30.778653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tzsmr" condition "Approved" to 2026-08-12 17:45:30.778636834 +0000 UTC m=+483.518315611 I0812 17:45:30.983243 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-tzsmr" condition "Ready" to 2026-08-12 17:45:30.983219987 +0000 UTC m=+483.722898764 E0812 17:45:31.211282 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"prometheus-tls-pmcxb\" not found" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" I0812 17:45:31.560061 1 issuing_controller.go:324] "next private key does not match CSR public key, waiting for requestmanager controller" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" resource_name="prometheus-tls" resource_namespace="monitoring" resource_kind="Certificate" resource_version="v1" resource_name="prometheus-tls-tzsmr" resource_namespace="monitoring" resource_kind="CertificateRequest" resource_version="v1" resource_name="prometheus-tls-7q5jl" resource_namespace="monitoring" resource_kind="Secret" resource_version="v1" I0812 17:45:31.581391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7rcwv" condition "Approved" to 2026-08-12 17:45:31.581369929 +0000 UTC m=+484.321048726 I0812 17:45:31.926479 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-7rcwv" condition "Ready" to 2026-08-12 17:45:31.926455422 +0000 UTC m=+484.666134219 I0812 17:45:32.118628 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:45:32.11861114 +0000 UTC m=+484.858289937 I0812 17:45:32.220021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:32.220340 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:45:32.220334169 +0000 UTC m=+484.960012946 I0812 17:45:32.419200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:39.787647 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:45:39.787696 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls" condition "Issuing" to 2026-08-12 17:45:39.787685861 +0000 UTC m=+492.527364668 I0812 17:45:39.787858 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls" condition "Ready" to 2026-08-12 17:45:39.787849354 +0000 UTC m=+492.527528161 I0812 17:45:39.806816 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:39.806886 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls" condition "Ready" to 2026-08-12 17:45:39.806879321 +0000 UTC m=+492.546558098 I0812 17:45:40.003019 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:40.035646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zdlxx-5s2rw" condition "Approved" to 2026-08-12 17:45:40.03563436 +0000 UTC m=+492.775313137 I0812 17:45:40.055381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zdlxx-5s2rw" condition "Ready" to 2026-08-12 17:45:40.055366194 +0000 UTC m=+492.795044991 I0812 17:45:40.087025 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:45:40.087010991 +0000 UTC m=+492.826689768 I0812 17:45:40.115326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:40.119501 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:45:40.119473658 +0000 UTC m=+492.859152455 I0812 17:45:40.132968 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:45:40.140928 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zdlxx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:46:09.518842 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-12 17:46:09.518825565 +0000 UTC m=+522.258504342 I0812 17:46:09.519165 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:46:09.519224 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-12 17:46:09.519216904 +0000 UTC m=+522.258895671 I0812 17:46:09.534188 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:46:09.534281 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-12 17:46:09.53427253 +0000 UTC m=+522.273951307 I0812 17:46:09.777166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:46:09.810496 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qxr2f" condition "Approved" to 2026-08-12 17:46:09.8104834 +0000 UTC m=+522.550162187 I0812 17:46:09.827432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-qxr2f" condition "Ready" to 2026-08-12 17:46:09.827416289 +0000 UTC m=+522.567095096 I0812 17:46:09.860255 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:46:09.860238664 +0000 UTC m=+522.599917441 I0812 17:46:09.879480 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:49:22.961906 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-12 17:49:22.961866265 +0000 UTC m=+715.701545042 I0812 17:49:22.961942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:49:22.962026 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-12 17:49:22.962015909 +0000 UTC m=+715.701694706 I0812 17:49:23.005434 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:49:23.005524 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:49:23.005544 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-12 17:49:23.005536637 +0000 UTC m=+715.745215444 I0812 17:49:23.251164 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lb224" condition "Approved" to 2026-08-12 17:49:23.251153469 +0000 UTC m=+715.990832256 I0812 17:49:23.269802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-lb224" condition "Ready" to 2026-08-12 17:49:23.269789886 +0000 UTC m=+716.009468663 I0812 17:49:23.296647 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:49:23.296634933 +0000 UTC m=+716.036313710 I0812 17:49:23.321097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:49:23.367524 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:51:47.176600 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-12 17:51:47.176561808 +0000 UTC m=+859.916240605 I0812 17:51:47.177074 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:51:47.177145 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-08-12 17:51:47.177137761 +0000 UTC m=+859.916816558 I0812 17:51:47.196365 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:51:47.196448 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-12 17:51:47.196439714 +0000 UTC m=+859.936118521 I0812 17:51:47.502779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:51:47.531720 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-tsvm5" condition "Approved" to 2026-08-12 17:51:47.531710153 +0000 UTC m=+860.271388910 I0812 17:51:47.549530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-tsvm5" condition "Ready" to 2026-08-12 17:51:47.549514332 +0000 UTC m=+860.289193139 I0812 17:51:47.576354 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:51:47.576342148 +0000 UTC m=+860.316020945 I0812 17:51:47.604620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:51:47.604923 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:51:47.604914033 +0000 UTC m=+860.344592810 I0812 17:51:47.624684 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:51:47.629759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:52:59.822046 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:52:59.822107 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-08-12 17:52:59.822100127 +0000 UTC m=+932.561778894 I0812 17:52:59.822415 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-08-12 17:52:59.822409564 +0000 UTC m=+932.562088341 I0812 17:52:59.835159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:52:59.835213 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:52:59.835226 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-08-12 17:52:59.835221879 +0000 UTC m=+932.574900656 I0812 17:53:00.018097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:53:00.023233 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-hvm9c" condition "Approved" to 2026-08-12 17:53:00.023219312 +0000 UTC m=+932.762898079 I0812 17:53:00.048826 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-hvm9c" condition "Ready" to 2026-08-12 17:53:00.048809311 +0000 UTC m=+932.788488128 I0812 17:53:00.095208 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:53:00.095188817 +0000 UTC m=+932.834867604 I0812 17:53:00.118483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:56:08.730263 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 17:56:08.730321 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-08-12 17:56:08.730315236 +0000 UTC m=+1121.469994003 I0812 17:56:08.730397 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-08-12 17:56:08.730373937 +0000 UTC m=+1121.470052734 I0812 17:56:08.756324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:56:08.756406 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-08-12 17:56:08.756398154 +0000 UTC m=+1121.496076931 I0812 17:56:08.845074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 17:56:08.882119 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-s7ghw" condition "Approved" to 2026-08-12 17:56:08.882104479 +0000 UTC m=+1121.621783256 I0812 17:56:08.898530 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-s7ghw" condition "Ready" to 2026-08-12 17:56:08.898520866 +0000 UTC m=+1121.638199643 I0812 17:56:08.933483 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 17:56:08.933467627 +0000 UTC m=+1121.673146394 I0812 17:56:08.958281 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:02:13.764585 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:02:13.764598 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-08-12 18:02:13.764577484 +0000 UTC m=+1486.504256281 I0812 18:02:13.764662 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-08-12 18:02:13.764653876 +0000 UTC m=+1486.504332653 I0812 18:02:13.779138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:02:13.779239 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-08-12 18:02:13.779231559 +0000 UTC m=+1486.518910326 I0812 18:02:14.072133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:02:14.102762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-lf7j2" condition "Approved" to 2026-08-12 18:02:14.10275134 +0000 UTC m=+1486.842430107 I0812 18:02:14.121703 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-lf7j2" condition "Ready" to 2026-08-12 18:02:14.121687362 +0000 UTC m=+1486.861366159 I0812 18:02:14.151704 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:02:14.151686776 +0000 UTC m=+1486.891365553 I0812 18:02:14.173035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:02:14.173303 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:02:14.173297529 +0000 UTC m=+1486.912976296 I0812 18:02:14.191902 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:02:14.193037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:02:14.193320 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:02:14.193313146 +0000 UTC m=+1486.932991913 I0812 18:03:37.860057 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:03:37.860096 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-08-12 18:03:37.860088403 +0000 UTC m=+1570.599767190 I0812 18:03:37.860173 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-08-12 18:03:37.860155294 +0000 UTC m=+1570.599834071 I0812 18:03:37.874961 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:03:37.875151 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-08-12 18:03:37.875139206 +0000 UTC m=+1570.614817983 I0812 18:03:38.141291 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:03:38.174397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wkw22" condition "Approved" to 2026-08-12 18:03:38.174384063 +0000 UTC m=+1570.914062840 I0812 18:03:38.196795 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-wkw22" condition "Ready" to 2026-08-12 18:03:38.196783452 +0000 UTC m=+1570.936462249 I0812 18:03:38.225627 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:03:38.225609937 +0000 UTC m=+1570.965288714 I0812 18:03:38.253884 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:03:38.254273 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:03:38.254261349 +0000 UTC m=+1570.993940126 I0812 18:03:38.256604 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:03:38.276223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:03:38.276588 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:03:38.276578926 +0000 UTC m=+1571.016257703 I0812 18:03:38.277272 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:04:35.618254 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:04:35.618337 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-12 18:04:35.618326858 +0000 UTC m=+1628.358005665 I0812 18:04:35.618328 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-08-12 18:04:35.618307037 +0000 UTC m=+1628.357985834 I0812 18:04:35.636722 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:04:35.636898 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:04:35.636963 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-12 18:04:35.63692694 +0000 UTC m=+1628.376605737 I0812 18:04:35.673446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:04:35.682712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-2w6fs" condition "Approved" to 2026-08-12 18:04:35.68270244 +0000 UTC m=+1628.422381217 I0812 18:04:35.695757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-2w6fs" condition "Ready" to 2026-08-12 18:04:35.695749538 +0000 UTC m=+1628.435428315 I0812 18:04:35.721377 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:04:35.72136383 +0000 UTC m=+1628.461042597 I0812 18:04:35.745324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:04:35.745516 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:04:35.745507389 +0000 UTC m=+1628.485186156 I0812 18:04:35.764267 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:04:35.765219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:04:35.765435 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:04:35.765426122 +0000 UTC m=+1628.505104899 I0812 18:04:36.264154 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-12 18:04:36.264136103 +0000 UTC m=+1629.003814910 I0812 18:04:36.264176 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:04:36.264472 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-08-12 18:04:36.2644628 +0000 UTC m=+1629.004141597 I0812 18:04:36.279908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:04:36.280061 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:04:36.280366 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-08-12 18:04:36.280085056 +0000 UTC m=+1629.019763853 I0812 18:04:36.335112 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-cfhw8" condition "Approved" to 2026-08-12 18:04:36.335095137 +0000 UTC m=+1629.074773894 I0812 18:04:36.351913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-cfhw8" condition "Ready" to 2026-08-12 18:04:36.351900619 +0000 UTC m=+1629.091579396 I0812 18:04:36.382877 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:04:36.382857903 +0000 UTC m=+1629.122536700 I0812 18:04:36.400466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:04:36.400621 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:04:36.400615037 +0000 UTC m=+1629.140293794 I0812 18:04:36.416057 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:04:36.953671 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-08-12 18:04:36.953656354 +0000 UTC m=+1629.693335131 I0812 18:04:37.580990 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-08-12 18:04:37.580973449 +0000 UTC m=+1630.320652246 I0812 18:05:23.082374 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-08-12 18:05:23.082352349 +0000 UTC m=+1675.822031116 I0812 18:05:23.083078 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:05:23.083107 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-08-12 18:05:23.083103226 +0000 UTC m=+1675.822781993 I0812 18:05:23.112448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:05:23.112565 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:05:23.112625 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-08-12 18:05:23.112618927 +0000 UTC m=+1675.852297694 I0812 18:05:30.674996 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:05:30.697124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-gtgfx" condition "Approved" to 2026-08-12 18:05:30.697102455 +0000 UTC m=+1683.436781232 I0812 18:05:30.716996 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-gtgfx" condition "Ready" to 2026-08-12 18:05:30.716985427 +0000 UTC m=+1683.456664194 I0812 18:05:30.759496 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:05:30.759483653 +0000 UTC m=+1683.499162430 I0812 18:05:30.776769 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:05:30.777490 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:05:30.777483363 +0000 UTC m=+1683.517162150 I0812 18:05:30.800032 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:05:30.800596 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:05:30.801299 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:05:30.801289404 +0000 UTC m=+1683.540968171 I0812 18:08:07.880630 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:08:07.880705 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-08-12 18:08:07.880695421 +0000 UTC m=+1840.620374218 I0812 18:08:07.880827 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-08-12 18:08:07.880812904 +0000 UTC m=+1840.620491711 I0812 18:08:07.895943 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:08:07.896003 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:08:07.896016 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-08-12 18:08:07.896012483 +0000 UTC m=+1840.635691260 I0812 18:08:08.106383 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-smblk" condition "Approved" to 2026-08-12 18:08:08.106367691 +0000 UTC m=+1840.846046468 I0812 18:08:08.124605 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-smblk" condition "Ready" to 2026-08-12 18:08:08.124587959 +0000 UTC m=+1840.864266736 I0812 18:08:08.157404 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:08:08.157327241 +0000 UTC m=+1840.897006018 I0812 18:08:08.188146 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:08:08.188417 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:08:08.188410334 +0000 UTC m=+1840.928089111 I0812 18:08:08.208103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:08:09.466672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:08:09.466707 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-08-12 18:08:09.466698061 +0000 UTC m=+1842.206376828 I0812 18:08:09.466719 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-12 18:08:09.466707072 +0000 UTC m=+1842.206385879 I0812 18:08:09.483741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:08:09.483864 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-12 18:08:09.483855766 +0000 UTC m=+1842.223534543 I0812 18:08:09.634571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:08:09.703321 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-f2xx4" condition "Approved" to 2026-08-12 18:08:09.703301852 +0000 UTC m=+1842.442980619 I0812 18:08:09.726345 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-f2xx4" condition "Ready" to 2026-08-12 18:08:09.726333901 +0000 UTC m=+1842.466012678 I0812 18:08:09.761286 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:08:09.761262283 +0000 UTC m=+1842.500941090 I0812 18:08:09.789574 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:08:09.790079 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:08:09.790067044 +0000 UTC m=+1842.529745831 I0812 18:08:09.816556 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:11:17.983947 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:11:17.983995 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-08-12 18:11:17.983984689 +0000 UTC m=+2030.723663486 I0812 18:11:17.983993 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-08-12 18:11:17.983972279 +0000 UTC m=+2030.723651086 I0812 18:11:18.010649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:11:18.010925 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-08-12 18:11:18.010913088 +0000 UTC m=+2030.750591885 I0812 18:11:18.505640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:11:18.536836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-k7lb5" condition "Approved" to 2026-08-12 18:11:18.536821157 +0000 UTC m=+2031.276499964 I0812 18:11:18.555412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-k7lb5" condition "Ready" to 2026-08-12 18:11:18.555400284 +0000 UTC m=+2031.295079051 I0812 18:11:18.587514 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:11:18.58747635 +0000 UTC m=+2031.327155127 I0812 18:11:18.610143 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:11:18.689037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:12:06.914569 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vqcth-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:12:06.914604 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vqcth-api" condition "Issuing" to 2026-08-12 18:12:06.914597066 +0000 UTC m=+2079.654275833 I0812 18:12:06.915204 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vqcth-vnc" condition "Ready" to 2026-08-12 18:12:06.91519904 +0000 UTC m=+2079.654877807 I0812 18:12:06.915361 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vqcth-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:12:06.915402 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vqcth-vnc" condition "Issuing" to 2026-08-12 18:12:06.915391394 +0000 UTC m=+2079.655070191 I0812 18:12:06.915181 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vqcth-api" condition "Ready" to 2026-08-12 18:12:06.915160689 +0000 UTC m=+2079.654839496 I0812 18:12:06.930190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vqcth-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vqcth-api\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:12:06.930253 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vqcth-api" condition "Ready" to 2026-08-12 18:12:06.930247215 +0000 UTC m=+2079.669925992 I0812 18:12:06.931789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vqcth-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vqcth-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:12:06.931852 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-vqcth-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:12:06.931869 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-vqcth-vnc" condition "Issuing" to 2026-08-12 18:12:06.931864772 +0000 UTC m=+2079.671543539 I0812 18:12:07.076962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vqcth-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vqcth-api\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:12:07.104414 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vqcth-api-ksthd" condition "Approved" to 2026-08-12 18:12:07.104406272 +0000 UTC m=+2079.844085039 I0812 18:12:07.125708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vqcth-api-ksthd" condition "Ready" to 2026-08-12 18:12:07.125697601 +0000 UTC m=+2079.865376358 I0812 18:12:07.152826 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vqcth-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vqcth-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:12:07.155218 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vqcth-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:12:07.155207169 +0000 UTC m=+2079.894885966 I0812 18:12:07.163104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vqcth-vnc-vvj5k" condition "Approved" to 2026-08-12 18:12:07.163087659 +0000 UTC m=+2079.902766446 I0812 18:12:07.179379 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-vqcth-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vqcth-api\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:12:07.182354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-vqcth-vnc-vvj5k" condition "Ready" to 2026-08-12 18:12:07.182340941 +0000 UTC m=+2079.922019728 I0812 18:12:07.210966 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vqcth-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:12:07.210950668 +0000 UTC m=+2079.950629455 I0812 18:12:07.225218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-vqcth-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vqcth-api\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:12:07.230018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vqcth-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vqcth-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:12:07.230303 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vqcth-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:12:07.230296041 +0000 UTC m=+2079.969974808 I0812 18:12:07.237246 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-vqcth-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vqcth-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:12:07.247869 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-vqcth-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-vqcth-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:12:07.248237 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-vqcth-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:12:07.248228573 +0000 UTC m=+2079.987907350 I0812 18:15:36.367013 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:15:36.367277 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-12 18:15:36.367266273 +0000 UTC m=+2289.106945050 I0812 18:15:36.367069 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-08-12 18:15:36.367052488 +0000 UTC m=+2289.106731285 I0812 18:15:36.385675 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:15:36.385829 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-08-12 18:15:36.385800045 +0000 UTC m=+2289.125478812 I0812 18:15:36.496713 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:15:36.530173 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-m7b42" condition "Approved" to 2026-08-12 18:15:36.530157647 +0000 UTC m=+2289.269836454 I0812 18:15:36.549130 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-m7b42" condition "Ready" to 2026-08-12 18:15:36.54912134 +0000 UTC m=+2289.288800107 I0812 18:15:36.578559 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:15:36.57854492 +0000 UTC m=+2289.318223727 I0812 18:15:36.601859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:15:36.602203 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:15:36.602195069 +0000 UTC m=+2289.341873846 I0812 18:15:36.626827 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:15:37.918940 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-12 18:15:37.918916242 +0000 UTC m=+2290.658595039 I0812 18:15:37.919304 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:15:37.919399 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-08-12 18:15:37.919389514 +0000 UTC m=+2290.659068351 I0812 18:15:37.936512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:15:37.936615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:15:37.936641 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-08-12 18:15:37.936633327 +0000 UTC m=+2290.676312104 I0812 18:15:38.269104 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-f6tng" condition "Approved" to 2026-08-12 18:15:38.269091567 +0000 UTC m=+2291.008770344 I0812 18:15:38.286268 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-f6tng" condition "Ready" to 2026-08-12 18:15:38.286250159 +0000 UTC m=+2291.025928926 I0812 18:15:38.313922 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:15:38.313906809 +0000 UTC m=+2291.053585586 I0812 18:15:38.333998 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:15:38.334561 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:15:38.3345488 +0000 UTC m=+2291.074227577 I0812 18:15:38.355155 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:17:54.896133 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-08-12 18:17:54.896084862 +0000 UTC m=+2427.635763679 I0812 18:17:54.896592 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:17:54.896661 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-12 18:17:54.896648735 +0000 UTC m=+2427.636327542 E0812 18:17:54.910442 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 18:17:54.910537 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-08-12 18:17:54.910525651 +0000 UTC m=+2427.650204458 I0812 18:17:54.910585 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 18:17:54.918584 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:17:54.918723 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:17:54.918750 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-12 18:17:54.918744969 +0000 UTC m=+2427.658423736 E0812 18:17:54.919443 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0812 18:17:54.919831 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 18:17:54.919964 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0812 18:17:54.920149 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0812 18:17:54.960835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:17:54.965174 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-fhq85" condition "Approved" to 2026-08-12 18:17:54.965152087 +0000 UTC m=+2427.704830894 I0812 18:17:54.984341 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-fhq85" condition "Ready" to 2026-08-12 18:17:54.984331354 +0000 UTC m=+2427.724010131 I0812 18:17:55.013356 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:17:55.013342166 +0000 UTC m=+2427.753020933 I0812 18:17:55.037076 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:17:55.085254 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:17:55.627699 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-08-12 18:17:55.627679574 +0000 UTC m=+2428.367358371 I0812 18:17:55.628485 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:17:55.628519 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-12 18:17:55.628512552 +0000 UTC m=+2428.368191319 E0812 18:17:55.650193 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 18:17:55.650228 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-08-12 18:17:55.650221247 +0000 UTC m=+2428.389900014 I0812 18:17:55.650265 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 18:17:55.656599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:17:55.656831 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:17:55.656905 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-12 18:17:55.65689792 +0000 UTC m=+2428.396576707 E0812 18:17:55.661689 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0812 18:17:55.661784 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0812 18:17:55.661871 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0812 18:17:55.662231 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0812 18:17:55.699583 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-jbnjp" condition "Approved" to 2026-08-12 18:17:55.699567063 +0000 UTC m=+2428.439245830 I0812 18:17:55.714930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-jbnjp" condition "Ready" to 2026-08-12 18:17:55.714918403 +0000 UTC m=+2428.454597170 I0812 18:17:55.735665 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:17:55.735654276 +0000 UTC m=+2428.475333053 I0812 18:17:55.758130 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:17:55.807752 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:17:56.407204 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-08-12 18:17:56.407189607 +0000 UTC m=+2429.146868374 I0812 18:17:56.407333 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:17:56.407590 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-12 18:17:56.407582596 +0000 UTC m=+2429.147261363 I0812 18:17:56.426221 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:17:56.426310 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:17:56.426328 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-12 18:17:56.426323634 +0000 UTC m=+2429.166002391 I0812 18:17:56.478675 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-vwp27" condition "Approved" to 2026-08-12 18:17:56.478659697 +0000 UTC m=+2429.218338464 I0812 18:17:56.494363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-vwp27" condition "Ready" to 2026-08-12 18:17:56.494349855 +0000 UTC m=+2429.234028622 I0812 18:17:59.920004 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:17:59.919982704 +0000 UTC m=+2432.659661511 I0812 18:17:59.932074 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-vwp27" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:17:59.93205913 +0000 UTC m=+2432.671737897 I0812 18:17:59.955981 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:17:59.955965995 +0000 UTC m=+2432.695644792 I0812 18:17:59.971868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:17:59.972134 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:17:59.972126694 +0000 UTC m=+2432.711805471 I0812 18:17:59.988507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:17:59.992504 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:18:00.670702 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:18:00.670693692 +0000 UTC m=+2433.410372459 I0812 18:20:12.257620 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:20:12.257737 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-08-12 18:20:12.257727259 +0000 UTC m=+2564.997406036 I0812 18:20:12.257634 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-08-12 18:20:12.257613626 +0000 UTC m=+2564.997292433 I0812 18:20:12.276024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:20:12.276130 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:20:12.276157 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-08-12 18:20:12.2761503 +0000 UTC m=+2565.015829077 I0812 18:20:12.558651 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:20:12.564403 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-bt4qs" condition "Approved" to 2026-08-12 18:20:12.564389563 +0000 UTC m=+2565.304068350 I0812 18:20:12.585113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-bt4qs" condition "Ready" to 2026-08-12 18:20:12.585097477 +0000 UTC m=+2565.324776274 I0812 18:20:12.614183 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:20:12.614168854 +0000 UTC m=+2565.353847631 I0812 18:20:12.635364 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:20:12.635986 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:20:12.635977324 +0000 UTC m=+2565.375656121 I0812 18:20:12.658629 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:20:12.659143 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:20:12.659129274 +0000 UTC m=+2565.398808041 I0812 18:20:58.715557 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-12 18:20:58.715542341 +0000 UTC m=+2611.455221118 I0812 18:20:58.734482 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:20:58.734534 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-12 18:20:58.734525345 +0000 UTC m=+2611.474204142 I0812 18:20:58.735399 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-12 18:20:58.735389806 +0000 UTC m=+2611.475068603 I0812 18:20:58.754904 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:20:58.754980 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-12 18:20:58.754970465 +0000 UTC m=+2611.494649242 E0812 18:20:58.765000 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0812 18:20:58.828438 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-12 18:20:58.828416657 +0000 UTC m=+2611.568095454 I0812 18:20:58.852763 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:20:58.852792 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-12 18:20:58.852776265 +0000 UTC m=+2611.592455072 I0812 18:20:58.852812 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-12 18:20:58.852802366 +0000 UTC m=+2611.592481163 I0812 18:20:58.871426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:20:58.871480 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:20:58.871493 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-12 18:20:58.871489073 +0000 UTC m=+2611.611167850 E0812 18:20:58.955557 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0812 18:20:59.086489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-7v5v7" condition "Approved" to 2026-08-12 18:20:59.086472238 +0000 UTC m=+2611.826150995 I0812 18:20:59.125501 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-7v5v7" condition "Ready" to 2026-08-12 18:20:59.125490152 +0000 UTC m=+2611.865168919 I0812 18:20:59.179554 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:20:59.17954229 +0000 UTC m=+2611.919221057 I0812 18:20:59.202639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:20:59.202894 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:20:59.202886365 +0000 UTC m=+2611.942565132 I0812 18:20:59.231807 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:20:59.736915 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-12 18:20:59.736900097 +0000 UTC m=+2612.476578874 I0812 18:20:59.760212 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:20:59.760244 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-12 18:20:59.760238041 +0000 UTC m=+2612.499916808 I0812 18:20:59.760419 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-12 18:20:59.760399496 +0000 UTC m=+2612.500078303 I0812 18:20:59.783477 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:20:59.783615 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:20:59.783664 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-12 18:20:59.783652288 +0000 UTC m=+2612.523331095 I0812 18:21:00.014371 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:21:00.024514 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-q5rl7" condition "Approved" to 2026-08-12 18:21:00.024500856 +0000 UTC m=+2612.764179623 I0812 18:21:00.046477 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-q5rl7" condition "Ready" to 2026-08-12 18:21:00.046456906 +0000 UTC m=+2612.786135713 I0812 18:21:00.079157 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:21:00.07913775 +0000 UTC m=+2612.818816527 I0812 18:21:00.105171 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:21:00.183620 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:21:00.323668 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-12 18:21:00.32365158 +0000 UTC m=+2613.063330347 I0812 18:21:00.348492 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:21:00.348535 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-12 18:21:00.348526196 +0000 UTC m=+2613.088204963 I0812 18:21:00.348915 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-12 18:21:00.348867644 +0000 UTC m=+2613.088546441 I0812 18:21:00.374419 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:21:00.374543 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:21:00.374594 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-12 18:21:00.37458311 +0000 UTC m=+2613.114261917 I0812 18:21:00.866346 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-12 18:21:00.866332097 +0000 UTC m=+2613.606010864 I0812 18:21:00.868176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-mzptd" condition "Approved" to 2026-08-12 18:21:00.868159399 +0000 UTC m=+2613.607838206 I0812 18:21:00.886522 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:21:00.886558 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-12 18:21:00.886549838 +0000 UTC m=+2613.626228615 I0812 18:21:00.887035 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-12 18:21:00.887004779 +0000 UTC m=+2613.626683546 I0812 18:21:00.891813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-mzptd" condition "Ready" to 2026-08-12 18:21:00.891805797 +0000 UTC m=+2613.631484574 I0812 18:21:00.901776 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:21:00.901855 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0812 18:21:00.901900 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-12 18:21:00.901894127 +0000 UTC m=+2613.641572904 I0812 18:21:00.925280 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:21:00.925268129 +0000 UTC m=+2613.664946906 I0812 18:21:00.944900 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:21:00.945172 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:21:00.945163462 +0000 UTC m=+2613.684842239 I0812 18:21:00.973962 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:21:01.134880 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-8xlnk" condition "Approved" to 2026-08-12 18:21:01.134869703 +0000 UTC m=+2613.874548470 I0812 18:21:01.239250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-8xlnk" condition "Ready" to 2026-08-12 18:21:01.239239189 +0000 UTC m=+2613.978917966 I0812 18:21:01.682295 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:21:01.682275629 +0000 UTC m=+2614.421954406 I0812 18:21:01.824873 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:21:01.825096 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-12 18:21:01.825089192 +0000 UTC m=+2614.564767959 I0812 18:21:02.088924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0812 18:21:02.128872 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"