I0907 08:30:22.178805       1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0907 08:30:22.178917       1 client_config.go:659] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0907 08:30:22.181077       1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0907 08:30:22.181094       1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller"
I0907 08:30:22.181100       1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402"
I0907 08:30:22.181393       1 controller.go:178] "starting leader election" logger="cert-manager.controller"
I0907 08:30:22.181461       1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0907 08:30:22.181570       1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0907 08:30:22.183214       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0907 08:30:22.192939       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0907 08:30:22.196349       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0907 08:30:22.199708       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0907 08:30:22.201409       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0907 08:30:22.203145       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders"
I0907 08:30:22.204755       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0907 08:30:22.204867       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0907 08:30:22.206833       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0907 08:30:22.210580       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0907 08:30:22.212758       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0907 08:30:22.212788       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0907 08:30:22.212880       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0907 08:30:22.214957       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0907 08:30:22.216628       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0907 08:30:22.216669       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges"
I0907 08:30:22.218640       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0907 08:30:22.220496       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0907 08:30:22.222299       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0907 08:30:22.224100       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0907 08:30:22.224147       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0907 08:30:22.228130       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers"
I0907 08:30:22.230295       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0907 08:30:22.232583       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0907 08:30:22.234804       1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0907 08:30:22.235307       1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0907 08:30:22.237213       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0907 08:30:22.237216       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0907 08:30:22.237843       1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0907 08:30:22.237937       1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0907 08:30:22.238417       1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0907 08:30:22.251142       1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0907 08:30:22.268994       1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0907 08:30:22.282805       1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0907 08:30:22.312088       1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0907 08:30:22.332320       1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0907 08:30:22.349794       1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232
I0907 08:30:35.855400       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-07 08:30:35.855384145 +0000 UTC m=+13.703529937
I0907 08:30:36.644195       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:30:36.644234       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-07 08:30:36.644222327 +0000 UTC m=+14.492368119
I0907 08:30:36.644316       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 08:30:36.644300119 +0000 UTC m=+14.492445941
I0907 08:30:36.656266       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:30:36.656358       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-07 08:30:36.65634885 +0000 UTC m=+14.504494682
E0907 08:30:36.657022       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0907 08:30:36.658386       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-07 08:30:36.658369403 +0000 UTC m=+14.506515195
E0907 08:30:36.658461       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0907 08:30:36.671592       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
E0907 08:30:36.671888       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0907 08:30:36.671959       1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0907 08:30:36.671994       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere"
I0907 08:30:36.675454       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:30:36.705078       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-09-07 08:30:36.705058842 +0000 UTC m=+14.553204634
I0907 08:30:36.730959       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-09-07 08:30:36.73094739 +0000 UTC m=+14.579093182
I0907 08:30:36.754889       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:30:36.754866555 +0000 UTC m=+14.603012357
I0907 08:30:36.769703       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:30:41.672941       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:30:41.672927909 +0000 UTC m=+19.521073731
I0907 08:31:04.316290       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-07 08:31:04.31627782 +0000 UTC m=+42.164423612
I0907 08:31:04.316622       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:31:04.316726       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 08:31:04.316721932 +0000 UTC m=+42.164867724
I0907 08:31:04.325868       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-07 08:31:04.325857044 +0000 UTC m=+42.174002836
I0907 08:31:04.336964       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:31:04.337068       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:31:04.337097       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-07 08:31:04.337089693 +0000 UTC m=+42.185235485
I0907 08:31:04.539539       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:31:04.552455       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-09-07 08:31:04.552422139 +0000 UTC m=+42.400567941
I0907 08:31:04.589222       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-09-07 08:31:04.589202116 +0000 UTC m=+42.437347948
I0907 08:31:04.634289       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:31:04.634256092 +0000 UTC m=+42.482401894
I0907 08:31:04.663188       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:31:04.664138       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:31:04.664126725 +0000 UTC m=+42.512272547
I0907 08:31:04.680939       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:31:04.681625       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:31:04.681611099 +0000 UTC m=+42.529756901
I0907 08:32:40.471365       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-07 08:32:40.471307638 +0000 UTC m=+138.319453460
I0907 08:32:40.471564       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:32:40.471636       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-07 08:32:40.471624777 +0000 UTC m=+138.319770569
E0907 08:32:40.485113       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0907 08:32:40.485242       1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-07 08:32:40.485229645 +0000 UTC m=+138.333375467
I0907 08:32:40.485274       1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0907 08:32:40.487382       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:32:40.487532       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:32:40.487615       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-07 08:32:40.487599628 +0000 UTC m=+138.335745450
E0907 08:32:40.501265       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey"
E0907 08:32:40.502122       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0907 08:32:40.502206       1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0907 08:32:40.502262       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey"
I0907 08:32:40.505848       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-07 08:32:40.505826369 +0000 UTC m=+138.353972161
I0907 08:32:40.505875       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:32:40.505899       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-07 08:32:40.505892181 +0000 UTC m=+138.354038013
I0907 08:32:40.520629       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:32:40.520788       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-07 08:32:40.520773963 +0000 UTC m=+138.368919785
I0907 08:32:40.623057       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:32:40.662771       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-09-07 08:32:40.662754447 +0000 UTC m=+138.510900239
I0907 08:32:40.678938       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-09-07 08:32:40.678917374 +0000 UTC m=+138.527063196
I0907 08:32:40.693237       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-09-07 08:32:40.693224343 +0000 UTC m=+138.541370145
I0907 08:32:40.711394       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-09-07 08:32:40.711377724 +0000 UTC m=+138.559523526
I0907 08:32:40.739467       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:40.739446929 +0000 UTC m=+138.587592721
I0907 08:32:40.751616       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:32:40.752374       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:40.752363872 +0000 UTC m=+138.600509704
I0907 08:32:40.766353       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:32:40.771882       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:32:45.502841       1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:45.502826822 +0000 UTC m=+143.350972644
I0907 08:32:45.518972       1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:45.51895547 +0000 UTC m=+143.367101302
I0907 08:32:45.558868       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:45.558853248 +0000 UTC m=+143.406999060
I0907 08:32:45.573701       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:32:45.574378       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:32:45.57436953 +0000 UTC m=+143.422515342
I0907 08:32:45.586176       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:32:45.591581       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:35:52.866154       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-161.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:35:52.866213       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-161.nip.io-tls" condition "Issuing" to 2026-09-07 08:35:52.86619463 +0000 UTC m=+330.714340422
I0907 08:35:52.866256       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-161.nip.io-tls" condition "Ready" to 2026-09-07 08:35:52.866247431 +0000 UTC m=+330.714393223
I0907 08:35:52.877321       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-161.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-161.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:35:52.877387       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-161.nip.io-tls" condition "Ready" to 2026-09-07 08:35:52.877381297 +0000 UTC m=+330.725527089
I0907 08:35:53.136747       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-161.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-161.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:35:53.170206       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-161.nip.io-tls-1" condition "Approved" to 2026-09-07 08:35:53.170150231 +0000 UTC m=+331.018296013
I0907 08:35:53.183080       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-161.nip.io-tls-1" condition "Ready" to 2026-09-07 08:35:53.183071784 +0000 UTC m=+331.031217576
I0907 08:35:53.203651       1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-161.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:35:53.20364159 +0000 UTC m=+331.051787382
I0907 08:35:53.224129       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.162-253-55-161.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-161.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:05.190766       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-07 08:37:05.190715541 +0000 UTC m=+403.038861373
I0907 08:37:05.190946       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:37:05.191059       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 08:37:05.19104503 +0000 UTC m=+403.039190852
E0907 08:37:05.204956       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0907 08:37:05.205018       1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-07 08:37:05.205008123 +0000 UTC m=+403.053153925
E0907 08:37:05.205072       1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0907 08:37:05.210064       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:05.210201       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:37:05.210230       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-07 08:37:05.210218482 +0000 UTC m=+403.058364304
E0907 08:37:05.215118       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack"
E0907 08:37:05.215351       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0907 08:37:05.215443       1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0907 08:37:05.215531       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack"
I0907 08:37:05.265296       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-09-07 08:37:05.265270792 +0000 UTC m=+403.113416584
I0907 08:37:05.285757       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-09-07 08:37:05.285741899 +0000 UTC m=+403.133887691
I0907 08:37:05.306066       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:37:05.306049161 +0000 UTC m=+403.154194983
I0907 08:37:05.316782       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:05.317167       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:37:05.317156268 +0000 UTC m=+403.165302080
I0907 08:37:05.329874       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:05.335860       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:10.216396       1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:37:10.216384626 +0000 UTC m=+408.064530418
I0907 08:37:51.459470       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:37:51.459514       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 08:37:51.459504763 +0000 UTC m=+449.307650545
I0907 08:37:51.460394       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-07 08:37:51.460388007 +0000 UTC m=+449.308533799
I0907 08:37:51.480449       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-07 08:37:51.480430912 +0000 UTC m=+449.328576704
I0907 08:37:51.480632       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:37:51.480713       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 08:37:51.480699029 +0000 UTC m=+449.328844831
I0907 08:37:51.480986       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:37:51.481008       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 08:37:51.481003977 +0000 UTC m=+449.329149769
I0907 08:37:51.481546       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-07 08:37:51.481539822 +0000 UTC m=+449.329685614
I0907 08:37:51.484824       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:51.484919       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:37:51.485142       1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-07 08:37:51.485129488 +0000 UTC m=+449.333275310
I0907 08:37:51.502103       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:51.502426       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:37:51.502476       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-07 08:37:51.50245233 +0000 UTC m=+449.350598122
I0907 08:37:51.503003       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:51.503046       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:37:51.503071       1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-07 08:37:51.503067396 +0000 UTC m=+449.351213198
I0907 08:37:51.662568       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:51.663176       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-09-07 08:37:51.663163011 +0000 UTC m=+449.511308803
I0907 08:37:51.675999       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-09-07 08:37:51.675988963 +0000 UTC m=+449.524134755
I0907 08:37:51.701967       1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:37:51.701956877 +0000 UTC m=+449.550102669
I0907 08:37:51.719042       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:51.769033       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-09-07 08:37:51.769021468 +0000 UTC m=+449.617167260
I0907 08:37:51.769707       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:51.769724       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:51.779109       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-09-07 08:37:51.779098307 +0000 UTC m=+449.627244109
I0907 08:37:51.857688       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-09-07 08:37:51.857676695 +0000 UTC m=+449.705822517
I0907 08:37:52.208590       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-09-07 08:37:52.208580823 +0000 UTC m=+450.056726625
I0907 08:37:52.409572       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:37:52.409557799 +0000 UTC m=+450.257703591
I0907 08:37:52.653445       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:52.655601       1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:37:52.655582448 +0000 UTC m=+450.503728280
I0907 08:37:52.707932       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:37:52.707914865 +0000 UTC m=+450.556060697
I0907 08:37:53.052002       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:53.053191       1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:37:53.053177844 +0000 UTC m=+450.901323666
I0907 08:37:53.103457       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:53.151312       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:53.449949       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:37:53.501321       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:38:00.116522       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:38:00.116578       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls" condition "Issuing" to 2026-09-07 08:38:00.116565265 +0000 UTC m=+457.964711067
I0907 08:38:00.116974       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls" condition "Ready" to 2026-09-07 08:38:00.116953926 +0000 UTC m=+457.965099718
I0907 08:38:00.130323       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:38:00.130513       1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls" condition "Ready" to 2026-09-07 08:38:00.130443636 +0000 UTC m=+457.978589458
I0907 08:38:00.363974       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:38:00.401248       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls-1" condition "Approved" to 2026-09-07 08:38:00.401228926 +0000 UTC m=+458.249374738
I0907 08:38:00.423165       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls-1" condition "Ready" to 2026-09-07 08:38:00.423150291 +0000 UTC m=+458.271296113
I0907 08:38:00.451475       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:38:00.451462827 +0000 UTC m=+458.299608619
I0907 08:38:00.470848       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:38:00.472428       1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:38:00.472407547 +0000 UTC m=+458.320553339
I0907 08:38:00.485959       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:38:00.492455       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-zdzvc-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:38:22.220835       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:38:22.220879       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-07 08:38:22.220869479 +0000 UTC m=+480.069015301
I0907 08:38:22.221365       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-07 08:38:22.221319071 +0000 UTC m=+480.069464903
I0907 08:38:22.231248       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:38:22.231325       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:38:22.231392       1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-07 08:38:22.23138546 +0000 UTC m=+480.079531292
I0907 08:38:22.531323       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:38:22.543020       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-09-07 08:38:22.54300779 +0000 UTC m=+480.391153602
I0907 08:38:22.559887       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-09-07 08:38:22.559877791 +0000 UTC m=+480.408023593
I0907 08:38:22.585996       1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:38:22.585981288 +0000 UTC m=+480.434127090
I0907 08:38:22.600256       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:38:22.644952       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:41:51.750234       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:41:51.750350       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 08:41:51.750313524 +0000 UTC m=+689.598459316
I0907 08:41:51.750398       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-07 08:41:51.750384726 +0000 UTC m=+689.598530508
I0907 08:41:51.766537       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:41:51.766675       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:41:51.766713       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-07 08:41:51.766703732 +0000 UTC m=+689.614849554
I0907 08:41:52.122267       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:41:52.143345       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-09-07 08:41:52.143326506 +0000 UTC m=+689.991472338
I0907 08:41:52.161391       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-09-07 08:41:52.161379848 +0000 UTC m=+690.009525650
I0907 08:41:52.192101       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:41:52.192081978 +0000 UTC m=+690.040227780
I0907 08:41:52.211728       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:41:52.216503       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:41:52.21649176 +0000 UTC m=+690.064637572
I0907 08:41:52.217154       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:41:52.229311       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:41:52.230058       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:41:52.230047251 +0000 UTC m=+690.078193084
I0907 08:44:40.224873       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:44:40.224955       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-07 08:44:40.224921409 +0000 UTC m=+858.073067211
I0907 08:44:40.224984       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-07 08:44:40.22497879 +0000 UTC m=+858.073124582
I0907 08:44:40.237945       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:44:40.238383       1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-07 08:44:40.238354416 +0000 UTC m=+858.086500288
I0907 08:44:40.402223       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:44:40.437433       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Approved" to 2026-09-07 08:44:40.437410224 +0000 UTC m=+858.285556076
I0907 08:44:40.462987       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Ready" to 2026-09-07 08:44:40.462976024 +0000 UTC m=+858.311121816
I0907 08:44:40.488489       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:44:40.488476243 +0000 UTC m=+858.336622045
I0907 08:44:40.507192       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:44:40.508124       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:44:40.508114895 +0000 UTC m=+858.356260717
I0907 08:44:40.514137       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:44:40.523806       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:44:40.524505       1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:44:40.524495701 +0000 UTC m=+858.372641503
I0907 08:45:59.878517       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:45:59.878595       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-07 08:45:59.878557936 +0000 UTC m=+937.726703768
I0907 08:45:59.878586       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-07 08:45:59.878560016 +0000 UTC m=+937.726705818
I0907 08:45:59.896222       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:45:59.896358       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:45:59.896403       1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-07 08:45:59.896392982 +0000 UTC m=+937.744538814
I0907 08:46:00.159842       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:46:00.171264       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Approved" to 2026-09-07 08:46:00.171252468 +0000 UTC m=+938.019398270
I0907 08:46:00.207010       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Ready" to 2026-09-07 08:46:00.206997062 +0000 UTC m=+938.055142854
I0907 08:46:00.243558       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:46:00.243544358 +0000 UTC m=+938.091690160
I0907 08:46:00.265613       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:46:00.266164       1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:46:00.266157631 +0000 UTC m=+938.114303434
I0907 08:46:00.281253       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:49:22.138669       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-07 08:49:22.138633654 +0000 UTC m=+1139.986779456
I0907 08:49:22.138715       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:49:22.138770       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-07 08:49:22.138763217 +0000 UTC m=+1139.986909039
I0907 08:49:22.159394       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:49:22.159525       1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-07 08:49:22.159514282 +0000 UTC m=+1140.007660084
I0907 08:49:22.343566       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:49:22.383743       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Approved" to 2026-09-07 08:49:22.383724302 +0000 UTC m=+1140.231870134
I0907 08:49:22.401635       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Ready" to 2026-09-07 08:49:22.40162156 +0000 UTC m=+1140.249767362
I0907 08:49:22.424467       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:49:22.42444968 +0000 UTC m=+1140.272595462
I0907 08:49:22.440314       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:49:22.440983       1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:49:22.440976732 +0000 UTC m=+1140.289122524
I0907 08:49:22.461392       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:49:22.464510       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:57:19.830847       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:57:19.830973       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-07 08:57:19.830946885 +0000 UTC m=+1617.679092707
I0907 08:57:19.830972       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-07 08:57:19.830927994 +0000 UTC m=+1617.679073816
I0907 08:57:19.847627       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:57:19.847767       1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-07 08:57:19.847750432 +0000 UTC m=+1617.695896314
I0907 08:57:20.011230       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:57:20.047950       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Approved" to 2026-09-07 08:57:20.047941905 +0000 UTC m=+1617.896087697
I0907 08:57:20.066629       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Ready" to 2026-09-07 08:57:20.066620332 +0000 UTC m=+1617.914766124
I0907 08:57:20.097460       1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:57:20.097445044 +0000 UTC m=+1617.945590876
I0907 08:57:20.116858       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:59:08.162307       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-07 08:59:08.162233801 +0000 UTC m=+1726.010379593
I0907 08:59:08.162328       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:59:08.162370       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-07 08:59:08.162366754 +0000 UTC m=+1726.010512546
I0907 08:59:08.177877       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:59:08.178007       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 08:59:08.178048       1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-07 08:59:08.178038082 +0000 UTC m=+1726.026183924
I0907 08:59:08.371104       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 08:59:08.384798       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-09-07 08:59:08.384780359 +0000 UTC m=+1726.232926191
I0907 08:59:08.408479       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-09-07 08:59:08.408466201 +0000 UTC m=+1726.256612013
I0907 08:59:08.432778       1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 08:59:08.432766218 +0000 UTC m=+1726.280912010
I0907 08:59:08.450099       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:00:10.371622       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-07 09:00:10.371609584 +0000 UTC m=+1788.219755386
I0907 09:00:10.371776       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:00:10.371872       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-07 09:00:10.37185906 +0000 UTC m=+1788.220004882
I0907 09:00:10.381666       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:00:10.381779       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:00:10.381809       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-07 09:00:10.381801835 +0000 UTC m=+1788.229947637
I0907 09:00:10.437740       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-09-07 09:00:10.437728495 +0000 UTC m=+1788.285874297
I0907 09:00:10.451848       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-09-07 09:00:10.451837251 +0000 UTC m=+1788.299983053
I0907 09:00:10.482118       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:00:10.482104967 +0000 UTC m=+1788.330250769
I0907 09:00:10.497074       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:00:10.497380       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:00:10.497374554 +0000 UTC m=+1788.345520336
I0907 09:00:10.511727       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:00:11.042108       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-07 09:00:11.042083923 +0000 UTC m=+1788.890229765
I0907 09:00:11.042788       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:00:11.042824       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-07 09:00:11.042816993 +0000 UTC m=+1788.890962825
I0907 09:00:11.055951       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:00:11.056062       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:00:11.056100       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-07 09:00:11.056090337 +0000 UTC m=+1788.904236179
I0907 09:00:11.099954       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:00:11.103598       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-09-07 09:00:11.103585862 +0000 UTC m=+1788.951731654
I0907 09:00:11.117891       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-09-07 09:00:11.117880423 +0000 UTC m=+1788.966026235
I0907 09:00:11.144130       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:00:11.144116572 +0000 UTC m=+1788.992262374
I0907 09:00:11.155512       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:00:11.156049       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:00:11.156040969 +0000 UTC m=+1789.004186761
I0907 09:00:11.170823       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:00:11.780034       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-07 09:00:11.780025052 +0000 UTC m=+1789.628170844
I0907 09:00:12.464603       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-07 09:00:12.464592698 +0000 UTC m=+1790.312738490
I0907 09:00:58.634328       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:00:58.634373       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-07 09:00:58.634358452 +0000 UTC m=+1836.482504244
I0907 09:00:58.639152       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-07 09:00:58.633036666 +0000 UTC m=+1836.481182458
I0907 09:00:58.660752       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:00:58.667044       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-07 09:00:58.667026542 +0000 UTC m=+1836.515172324
I0907 09:00:59.063108       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:00:59.096812       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Approved" to 2026-09-07 09:00:59.096797563 +0000 UTC m=+1836.944943355
I0907 09:00:59.111415       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Ready" to 2026-09-07 09:00:59.111367641 +0000 UTC m=+1836.959513433
I0907 09:00:59.143274       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:00:59.14324703 +0000 UTC m=+1836.991392822
I0907 09:00:59.166551       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:00:59.169787       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:00:59.169770737 +0000 UTC m=+1837.017916529
I0907 09:00:59.194660       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:00:59.201465       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:03:57.654761       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:03:57.654788       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-07 09:03:57.654748871 +0000 UTC m=+2015.502894683
I0907 09:03:57.654809       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-07 09:03:57.654805073 +0000 UTC m=+2015.502950865
I0907 09:03:57.666437       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:03:57.666491       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:03:57.666505       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-07 09:03:57.666499834 +0000 UTC m=+2015.514645616
I0907 09:03:57.903467       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Approved" to 2026-09-07 09:03:57.903447787 +0000 UTC m=+2015.751593629
I0907 09:03:57.918720       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Ready" to 2026-09-07 09:03:57.918710194 +0000 UTC m=+2015.766855996
I0907 09:03:57.950026       1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:03:57.950015668 +0000 UTC m=+2015.798161460
I0907 09:03:57.972563       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:03:58.019444       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:03:59.124943       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:03:59.124991       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-07 09:03:59.124979153 +0000 UTC m=+2016.973124995
I0907 09:03:59.125027       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-07 09:03:59.125013554 +0000 UTC m=+2016.973159356
I0907 09:03:59.144814       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:03:59.144899       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:03:59.144930       1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-07 09:03:59.144922734 +0000 UTC m=+2016.993068536
I0907 09:03:59.328513       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Approved" to 2026-09-07 09:03:59.328504646 +0000 UTC m=+2017.176650438
I0907 09:03:59.346208       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Ready" to 2026-09-07 09:03:59.346195527 +0000 UTC m=+2017.194341329
I0907 09:03:59.381339       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:03:59.381322653 +0000 UTC m=+2017.229468475
I0907 09:03:59.395069       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:03:59.395637       1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:03:59.395629724 +0000 UTC m=+2017.243775516
I0907 09:03:59.411510       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:07:43.162758       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-07 09:07:43.162715133 +0000 UTC m=+2241.010860965
I0907 09:07:43.163468       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:07:43.163538       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-07 09:07:43.163528765 +0000 UTC m=+2241.011674597
I0907 09:07:43.178190       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:07:43.178333       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:07:43.178390       1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-07 09:07:43.178381021 +0000 UTC m=+2241.026526813
I0907 09:07:43.317145       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Approved" to 2026-09-07 09:07:43.317137192 +0000 UTC m=+2241.165282984
I0907 09:07:43.339487       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Ready" to 2026-09-07 09:07:43.339478908 +0000 UTC m=+2241.187624700
I0907 09:07:43.374778       1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:07:43.374769119 +0000 UTC m=+2241.222914911
I0907 09:07:43.398369       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:07:45.556674       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:07:45.556695       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-nsx2s-vnc" condition "Ready" to 2026-09-07 09:07:45.556678337 +0000 UTC m=+2243.404824129
I0907 09:07:45.556735       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-nsx2s-vnc" condition "Issuing" to 2026-09-07 09:07:45.556727219 +0000 UTC m=+2243.404873021
I0907 09:07:45.557089       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-nsx2s-api" condition "Ready" to 2026-09-07 09:07:45.557083758 +0000 UTC m=+2243.405229560
I0907 09:07:45.557220       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:07:45.557247       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-nsx2s-api" condition "Issuing" to 2026-09-07 09:07:45.557242692 +0000 UTC m=+2243.405388484
I0907 09:07:45.572575       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nsx2s-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:07:45.572733       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:07:45.572766       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-nsx2s-vnc" condition "Issuing" to 2026-09-07 09:07:45.572758206 +0000 UTC m=+2243.420903998
I0907 09:07:45.573192       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nsx2s-api\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:07:45.573253       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:07:45.573265       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-nsx2s-api" condition "Issuing" to 2026-09-07 09:07:45.57326222 +0000 UTC m=+2243.421408002
I0907 09:07:45.753099       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-nsx2s-vnc-1" condition "Approved" to 2026-09-07 09:07:45.753081975 +0000 UTC m=+2243.601227767
I0907 09:07:45.764711       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nsx2s-api\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:07:45.774839       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-nsx2s-vnc-1" condition "Ready" to 2026-09-07 09:07:45.774828395 +0000 UTC m=+2243.622974187
I0907 09:07:45.777731       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-nsx2s-api-1" condition "Approved" to 2026-09-07 09:07:45.777720652 +0000 UTC m=+2243.625866454
I0907 09:07:45.793087       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-nsx2s-api-1" condition "Ready" to 2026-09-07 09:07:45.793077382 +0000 UTC m=+2243.641223174
I0907 09:07:45.802674       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-nsx2s-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:07:45.802651297 +0000 UTC m=+2243.650797089
I0907 09:07:45.816223       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nsx2s-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:07:45.816813       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-nsx2s-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:07:45.816805404 +0000 UTC m=+2243.664951196
I0907 09:07:45.830082       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-nsx2s-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:07:45.830057298 +0000 UTC m=+2243.678203090
I0907 09:07:45.839684       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nsx2s-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:07:45.840323       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nsx2s-vnc\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:07:45.840957       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-nsx2s-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:07:45.840947148 +0000 UTC m=+2243.689092940
I0907 09:07:45.843934       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nsx2s-api\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:07:45.844532       1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-nsx2s-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:07:45.844526703 +0000 UTC m=+2243.692672495
I0907 09:07:45.858082       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nsx2s-api\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:07:45.861412       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-nsx2s-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-nsx2s-api\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:12:38.019139       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:12:38.019253       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-07 09:12:38.019207927 +0000 UTC m=+2535.867353749
I0907 09:12:38.019468       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-07 09:12:38.019452973 +0000 UTC m=+2535.867598855
I0907 09:12:38.031516       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:12:38.031611       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-07 09:12:38.031601757 +0000 UTC m=+2535.879747589
I0907 09:12:38.149721       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:12:38.183539       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Approved" to 2026-09-07 09:12:38.183527549 +0000 UTC m=+2536.031673341
I0907 09:12:38.201490       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Ready" to 2026-09-07 09:12:38.201477787 +0000 UTC m=+2536.049623579
I0907 09:12:38.225963       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:12:38.22594898 +0000 UTC m=+2536.074094772
I0907 09:12:38.243094       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:12:38.243574       1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:12:38.24356604 +0000 UTC m=+2536.091711832
I0907 09:12:38.255486       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:12:38.261970       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:12:39.514225       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-07 09:12:39.514212726 +0000 UTC m=+2537.362358548
I0907 09:12:39.514225       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:12:39.514325       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-07 09:12:39.514311038 +0000 UTC m=+2537.362456830
I0907 09:12:39.524760       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:12:39.524949       1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-07 09:12:39.524937161 +0000 UTC m=+2537.373082963
I0907 09:12:39.781245       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:12:39.807624       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Approved" to 2026-09-07 09:12:39.80760566 +0000 UTC m=+2537.655751482
I0907 09:12:39.831128       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Ready" to 2026-09-07 09:12:39.831117267 +0000 UTC m=+2537.679263059
I0907 09:12:39.866881       1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:12:39.86687078 +0000 UTC m=+2537.715016572
I0907 09:12:39.881830       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:14:56.753565       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-07 09:14:56.75352392 +0000 UTC m=+2674.601669712
I0907 09:14:56.753604       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:14:56.753665       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-07 09:14:56.753657944 +0000 UTC m=+2674.601803766
I0907 09:14:56.764945       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:14:56.765030       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-07 09:14:56.765022817 +0000 UTC m=+2674.613168609
E0907 09:14:56.765434       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0907 09:14:56.765487       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-07 09:14:56.765482419 +0000 UTC m=+2674.613628211
I0907 09:14:56.765509       1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0907 09:14:56.772918       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client"
E0907 09:14:56.773014       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0907 09:14:56.773036       1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0907 09:14:56.773068       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client"
I0907 09:14:56.787218       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:14:56.813639       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Approved" to 2026-09-07 09:14:56.813622792 +0000 UTC m=+2674.661768604
I0907 09:14:56.829257       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Ready" to 2026-09-07 09:14:56.829246399 +0000 UTC m=+2674.677392191
I0907 09:14:56.846238       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:14:56.846227132 +0000 UTC m=+2674.694372924
I0907 09:14:56.861081       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:14:56.861739       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:14:56.861733205 +0000 UTC m=+2674.709878997
I0907 09:14:56.866978       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:14:56.877448       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:14:56.877797       1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:14:56.877789373 +0000 UTC m=+2674.725935155
I0907 09:14:57.425931       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-07 09:14:57.425918396 +0000 UTC m=+2675.274064188
I0907 09:14:57.426067       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:14:57.426112       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-07 09:14:57.426104531 +0000 UTC m=+2675.274250323
E0907 09:14:57.435232       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0907 09:14:57.435271       1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-07 09:14:57.435263645 +0000 UTC m=+2675.283409437
I0907 09:14:57.435316       1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0907 09:14:57.435903       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:14:57.435985       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:14:57.436006       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-07 09:14:57.436001885 +0000 UTC m=+2675.284147677
E0907 09:14:57.443036       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server"
E0907 09:14:57.443240       1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0907 09:14:57.443268       1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0907 09:14:57.443307       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server"
I0907 09:14:57.473614       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Approved" to 2026-09-07 09:14:57.473600268 +0000 UTC m=+2675.321746060
I0907 09:14:57.485195       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Ready" to 2026-09-07 09:14:57.485186837 +0000 UTC m=+2675.333332629
I0907 09:14:57.502528       1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:14:57.502516228 +0000 UTC m=+2675.350662020
I0907 09:14:57.518897       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:14:58.179329       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-07 09:14:58.179315052 +0000 UTC m=+2676.027460854
I0907 09:14:58.179724       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:14:58.179742       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-07 09:14:58.179738263 +0000 UTC m=+2676.027884065
I0907 09:14:58.189520       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:14:58.189601       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-07 09:14:58.189593646 +0000 UTC m=+2676.037739448
I0907 09:14:58.207694       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:14:58.231577       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Approved" to 2026-09-07 09:14:58.231565245 +0000 UTC m=+2676.079711037
I0907 09:14:58.246067       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Ready" to 2026-09-07 09:14:58.246056211 +0000 UTC m=+2676.094202003
I0907 09:15:01.774232       1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:15:01.774218803 +0000 UTC m=+2679.622364625
I0907 09:15:01.792793       1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:15:01.792782308 +0000 UTC m=+2679.640928110
I0907 09:15:01.820728       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:15:01.820705163 +0000 UTC m=+2679.668850995
I0907 09:15:01.839995       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:15:01.840389       1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:15:01.840379127 +0000 UTC m=+2679.688524929
I0907 09:15:01.855505       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:15:02.444092       1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:15:02.444076891 +0000 UTC m=+2680.292222703
I0907 09:17:43.252810       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-07 09:17:43.252782013 +0000 UTC m=+2841.100927805
I0907 09:17:43.253309       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:17:43.253325       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-07 09:17:43.253321978 +0000 UTC m=+2841.101467760
I0907 09:17:43.264392       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:17:43.264442       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:17:43.264454       1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-07 09:17:43.264450124 +0000 UTC m=+2841.112595916
I0907 09:17:43.437145       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:17:43.451990       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Approved" to 2026-09-07 09:17:43.451968744 +0000 UTC m=+2841.300114586
I0907 09:17:43.474811       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Ready" to 2026-09-07 09:17:43.474800802 +0000 UTC m=+2841.322946594
I0907 09:17:43.510398       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:17:43.510387181 +0000 UTC m=+2841.358532983
I0907 09:17:43.527394       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:17:43.527747       1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:17:43.527742354 +0000 UTC m=+2841.375888146
I0907 09:17:43.544853       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:17:43.548810       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:31.631487       1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-07 09:18:31.631476573 +0000 UTC m=+2889.479622365
I0907 09:18:31.653965       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-07 09:18:31.653946602 +0000 UTC m=+2889.502092424
I0907 09:18:31.654217       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:18:31.654274       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-07 09:18:31.6542628 +0000 UTC m=+2889.502408602
I0907 09:18:31.667231       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:31.667331       1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-07 09:18:31.667320358 +0000 UTC m=+2889.515466190
E0907 09:18:31.685780       1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller"
I0907 09:18:31.732323       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-07 09:18:31.732292571 +0000 UTC m=+2889.580438373
I0907 09:18:31.752339       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-07 09:18:31.752318305 +0000 UTC m=+2889.600464147
I0907 09:18:31.752440       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:18:31.752477       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-07 09:18:31.752467509 +0000 UTC m=+2889.600613301
E0907 09:18:31.766979       1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert"
I0907 09:18:31.771602       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:31.771672       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:18:31.771705       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-07 09:18:31.771695471 +0000 UTC m=+2889.619841273
I0907 09:18:32.045736       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-09-07 09:18:32.045723907 +0000 UTC m=+2889.893869699
I0907 09:18:32.073667       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-09-07 09:18:32.073658131 +0000 UTC m=+2889.921803923
I0907 09:18:32.115330       1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:18:32.115318152 +0000 UTC m=+2889.963463944
I0907 09:18:32.137314       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:32.662075       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-07 09:18:32.662062879 +0000 UTC m=+2890.510208671
I0907 09:18:32.677139       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-07 09:18:32.67712824 +0000 UTC m=+2890.525274042
I0907 09:18:32.677808       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:18:32.677857       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-07 09:18:32.677848369 +0000 UTC m=+2890.525994171
I0907 09:18:32.687854       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:32.688034       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-07 09:18:32.688025571 +0000 UTC m=+2890.536171383
I0907 09:18:32.859311       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:32.897994       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-09-07 09:18:32.897977838 +0000 UTC m=+2890.746123630
I0907 09:18:32.917451       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-09-07 09:18:32.917438067 +0000 UTC m=+2890.765583859
I0907 09:18:32.951460       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:18:32.951450324 +0000 UTC m=+2890.799596116
I0907 09:18:32.967941       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:33.169532       1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-07 09:18:33.169519128 +0000 UTC m=+2891.017664920
I0907 09:18:33.186100       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:18:33.186142       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-07 09:18:33.186134331 +0000 UTC m=+2891.034280123
I0907 09:18:33.186324       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-07 09:18:33.186311085 +0000 UTC m=+2891.034456877
I0907 09:18:33.196437       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:33.196526       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:18:33.196573       1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-07 09:18:33.196550497 +0000 UTC m=+2891.044696289
I0907 09:18:33.532361       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-09-07 09:18:33.53235137 +0000 UTC m=+2891.380497162
I0907 09:18:33.548867       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-09-07 09:18:33.54885833 +0000 UTC m=+2891.397004122
I0907 09:18:33.588846       1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:18:33.588835246 +0000 UTC m=+2891.436981038
I0907 09:18:33.606269       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:33.850122       1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-07 09:18:33.850109322 +0000 UTC m=+2891.698255114
I0907 09:18:33.891192       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-07 09:18:33.891174096 +0000 UTC m=+2891.739319898
I0907 09:18:33.891648       1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0907 09:18:33.891679       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-07 09:18:33.89167272 +0000 UTC m=+2891.739818522
I0907 09:18:33.905330       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:33.905412       1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-07 09:18:33.905403356 +0000 UTC m=+2891.753549168
I0907 09:18:34.070035       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:34.145715       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-09-07 09:18:34.145699412 +0000 UTC m=+2891.993845204
I0907 09:18:34.221170       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-09-07 09:18:34.221151694 +0000 UTC m=+2892.069297486
I0907 09:18:34.601979       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:18:34.601966646 +0000 UTC m=+2892.450112438
I0907 09:18:34.740191       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:34.740580       1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-07 09:18:34.740573272 +0000 UTC m=+2892.588719064
I0907 09:18:34.990645       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:35.040380       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"
I0907 09:18:35.135868       1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"