I0901 04:20:23.782691 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0901 04:20:23.782862 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0901 04:20:23.782962 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0901 04:20:23.788769 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0901 04:20:23.789482 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0901 04:20:23.789517 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0901 04:20:23.789505 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0901 04:20:23.793376 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0901 04:20:23.809424 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0901 04:20:23.809742 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0901 04:20:23.809789 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0901 04:20:23.816955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0901 04:20:23.822362 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0901 04:20:23.829159 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0901 04:20:23.833278 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0901 04:20:23.837399 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0901 04:20:23.837467 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0901 04:20:23.840968 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0901 04:20:23.844090 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0901 04:20:23.847162 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0901 04:20:23.847187 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0901 04:20:23.847244 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0901 04:20:23.850684 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0901 04:20:23.855772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0901 04:20:23.860431 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0901 04:20:23.864248 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0901 04:20:23.864335 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0901 04:20:23.867846 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0901 04:20:23.871448 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0901 04:20:23.875767 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0901 04:20:23.880338 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0901 04:20:23.885368 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0901 04:20:23.888513 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0901 04:20:23.891971 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 04:20:23.892133 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 04:20:23.893994 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 04:20:23.893338 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 04:20:23.923028 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 04:20:23.947962 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 04:20:23.965475 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 04:20:23.983714 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 04:20:23.996189 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 04:20:24.022808 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0901 04:20:42.048959 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-01 04:20:42.048912893 +0000 UTC m=+18.309825560 I0901 04:20:43.037555 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-01 04:20:43.037517089 +0000 UTC m=+19.298429736 I0901 04:20:43.037747 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:20:43.037862 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-01 04:20:43.037850562 +0000 UTC m=+19.298763239 I0901 04:20:43.055395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:20:43.055476 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-01 04:20:43.055469174 +0000 UTC m=+19.316381821 E0901 04:20:43.059883 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0901 04:20:43.059928 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-01 04:20:43.059922896 +0000 UTC m=+19.320835533 E0901 04:20:43.059946 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 04:20:43.075923 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0901 04:20:43.076408 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 04:20:43.076699 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0901 04:20:43.076946 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0901 04:20:43.081093 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:20:43.106166 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fqtpg" condition "Approved" to 2026-09-01 04:20:43.106158015 +0000 UTC m=+19.367070652 I0901 04:20:43.119721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-fqtpg" condition "Ready" to 2026-09-01 04:20:43.1197122 +0000 UTC m=+19.380624837 I0901 04:20:43.141859 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:20:43.141849086 +0000 UTC m=+19.402761723 I0901 04:20:43.158472 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:20:48.077266 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:20:48.077255011 +0000 UTC m=+24.338167658 I0901 04:21:18.629456 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-01 04:21:18.629418313 +0000 UTC m=+54.890330960 I0901 04:21:18.629712 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:21:18.629790 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-01 04:21:18.629784608 +0000 UTC m=+54.890697255 I0901 04:21:18.651301 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-01 04:21:18.651282294 +0000 UTC m=+54.912194931 I0901 04:21:18.667448 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:21:18.667588 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:21:18.667615 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-01 04:21:18.667609224 +0000 UTC m=+54.928521861 I0901 04:21:18.835433 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wh2cp" condition "Approved" to 2026-09-01 04:21:18.835417224 +0000 UTC m=+55.096329861 I0901 04:21:18.903968 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-wh2cp" condition "Ready" to 2026-09-01 04:21:18.903959002 +0000 UTC m=+55.164871639 I0901 04:21:18.996701 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:21:18.996682993 +0000 UTC m=+55.257595650 I0901 04:21:19.025879 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:21:19.027249 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:21:19.027239631 +0000 UTC m=+55.288152268 I0901 04:21:19.044739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:21:19.048907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:21:19.049163 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:21:19.049156933 +0000 UTC m=+55.310069570 I0901 04:26:47.153774 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready" to 2026-09-01 04:26:47.153729194 +0000 UTC m=+383.414641831 I0901 04:26:47.154177 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-33.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:26:47.154620 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Issuing" to 2026-09-01 04:26:47.154586433 +0000 UTC m=+383.415499110 I0901 04:26:47.177789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:26:47.177899 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-33.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:26:47.177926 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Issuing" to 2026-09-01 04:26:47.177918429 +0000 UTC m=+383.438831106 I0901 04:26:47.436278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-33.nip.io-tls-tkkhv" condition "Approved" to 2026-09-01 04:26:47.436261987 +0000 UTC m=+383.697174664 I0901 04:26:47.469593 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-33.nip.io-tls-tkkhv" condition "Ready" to 2026-09-01 04:26:47.469575905 +0000 UTC m=+383.730488542 I0901 04:26:47.496579 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:26:47.496553587 +0000 UTC m=+383.757466224 I0901 04:26:47.513942 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:26:47.514352 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:26:47.514347442 +0000 UTC m=+383.775260079 I0901 04:26:47.537106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:26:47.538302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-33.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-33.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:26:47.538639 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-33.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:26:47.538633082 +0000 UTC m=+383.799545719 I0901 04:30:26.273682 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-01 04:30:26.273663747 +0000 UTC m=+602.534576384 I0901 04:30:26.274180 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:30:26.274269 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-01 04:30:26.274257942 +0000 UTC m=+602.535170619 I0901 04:30:26.295160 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:30:26.295218 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:30:26.295233 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-01 04:30:26.295227219 +0000 UTC m=+602.556139866 I0901 04:30:26.458612 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:30:26.467255 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-75q5w" condition "Approved" to 2026-09-01 04:30:26.467243355 +0000 UTC m=+602.728156002 I0901 04:30:26.487390 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-75q5w" condition "Ready" to 2026-09-01 04:30:26.487381186 +0000 UTC m=+602.748293823 I0901 04:30:26.511927 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:30:26.511918282 +0000 UTC m=+602.772830919 I0901 04:30:26.530649 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:30:26.530949 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:30:26.530943614 +0000 UTC m=+602.791856261 I0901 04:30:26.540972 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:30:26.548733 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:30:26.550079 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:30:26.550354 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:30:26.55034845 +0000 UTC m=+602.811261087 I0901 04:33:17.876392 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-01 04:33:17.876370847 +0000 UTC m=+774.137283494 I0901 04:33:17.876809 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:33:17.876830 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-01 04:33:17.876826295 +0000 UTC m=+774.137738952 I0901 04:33:17.893404 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:33:17.893469 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0901 04:33:17.893485 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-01 04:33:17.893479123 +0000 UTC m=+774.154391760 I0901 04:33:18.095138 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:33:18.108884 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7rh45" condition "Approved" to 2026-09-01 04:33:18.108875784 +0000 UTC m=+774.369788421 I0901 04:33:18.127735 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-7rh45" condition "Ready" to 2026-09-01 04:33:18.127725082 +0000 UTC m=+774.388637719 I0901 04:33:18.149367 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:33:18.14935239 +0000 UTC m=+774.410265027 I0901 04:33:18.168001 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:33:18.168976 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-01 04:33:18.168969982 +0000 UTC m=+774.429882619 I0901 04:33:18.171386 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0901 04:33:18.185181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again"