I0910 11:07:44.590194 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0910 11:07:44.590394 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0910 11:07:44.590518 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0910 11:07:44.595480 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0910 11:07:44.595886 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0910 11:07:44.595900 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0910 11:07:44.595965 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0910 11:07:44.601074 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0910 11:07:44.613549 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0910 11:07:44.616346 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0910 11:07:44.619021 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0910 11:07:44.621031 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0910 11:07:44.621287 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0910 11:07:44.623741 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0910 11:07:44.623762 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0910 11:07:44.623769 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0910 11:07:44.623821 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0910 11:07:44.627624 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0910 11:07:44.630744 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0910 11:07:44.632967 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0910 11:07:44.635069 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0910 11:07:44.637262 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0910 11:07:44.637344 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0910 11:07:44.639705 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0910 11:07:44.642278 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0910 11:07:44.644572 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0910 11:07:44.646773 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0910 11:07:44.649275 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0910 11:07:44.654505 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0910 11:07:44.658494 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0910 11:07:44.661439 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0910 11:07:44.665394 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0910 11:07:44.665780 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0910 11:07:44.668326 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:07:44.668705 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:07:44.669106 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:07:44.687419 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:07:44.704619 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:07:44.720677 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:07:44.735379 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:07:44.747222 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:07:44.750213 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:07:44.763141 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 11:07:57.859022 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-10 11:07:57.859009551 +0000 UTC m=+13.301590982 I0910 11:07:58.657112 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 11:07:58.657100273 +0000 UTC m=+14.099681704 I0910 11:07:58.657903 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:07:58.658085 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 11:07:58.658032734 +0000 UTC m=+14.100614195 E0910 11:07:58.728152 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:07:58.728215 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-10 11:07:58.728209612 +0000 UTC m=+14.170791043 E0910 11:07:58.728233 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:07:58.734835 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:07:58.734975 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:07:58.735037 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 11:07:58.735024014 +0000 UTC m=+14.177605495 E0910 11:07:58.746484 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0910 11:07:58.746576 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:07:58.746631 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:07:58.746673 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0910 11:07:58.816144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:07:58.823864 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rq6tk" condition "Approved" to 2026-09-10 11:07:58.823847056 +0000 UTC m=+14.266428487 I0910 11:07:58.840460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-rq6tk" condition "Ready" to 2026-09-10 11:07:58.840446321 +0000 UTC m=+14.283027752 I0910 11:07:58.864208 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:07:58.864191726 +0000 UTC m=+14.306773157 I0910 11:07:58.882082 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:07:58.882532 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:07:58.882523881 +0000 UTC m=+14.325105322 I0910 11:07:58.919716 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:07:58.920200 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:07:58.920445 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:07:58.920437182 +0000 UTC m=+14.363018613 I0910 11:08:03.747533 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:03.747506745 +0000 UTC m=+19.190088216 I0910 11:08:23.740238 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 11:08:23.740221949 +0000 UTC m=+39.182803390 I0910 11:08:23.740267 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:23.740312 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 11:08:23.740300911 +0000 UTC m=+39.182882372 I0910 11:08:23.755073 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-10 11:08:23.755006037 +0000 UTC m=+39.197587508 I0910 11:08:23.778139 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:23.778220 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:08:23.778246 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 11:08:23.778238391 +0000 UTC m=+39.220819822 I0910 11:08:24.180554 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:24.201825 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-24vnh" condition "Approved" to 2026-09-10 11:08:24.201792961 +0000 UTC m=+39.644374422 I0910 11:08:24.316836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-24vnh" condition "Ready" to 2026-09-10 11:08:24.316825696 +0000 UTC m=+39.759407137 I0910 11:08:24.478470 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:24.478458493 +0000 UTC m=+39.921039914 I0910 11:08:24.500590 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:24.500920 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:08:24.500914629 +0000 UTC m=+39.943496060 I0910 11:08:24.504708 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:08:24.523680 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:58.871158 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-10 11:09:58.871136946 +0000 UTC m=+134.313718377 I0910 11:09:58.871448 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:09:58.871479 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-10 11:09:58.871474674 +0000 UTC m=+134.314056105 E0910 11:09:58.892577 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:09:58.892706 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-10 11:09:58.892691786 +0000 UTC m=+134.335273237 I0910 11:09:58.892747 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:09:58.895964 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:58.896058 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:09:58.896082 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-10 11:09:58.896076202 +0000 UTC m=+134.338657633 E0910 11:09:58.906794 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0910 11:09:58.906828 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:09:58.906856 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-10 11:09:58.906848068 +0000 UTC m=+134.349429489 E0910 11:09:58.906948 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:09:58.906980 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 11:09:58.907022 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0910 11:09:58.907099 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-10 11:09:58.907092043 +0000 UTC m=+134.349673474 I0910 11:09:58.922522 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:58.922685 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-10 11:09:58.922675317 +0000 UTC m=+134.365256748 I0910 11:09:58.990741 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:59.023242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-sv4md" condition "Approved" to 2026-09-10 11:09:59.023224812 +0000 UTC m=+134.465806253 I0910 11:09:59.049725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-sv4md" condition "Ready" to 2026-09-10 11:09:59.049708135 +0000 UTC m=+134.492289566 I0910 11:09:59.077226 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:59.087692 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5hmx5" condition "Approved" to 2026-09-10 11:09:59.087679377 +0000 UTC m=+134.530260808 I0910 11:09:59.109523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-5hmx5" condition "Ready" to 2026-09-10 11:09:59.109513054 +0000 UTC m=+134.552094485 I0910 11:09:59.133050 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:09:59.133034137 +0000 UTC m=+134.575615568 I0910 11:09:59.150363 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:59.151522 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:09:59.151512948 +0000 UTC m=+134.594094379 I0910 11:09:59.153846 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:59.167663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:09:59.167865 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:09:59.167858469 +0000 UTC m=+134.610439900 I0910 11:10:03.907721 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:03.907705512 +0000 UTC m=+139.350286973 I0910 11:10:03.919257 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-sv4md" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:03.919246114 +0000 UTC m=+139.361827565 I0910 11:10:03.946380 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:03.94636604 +0000 UTC m=+139.388947471 I0910 11:10:03.962791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:10:03.963134 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:10:03.963125941 +0000 UTC m=+139.405707372 I0910 11:10:03.977960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:12:56.320021 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-93.nip.io-tls" condition "Ready" to 2026-09-10 11:12:56.320000402 +0000 UTC m=+311.762581843 I0910 11:12:56.320108 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-93.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:12:56.320353 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-93.nip.io-tls" condition "Issuing" to 2026-09-10 11:12:56.320330151 +0000 UTC m=+311.762911582 I0910 11:12:56.358395 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-93.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-93.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:12:56.358457 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-93.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:12:56.358514 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-93.nip.io-tls" condition "Issuing" to 2026-09-10 11:12:56.35846748 +0000 UTC m=+311.801048941 I0910 11:12:56.767895 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-93.nip.io-tls-xtn5t" condition "Approved" to 2026-09-10 11:12:56.767874331 +0000 UTC m=+312.210455772 I0910 11:12:56.789677 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-93.nip.io-tls-xtn5t" condition "Ready" to 2026-09-10 11:12:56.789665585 +0000 UTC m=+312.232247026 I0910 11:12:56.817239 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-93.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:12:56.817224206 +0000 UTC m=+312.259805637 I0910 11:12:56.837113 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-93.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-93.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:12:56.840546 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-93.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:12:56.840536419 +0000 UTC m=+312.283117860 I0910 11:12:56.847811 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.162-253-55-93.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-93.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:12:56.863639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-93.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-93.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:12:56.863992 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-93.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:12:56.863984925 +0000 UTC m=+312.306566356 I0910 11:14:12.931746 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:14:12.932194 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 11:14:12.932179722 +0000 UTC m=+388.374761163 I0910 11:14:12.932289 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 11:14:12.932257895 +0000 UTC m=+388.374839366 I0910 11:14:12.946778 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:12.946908 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 11:14:12.946899983 +0000 UTC m=+388.389481454 E0910 11:14:12.949667 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 11:14:12.949725 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-10 11:14:12.94971606 +0000 UTC m=+388.392297531 E0910 11:14:12.949792 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:14:12.970862 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0910 11:14:12.971014 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:14:12.971056 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 11:14:12.971106 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0910 11:14:12.973114 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:12.998166 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vj49z" condition "Approved" to 2026-09-10 11:14:12.998147926 +0000 UTC m=+388.440729357 I0910 11:14:13.013088 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-vj49z" condition "Ready" to 2026-09-10 11:14:13.013072451 +0000 UTC m=+388.455653882 I0910 11:14:13.037671 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:14:13.037645767 +0000 UTC m=+388.480227198 I0910 11:14:13.058509 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:13.058917 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:14:13.058905884 +0000 UTC m=+388.501487315 I0910 11:14:13.083184 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:14:17.971473 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:14:17.971458408 +0000 UTC m=+393.414039879 I0910 11:15:01.524060 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 11:15:01.524041499 +0000 UTC m=+436.966622930 I0910 11:15:01.524086 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:15:01.524225 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 11:15:01.524215624 +0000 UTC m=+436.966797055 I0910 11:15:01.532405 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 11:15:01.532386147 +0000 UTC m=+436.974967578 I0910 11:15:01.532904 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:15:01.533096 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 11:15:01.533068053 +0000 UTC m=+436.975649514 I0910 11:15:01.533167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:15:01.533196 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 11:15:01.533190236 +0000 UTC m=+436.975771667 I0910 11:15:01.534124 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 11:15:01.53377565 +0000 UTC m=+436.976357081 I0910 11:15:01.578687 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:01.578754 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:15:01.578776 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 11:15:01.578767868 +0000 UTC m=+437.021349299 I0910 11:15:01.582421 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:01.582432 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:01.582551 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:15:01.582620 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 11:15:01.582613059 +0000 UTC m=+437.025194490 I0910 11:15:01.582574 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 11:15:01.582564148 +0000 UTC m=+437.025145579 I0910 11:15:01.721326 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:01.791093 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-26xrl" condition "Approved" to 2026-09-10 11:15:01.791071016 +0000 UTC m=+437.233652457 I0910 11:15:01.832774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-26xrl" condition "Ready" to 2026-09-10 11:15:01.832759935 +0000 UTC m=+437.275341366 I0910 11:15:01.883190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:01.885100 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mbpwp" condition "Approved" to 2026-09-10 11:15:01.885081916 +0000 UTC m=+437.327663397 I0910 11:15:01.900009 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zmnqg" condition "Approved" to 2026-09-10 11:15:01.899990991 +0000 UTC m=+437.342572442 I0910 11:15:01.915566 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-mbpwp" condition "Ready" to 2026-09-10 11:15:01.91555053 +0000 UTC m=+437.358131951 I0910 11:15:01.934176 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:15:01.934156321 +0000 UTC m=+437.376737752 I0910 11:15:01.956576 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-zmnqg" condition "Ready" to 2026-09-10 11:15:01.956562343 +0000 UTC m=+437.399143764 I0910 11:15:02.041204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:02.041628 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:15:02.041618792 +0000 UTC m=+437.484200223 I0910 11:15:02.231679 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:15:02.231657961 +0000 UTC m=+437.674239392 I0910 11:15:02.588202 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:02.588673 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:15:02.588659944 +0000 UTC m=+438.031241375 I0910 11:15:02.657577 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:15:02.657565268 +0000 UTC m=+438.100146709 I0910 11:15:02.689734 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:02.761308 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:02.988120 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:02.988538 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:15:02.988526902 +0000 UTC m=+438.431108343 I0910 11:15:03.088602 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:03.343190 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:17.815048 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m2swx-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:15:17.815117 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m2swx-tls" condition "Issuing" to 2026-09-10 11:15:17.815103819 +0000 UTC m=+453.257685260 I0910 11:15:17.815051 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m2swx-tls" condition "Ready" to 2026-09-10 11:15:17.815025487 +0000 UTC m=+453.257606918 I0910 11:15:17.847007 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m2swx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m2swx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:17.847355 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-m2swx-tls" condition "Ready" to 2026-09-10 11:15:17.847346004 +0000 UTC m=+453.289927465 I0910 11:15:18.104035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m2swx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m2swx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:15:18.223228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m2swx-2mzp4" condition "Approved" to 2026-09-10 11:15:18.223206343 +0000 UTC m=+453.665787784 I0910 11:15:18.262145 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-m2swx-2mzp4" condition "Ready" to 2026-09-10 11:15:18.262134337 +0000 UTC m=+453.704715768 I0910 11:15:18.316123 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-m2swx-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:15:18.316104669 +0000 UTC m=+453.758686100 I0910 11:15:18.350925 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-m2swx-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-m2swx-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:03.856516 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 11:16:03.856491922 +0000 UTC m=+499.299073383 I0910 11:16:03.856672 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:16:03.856738 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 11:16:03.856727818 +0000 UTC m=+499.299309249 I0910 11:16:03.884037 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:03.884172 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 11:16:03.884159476 +0000 UTC m=+499.326740907 I0910 11:16:04.523391 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:04.569958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vzgf9" condition "Approved" to 2026-09-10 11:16:04.569944413 +0000 UTC m=+500.012525844 I0910 11:16:04.596588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-vzgf9" condition "Ready" to 2026-09-10 11:16:04.596573528 +0000 UTC m=+500.039154959 I0910 11:16:04.715027 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:04.715003598 +0000 UTC m=+500.157585049 I0910 11:16:04.776362 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:16:04.776829 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:16:04.776821704 +0000 UTC m=+500.219403135 I0910 11:16:04.821006 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:19:28.000014 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 11:19:27.999974079 +0000 UTC m=+703.442555530 I0910 11:19:28.000343 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:19:28.000366 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 11:19:28.000361559 +0000 UTC m=+703.442943020 I0910 11:19:28.024074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:19:28.024175 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:19:28.024199 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 11:19:28.024190281 +0000 UTC m=+703.466771742 I0910 11:19:28.155902 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5mltv" condition "Approved" to 2026-09-10 11:19:28.155890531 +0000 UTC m=+703.598471962 I0910 11:19:28.189531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-5mltv" condition "Ready" to 2026-09-10 11:19:28.189511828 +0000 UTC m=+703.632093259 I0910 11:19:28.241131 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:19:28.241114065 +0000 UTC m=+703.683695536 I0910 11:19:28.270133 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:19:28.332159 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:22:10.457137 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:22:10.457338 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-10 11:22:10.457277996 +0000 UTC m=+865.899859467 I0910 11:22:10.457403 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-10 11:22:10.457394369 +0000 UTC m=+865.899975850 I0910 11:22:10.516147 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:22:10.516243 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:22:10.516271 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-10 11:22:10.516263241 +0000 UTC m=+865.958844702 I0910 11:22:10.794114 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-txnjt" condition "Approved" to 2026-09-10 11:22:10.794100853 +0000 UTC m=+866.236682304 I0910 11:22:10.858802 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-txnjt" condition "Ready" to 2026-09-10 11:22:10.858792484 +0000 UTC m=+866.301373915 I0910 11:22:10.925291 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:22:10.925279299 +0000 UTC m=+866.367860730 I0910 11:22:10.955712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:23:36.513937 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-10 11:23:36.513925763 +0000 UTC m=+951.956507194 I0910 11:23:36.514336 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:23:36.514369 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-10 11:23:36.514361584 +0000 UTC m=+951.956943015 I0910 11:23:36.547909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:23:36.547999 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:23:36.548027 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-10 11:23:36.548021962 +0000 UTC m=+951.990603393 I0910 11:23:36.746898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vwf78" condition "Approved" to 2026-09-10 11:23:36.746887106 +0000 UTC m=+952.189468547 I0910 11:23:36.784732 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-vwf78" condition "Ready" to 2026-09-10 11:23:36.784719851 +0000 UTC m=+952.227301292 I0910 11:23:36.831202 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:23:36.831188069 +0000 UTC m=+952.273769520 I0910 11:23:36.867762 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:23:36.868559 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:23:36.868547983 +0000 UTC m=+952.311129444 I0910 11:23:36.942549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:26:50.106780 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-10 11:26:50.106722943 +0000 UTC m=+1145.549304384 I0910 11:26:50.106837 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:26:50.106920 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-10 11:26:50.106910817 +0000 UTC m=+1145.549492278 I0910 11:26:50.138014 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:26:50.138196 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:26:50.138241 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-10 11:26:50.138233863 +0000 UTC m=+1145.580815294 I0910 11:26:50.433366 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:26:50.455620 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4v26v" condition "Approved" to 2026-09-10 11:26:50.455611587 +0000 UTC m=+1145.898193008 I0910 11:26:50.477831 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-4v26v" condition "Ready" to 2026-09-10 11:26:50.477805274 +0000 UTC m=+1145.920386735 I0910 11:26:50.514229 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:26:50.51421243 +0000 UTC m=+1145.956793851 I0910 11:26:50.553737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:26:50.554114 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:26:50.554107159 +0000 UTC m=+1145.996688590 I0910 11:26:50.589699 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:34:55.203110 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:34:55.203173 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-10 11:34:55.203136188 +0000 UTC m=+1630.645717639 I0910 11:34:55.203529 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-10 11:34:55.203500236 +0000 UTC m=+1630.646081707 I0910 11:34:55.229774 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:34:55.229860 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-10 11:34:55.229851389 +0000 UTC m=+1630.672432820 I0910 11:34:55.774555 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:34:55.816843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-9jtn7" condition "Approved" to 2026-09-10 11:34:55.816828779 +0000 UTC m=+1631.259410250 I0910 11:34:55.843913 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-9jtn7" condition "Ready" to 2026-09-10 11:34:55.843897789 +0000 UTC m=+1631.286479260 I0910 11:34:55.892867 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:34:55.892845424 +0000 UTC m=+1631.335426915 I0910 11:34:55.919640 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:34:55.919919 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:34:55.919912003 +0000 UTC m=+1631.362493444 I0910 11:34:55.952474 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:30.848189 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-10 11:36:30.848161401 +0000 UTC m=+1726.290742872 I0910 11:36:30.848314 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:36:30.848409 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-10 11:36:30.848397156 +0000 UTC m=+1726.290978597 I0910 11:36:30.874546 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:30.874690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:36:30.874717 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-10 11:36:30.874710521 +0000 UTC m=+1726.317291962 I0910 11:36:31.099258 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-6h9dp" condition "Approved" to 2026-09-10 11:36:31.099236258 +0000 UTC m=+1726.541817729 I0910 11:36:31.128278 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-6h9dp" condition "Ready" to 2026-09-10 11:36:31.128260567 +0000 UTC m=+1726.570841998 I0910 11:36:31.173405 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:36:31.17336895 +0000 UTC m=+1726.615950381 I0910 11:36:31.199804 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:31.200326 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:36:31.200314981 +0000 UTC m=+1726.642896452 I0910 11:36:31.216030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:31.221083 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:36:31.221474 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:36:31.221448595 +0000 UTC m=+1726.664030046 I0910 11:37:35.074535 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-10 11:37:35.074510009 +0000 UTC m=+1790.517091450 I0910 11:37:35.075291 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:37:35.075380 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-10 11:37:35.075362359 +0000 UTC m=+1790.517943830 I0910 11:37:35.097030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:37:35.097171 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:37:35.097209 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-10 11:37:35.09719729 +0000 UTC m=+1790.539778751 I0910 11:37:35.161137 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:37:35.166046 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-r8dns" condition "Approved" to 2026-09-10 11:37:35.166022019 +0000 UTC m=+1790.608603480 I0910 11:37:35.196589 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-r8dns" condition "Ready" to 2026-09-10 11:37:35.196575163 +0000 UTC m=+1790.639156594 I0910 11:37:35.234266 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:37:35.234238583 +0000 UTC m=+1790.676820054 I0910 11:37:35.263817 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:37:35.264421 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:37:35.264411688 +0000 UTC m=+1790.706993119 I0910 11:37:35.289066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:37:35.815076 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-10 11:37:35.815051446 +0000 UTC m=+1791.257632907 I0910 11:37:35.815425 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:37:35.815518 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-10 11:37:35.815498887 +0000 UTC m=+1791.258080348 I0910 11:37:35.849895 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:37:35.850098 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-10 11:37:35.850057334 +0000 UTC m=+1791.292638805 I0910 11:37:35.884105 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:37:35.921029 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-sqkzt" condition "Approved" to 2026-09-10 11:37:35.921001663 +0000 UTC m=+1791.363583104 I0910 11:37:36.004963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-sqkzt" condition "Ready" to 2026-09-10 11:37:36.004950355 +0000 UTC m=+1791.447531786 I0910 11:37:36.037955 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:37:36.037936906 +0000 UTC m=+1791.480518337 I0910 11:37:36.064506 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:37:36.064878 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:37:36.064868065 +0000 UTC m=+1791.507449496 I0910 11:37:36.082312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:37:36.082648 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:37:36.08264038 +0000 UTC m=+1791.525221811 I0910 11:37:36.621021 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-10 11:37:36.620994062 +0000 UTC m=+1792.063575523 I0910 11:37:37.295667 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-10 11:37:37.295651759 +0000 UTC m=+1792.738233220 I0910 11:38:26.256989 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-10 11:38:26.256942135 +0000 UTC m=+1841.699523566 I0910 11:38:26.257369 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:38:26.257384 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-10 11:38:26.257381655 +0000 UTC m=+1841.699963086 I0910 11:38:26.284614 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:38:26.284734 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-10 11:38:26.28472712 +0000 UTC m=+1841.727308551 I0910 11:38:27.764761 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:38:27.826123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-n4xpv" condition "Approved" to 2026-09-10 11:38:27.826108414 +0000 UTC m=+1843.268689835 I0910 11:38:27.858177 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-n4xpv" condition "Ready" to 2026-09-10 11:38:27.858162741 +0000 UTC m=+1843.300744182 I0910 11:38:27.920141 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:38:27.92012012 +0000 UTC m=+1843.362701831 I0910 11:38:27.970874 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:38:27.971608 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:38:27.97160038 +0000 UTC m=+1843.414181811 I0910 11:38:28.000541 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:41:47.080443 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:41:47.080566 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-10 11:41:47.080552922 +0000 UTC m=+2042.523134383 I0910 11:41:47.080635 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-10 11:41:47.0804657 +0000 UTC m=+2042.523047161 I0910 11:41:47.139530 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:41:47.139836 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-10 11:41:47.139817727 +0000 UTC m=+2042.582399208 I0910 11:41:47.288595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:41:47.333232 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-tx9rg" condition "Approved" to 2026-09-10 11:41:47.333221609 +0000 UTC m=+2042.775803040 I0910 11:41:47.379455 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-tx9rg" condition "Ready" to 2026-09-10 11:41:47.379438804 +0000 UTC m=+2042.822020235 I0910 11:41:47.712290 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:41:47.712267001 +0000 UTC m=+2043.154848472 I0910 11:41:47.851265 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:41:47.851861 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:41:47.851851799 +0000 UTC m=+2043.294433260 I0910 11:41:47.941630 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:41:47.942151 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:41:48.987703 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:41:48.987759 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-10 11:41:48.987744875 +0000 UTC m=+2044.430326346 I0910 11:41:48.988456 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-10 11:41:48.988443632 +0000 UTC m=+2044.431025103 I0910 11:41:49.134096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:41:49.134264 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:41:49.134303 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-10 11:41:49.134292968 +0000 UTC m=+2044.576874429 I0910 11:41:49.293218 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4fvp8" condition "Approved" to 2026-09-10 11:41:49.293200542 +0000 UTC m=+2044.735781973 I0910 11:41:49.326260 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-4fvp8" condition "Ready" to 2026-09-10 11:41:49.326239235 +0000 UTC m=+2044.768820676 I0910 11:41:49.361955 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:41:49.361941711 +0000 UTC m=+2044.804523132 I0910 11:41:49.390549 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:41:49.390967 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:41:49.390956179 +0000 UTC m=+2044.833537610 I0910 11:41:49.414178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:45:27.022578 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:45:27.022621 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-10 11:45:27.022611729 +0000 UTC m=+2262.465193160 I0910 11:45:27.023146 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-10 11:45:27.02311935 +0000 UTC m=+2262.465700821 I0910 11:45:27.045939 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:45:27.046380 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-10 11:45:27.04636488 +0000 UTC m=+2262.488946351 I0910 11:45:27.176464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:45:27.214297 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-w2tq8" condition "Approved" to 2026-09-10 11:45:27.214280698 +0000 UTC m=+2262.656862159 I0910 11:45:27.237196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-w2tq8" condition "Ready" to 2026-09-10 11:45:27.237183809 +0000 UTC m=+2262.679765250 I0910 11:45:27.271275 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:45:27.27125692 +0000 UTC m=+2262.713838391 I0910 11:45:27.298116 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:46:20.297226 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-gdk98-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:46:20.297518 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gdk98-vnc" condition "Issuing" to 2026-09-10 11:46:20.297507875 +0000 UTC m=+2315.740089346 I0910 11:46:20.297745 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gdk98-vnc" condition "Ready" to 2026-09-10 11:46:20.297709699 +0000 UTC m=+2315.740291160 I0910 11:46:20.304654 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-gdk98-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:46:20.304693 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gdk98-api" condition "Issuing" to 2026-09-10 11:46:20.304684781 +0000 UTC m=+2315.747266242 I0910 11:46:20.304907 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gdk98-api" condition "Ready" to 2026-09-10 11:46:20.304888886 +0000 UTC m=+2315.747470337 I0910 11:46:20.332692 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-gdk98-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gdk98-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:46:20.332792 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gdk98-vnc" condition "Ready" to 2026-09-10 11:46:20.332783643 +0000 UTC m=+2315.775365074 I0910 11:46:20.333571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-gdk98-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gdk98-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:46:20.333722 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-gdk98-api" condition "Ready" to 2026-09-10 11:46:20.333712734 +0000 UTC m=+2315.776294165 I0910 11:46:20.481493 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-gdk98-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gdk98-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:46:20.524921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-gdk98-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gdk98-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:46:20.528010 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-gdk98-vnc-5r9pf" condition "Approved" to 2026-09-10 11:46:20.527996034 +0000 UTC m=+2315.970577465 I0910 11:46:20.550493 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-gdk98-vnc-5r9pf" condition "Ready" to 2026-09-10 11:46:20.550475506 +0000 UTC m=+2315.993056987 I0910 11:46:20.579142 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-gdk98-api-7nvkf" condition "Approved" to 2026-09-10 11:46:20.579122962 +0000 UTC m=+2316.021704393 I0910 11:46:20.589211 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-gdk98-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:46:20.589194955 +0000 UTC m=+2316.031776386 I0910 11:46:20.597184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-gdk98-api-7nvkf" condition "Ready" to 2026-09-10 11:46:20.597168061 +0000 UTC m=+2316.039749482 I0910 11:46:20.611523 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-gdk98-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gdk98-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:46:20.612136 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-gdk98-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:46:20.612128317 +0000 UTC m=+2316.054709748 I0910 11:46:20.619853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-gdk98-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gdk98-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:46:20.635198 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-gdk98-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:46:20.635180223 +0000 UTC m=+2316.077761654 I0910 11:46:20.638401 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-gdk98-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gdk98-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:46:20.653912 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-gdk98-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-gdk98-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:18.744228 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:50:18.744324 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-10 11:50:18.744316714 +0000 UTC m=+2554.186898175 I0910 11:50:18.744215 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-10 11:50:18.744186251 +0000 UTC m=+2554.186767722 I0910 11:50:18.767436 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:18.767567 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-10 11:50:18.767557218 +0000 UTC m=+2554.210138659 I0910 11:50:18.986096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:19.034219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-prsst" condition "Approved" to 2026-09-10 11:50:19.034205913 +0000 UTC m=+2554.476787344 I0910 11:50:19.056844 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-prsst" condition "Ready" to 2026-09-10 11:50:19.056811351 +0000 UTC m=+2554.499392782 I0910 11:50:19.094609 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:50:19.094595249 +0000 UTC m=+2554.537176680 I0910 11:50:19.121429 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:20.515953 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:50:20.515992 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-10 11:50:20.515983662 +0000 UTC m=+2555.958565093 I0910 11:50:20.516068 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-10 11:50:20.516009513 +0000 UTC m=+2555.958590954 I0910 11:50:20.537842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:20.537980 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-10 11:50:20.537951416 +0000 UTC m=+2555.980532857 I0910 11:50:20.861948 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:50:20.933544 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-rhzsz" condition "Approved" to 2026-09-10 11:50:20.9335144 +0000 UTC m=+2556.376095871 I0910 11:50:20.999346 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-rhzsz" condition "Ready" to 2026-09-10 11:50:20.999331708 +0000 UTC m=+2556.441913149 I0910 11:50:21.040266 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:50:21.040246432 +0000 UTC m=+2556.482827853 I0910 11:50:21.062571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:48.482658 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-10 11:52:48.482640505 +0000 UTC m=+2703.925221936 I0910 11:52:48.483098 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:52:48.483209 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-10 11:52:48.483190727 +0000 UTC m=+2703.925772199 E0910 11:52:48.502326 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:52:48.502412 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-10 11:52:48.502401052 +0000 UTC m=+2703.944982493 I0910 11:52:48.502444 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:52:48.506223 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:48.506427 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-10 11:52:48.506416837 +0000 UTC m=+2703.948998308 E0910 11:52:48.515880 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0910 11:52:48.516409 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:52:48.516508 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 11:52:48.516673 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0910 11:52:48.535906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:48.577805 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-jcdt9" condition "Approved" to 2026-09-10 11:52:48.577792025 +0000 UTC m=+2704.020373456 I0910 11:52:48.603960 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-jcdt9" condition "Ready" to 2026-09-10 11:52:48.603944473 +0000 UTC m=+2704.046525904 I0910 11:52:48.631121 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:52:48.631104736 +0000 UTC m=+2704.073686177 I0910 11:52:48.656740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:48.657164 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:52:48.657155011 +0000 UTC m=+2704.099736462 I0910 11:52:48.660791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:48.677775 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:48.678155 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:52:48.678146707 +0000 UTC m=+2704.120728138 I0910 11:52:49.271005 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:52:49.271165 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-10 11:52:49.27115442 +0000 UTC m=+2704.713735861 I0910 11:52:49.271060 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-10 11:52:49.271041887 +0000 UTC m=+2704.713623318 E0910 11:52:49.291312 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:52:49.291406 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-10 11:52:49.291397568 +0000 UTC m=+2704.733978999 I0910 11:52:49.291429 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:52:49.298274 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:49.298421 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-10 11:52:49.298412824 +0000 UTC m=+2704.740994255 E0910 11:52:49.316097 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0910 11:52:49.316251 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 11:52:49.316293 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 11:52:49.316346 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0910 11:52:49.327229 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:49.358030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-rbpnp" condition "Approved" to 2026-09-10 11:52:49.358006764 +0000 UTC m=+2704.800588195 I0910 11:52:49.377381 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-rbpnp" condition "Ready" to 2026-09-10 11:52:49.377367702 +0000 UTC m=+2704.819949133 I0910 11:52:49.428753 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:52:49.428732916 +0000 UTC m=+2704.871314347 I0910 11:52:49.461341 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:49.461725 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:52:49.461711486 +0000 UTC m=+2704.904292917 I0910 11:52:49.489852 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:49.490414 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:52:49.490400074 +0000 UTC m=+2704.932981505 I0910 11:52:50.075157 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-10 11:52:50.07513656 +0000 UTC m=+2705.517718001 I0910 11:52:50.075798 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:52:50.075823 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-10 11:52:50.075818387 +0000 UTC m=+2705.518399828 I0910 11:52:50.097473 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:50.097648 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:52:50.097683 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-10 11:52:50.097674293 +0000 UTC m=+2705.540255734 I0910 11:52:50.218275 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-6x6sv" condition "Approved" to 2026-09-10 11:52:50.218260655 +0000 UTC m=+2705.660842086 I0910 11:52:50.237072 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-6x6sv" condition "Ready" to 2026-09-10 11:52:50.237050959 +0000 UTC m=+2705.679632390 I0910 11:52:53.516329 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:52:53.516307941 +0000 UTC m=+2708.958889372 I0910 11:52:53.530626 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-6x6sv" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:52:53.530605879 +0000 UTC m=+2708.973187320 I0910 11:52:53.567262 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:52:53.567236685 +0000 UTC m=+2709.009818136 I0910 11:52:53.599856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:52:54.323929 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:52:54.323908497 +0000 UTC m=+2709.766489958 I0910 11:55:19.932707 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-10 11:55:19.93268867 +0000 UTC m=+2855.375270131 I0910 11:55:19.934200 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:55:19.934237 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-10 11:55:19.934230749 +0000 UTC m=+2855.376812210 I0910 11:55:19.962335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:55:19.962454 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-10 11:55:19.962443494 +0000 UTC m=+2855.405024955 I0910 11:55:20.430639 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:55:20.477364 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-hb948" condition "Approved" to 2026-09-10 11:55:20.477348359 +0000 UTC m=+2855.919929790 I0910 11:55:20.509293 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-hb948" condition "Ready" to 2026-09-10 11:55:20.509281298 +0000 UTC m=+2855.951862719 I0910 11:55:20.552217 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:55:20.552195136 +0000 UTC m=+2855.994776567 I0910 11:55:20.578219 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:08.573666 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-10 11:56:08.573600135 +0000 UTC m=+2904.016181596 I0910 11:56:08.603852 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-10 11:56:08.603799317 +0000 UTC m=+2904.046380778 I0910 11:56:08.603861 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:56:08.603951 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-10 11:56:08.60393972 +0000 UTC m=+2904.046521191 I0910 11:56:08.630273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:08.630384 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-10 11:56:08.630372639 +0000 UTC m=+2904.072954100 E0910 11:56:08.641174 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0910 11:56:08.713305 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-10 11:56:08.713286834 +0000 UTC m=+2904.155868275 I0910 11:56:08.739543 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-10 11:56:08.739520788 +0000 UTC m=+2904.182102229 I0910 11:56:08.739985 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:56:08.740206 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-10 11:56:08.740136943 +0000 UTC m=+2904.182718414 E0910 11:56:08.757510 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0910 11:56:08.761444 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:08.761622 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:56:08.761674 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-10 11:56:08.761666092 +0000 UTC m=+2904.204247543 I0910 11:56:08.895994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:08.907084 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-6mjsl" condition "Approved" to 2026-09-10 11:56:08.90706347 +0000 UTC m=+2904.349644911 I0910 11:56:08.998976 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-6mjsl" condition "Ready" to 2026-09-10 11:56:08.998955295 +0000 UTC m=+2904.441536726 I0910 11:56:09.043032 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:56:09.041015288 +0000 UTC m=+2904.483596719 I0910 11:56:09.069344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:09.069707 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:56:09.069690032 +0000 UTC m=+2904.512271463 I0910 11:56:09.084458 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:09.094024 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:09.670535 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-10 11:56:09.670511337 +0000 UTC m=+2905.113092778 I0910 11:56:09.691338 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:56:09.691377 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-10 11:56:09.69136721 +0000 UTC m=+2905.133948641 I0910 11:56:09.691901 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-10 11:56:09.691897002 +0000 UTC m=+2905.134478423 I0910 11:56:09.713351 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:09.713434 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-10 11:56:09.71342398 +0000 UTC m=+2905.156005421 I0910 11:56:10.007148 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:10.050875 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-gnlsk" condition "Approved" to 2026-09-10 11:56:10.050857172 +0000 UTC m=+2905.493438603 I0910 11:56:10.101798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-gnlsk" condition "Ready" to 2026-09-10 11:56:10.101780522 +0000 UTC m=+2905.544361953 I0910 11:56:10.163694 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:56:10.163675981 +0000 UTC m=+2905.606257422 I0910 11:56:10.203870 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:10.226453 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-10 11:56:10.226433602 +0000 UTC m=+2905.669015023 I0910 11:56:10.260906 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:10.261248 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:56:10.261240 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-10 11:56:10.261223676 +0000 UTC m=+2905.703805107 I0910 11:56:10.261295 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-10 11:56:10.261287427 +0000 UTC m=+2905.703868858 I0910 11:56:10.277194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:10.277261 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:56:10.277287 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-10 11:56:10.277281329 +0000 UTC m=+2905.719862760 I0910 11:56:10.627485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lpg99" condition "Approved" to 2026-09-10 11:56:10.627464874 +0000 UTC m=+2906.070046305 I0910 11:56:10.660528 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-lpg99" condition "Ready" to 2026-09-10 11:56:10.660507415 +0000 UTC m=+2906.103088846 I0910 11:56:10.710050 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:56:10.71001918 +0000 UTC m=+2906.152600611 I0910 11:56:10.740103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:10.740921 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:56:10.740911398 +0000 UTC m=+2906.183492829 I0910 11:56:10.765896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:10.798477 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-10 11:56:10.798450081 +0000 UTC m=+2906.241031512 I0910 11:56:10.826823 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 11:56:10.826862 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-10 11:56:10.826852028 +0000 UTC m=+2906.269433449 I0910 11:56:10.826843 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-10 11:56:10.826798067 +0000 UTC m=+2906.269379508 I0910 11:56:10.941721 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:10.941828 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-10 11:56:10.94181965 +0000 UTC m=+2906.384401081 I0910 11:56:11.143073 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:11.293552 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-x9272" condition "Approved" to 2026-09-10 11:56:11.293522842 +0000 UTC m=+2906.736104273 I0910 11:56:11.401573 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-x9272" condition "Ready" to 2026-09-10 11:56:11.401556373 +0000 UTC m=+2906.844137804 I0910 11:56:11.838890 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:56:11.838868756 +0000 UTC m=+2907.281450187 I0910 11:56:11.986487 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 11:56:11.986831 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 11:56:11.986805097 +0000 UTC m=+2907.429386528 I0910 11:56:12.185677 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"