I0424 13:58:20.590895 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0424 13:58:20.591002 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0424 13:58:20.591052 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0424 13:58:20.594301 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0424 13:58:20.594663 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0424 13:58:20.594756 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0424 13:58:20.594760 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0424 13:58:20.599093 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0424 13:58:20.642056 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0424 13:58:20.647213 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0424 13:58:20.654972 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0424 13:58:20.658101 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0424 13:58:20.659922 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0424 13:58:20.661698 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0424 13:58:20.663320 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0424 13:58:20.663339 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0424 13:58:20.663346 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0424 13:58:20.663425 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0424 13:58:20.665201 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0424 13:58:20.666957 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0424 13:58:20.673637 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0424 13:58:20.677283 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0424 13:58:20.680088 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0424 13:58:20.682395 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0424 13:58:20.684200 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0424 13:58:20.685768 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0424 13:58:20.685817 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0424 13:58:20.687628 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0424 13:58:20.689414 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0424 13:58:20.694772 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0424 13:58:20.697272 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0424 13:58:20.697294 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0424 13:58:20.697299 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0424 13:58:20.700379 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 13:58:20.700774 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 13:58:20.701249 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 13:58:20.701493 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 13:58:20.701931 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 13:58:20.702280 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 13:58:20.702325 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 13:58:20.702535 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 13:58:20.704710 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 13:58:20.811726 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0424 13:58:52.400429 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-24 13:58:52.40040986 +0000 UTC m=+31.847214926 I0424 13:58:56.439441 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 13:58:56.439535 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-24 13:58:56.439516985 +0000 UTC m=+35.886322051 I0424 13:58:56.439551 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-24 13:58:56.439528655 +0000 UTC m=+35.886333791 E0424 13:58:56.765697 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0424 13:58:56.765805 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-24 13:58:56.765794837 +0000 UTC m=+36.212599863 E0424 13:58:56.765837 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0424 13:58:56.768855 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:58:56.768984 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 13:58:56.769020 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-24 13:58:56.769010716 +0000 UTC m=+36.215815762 E0424 13:58:57.263906 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0424 13:58:57.264262 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0424 13:58:57.264308 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0424 13:58:57.264340 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0424 13:58:57.461760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6vcbv" condition "Approved" to 2026-04-24 13:58:57.461751236 +0000 UTC m=+36.908556272 I0424 13:58:57.995721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-6vcbv" condition "Ready" to 2026-04-24 13:58:57.995705362 +0000 UTC m=+37.442510438 I0424 13:58:59.720995 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 13:58:59.72097324 +0000 UTC m=+39.167778316 I0424 13:59:00.430405 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:00.430638 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 13:59:00.430631154 +0000 UTC m=+39.877436200 I0424 13:59:00.623090 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:02.264844 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 13:59:02.264830712 +0000 UTC m=+41.711635748 I0424 13:59:11.914026 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-24 13:59:11.914008155 +0000 UTC m=+51.360813211 I0424 13:59:11.914462 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 13:59:11.914489 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-24 13:59:11.914483375 +0000 UTC m=+51.361288421 I0424 13:59:11.985289 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:11.985359 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-24 13:59:11.985351515 +0000 UTC m=+51.432156561 I0424 13:59:12.755690 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:13.504569 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-24 13:59:13.504548344 +0000 UTC m=+52.951353420 I0424 13:59:13.505230 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 13:59:13.505286 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-24 13:59:13.50527421 +0000 UTC m=+52.952079276 I0424 13:59:13.505945 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-mq4z5" condition "Approved" to 2026-04-24 13:59:13.505934275 +0000 UTC m=+52.952739341 I0424 13:59:13.732366 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-mq4z5" condition "Ready" to 2026-04-24 13:59:13.732354056 +0000 UTC m=+53.179159102 I0424 13:59:13.737842 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:13.737918 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 13:59:13.737937 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-24 13:59:13.737931637 +0000 UTC m=+53.184736683 I0424 13:59:13.909088 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 13:59:13.909070937 +0000 UTC m=+53.355875973 I0424 13:59:13.980252 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:13.980494 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 13:59:13.980484889 +0000 UTC m=+53.427289955 I0424 13:59:13.985479 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:14.081378 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-q9hbt" condition "Approved" to 2026-04-24 13:59:14.081354921 +0000 UTC m=+53.528159997 I0424 13:59:14.086789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:14.088490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:14.103751 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-q9hbt" condition "Ready" to 2026-04-24 13:59:14.103738667 +0000 UTC m=+53.550543713 I0424 13:59:14.454776 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 13:59:14.454751227 +0000 UTC m=+53.901556293 I0424 13:59:14.456225 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-24 13:59:14.456214749 +0000 UTC m=+53.903019825 I0424 13:59:14.528255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:14.528882 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 13:59:14.528866328 +0000 UTC m=+53.975671404 I0424 13:59:14.575097 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:15.056405 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 13:59:15.056458 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-24 13:59:15.056446794 +0000 UTC m=+54.503251860 I0424 13:59:15.056457 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-24 13:59:15.056433104 +0000 UTC m=+54.503238180 I0424 13:59:15.107646 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-24 13:59:15.107632617 +0000 UTC m=+54.554437663 I0424 13:59:15.112544 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:15.112674 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-24 13:59:15.112664806 +0000 UTC m=+54.559469852 I0424 13:59:15.282573 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-24 13:59:15.282560639 +0000 UTC m=+54.729365695 I0424 13:59:15.355029 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0424 13:59:15.527284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kjvjd" condition "Approved" to 2026-04-24 13:59:15.527273357 +0000 UTC m=+54.974078403 I0424 13:59:15.610804 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-kjvjd" condition "Ready" to 2026-04-24 13:59:15.610791193 +0000 UTC m=+55.057596249 I0424 13:59:15.694293 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 13:59:15.694273548 +0000 UTC m=+55.141078624 I0424 13:59:15.728599 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0424 14:02:56.316239 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-24 14:02:56.316192895 +0000 UTC m=+275.762997961 I0424 14:02:56.316470 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 14:02:56.316546 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-24 14:02:56.316537902 +0000 UTC m=+275.763342968 E0424 14:02:56.534287 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0424 14:02:56.534372 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-24 14:02:56.534362371 +0000 UTC m=+275.981167437 I0424 14:02:56.534401 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0424 14:02:56.536384 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 14:02:56.536660 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 14:02:56.536816 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-24 14:02:56.536729383 +0000 UTC m=+275.983534499 E0424 14:02:56.921423 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0424 14:02:56.921560 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0424 14:02:56.921626 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0424 14:02:56.921693 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0424 14:02:57.128716 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 14:02:57.128780 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-24 14:02:57.128767693 +0000 UTC m=+276.575572769 I0424 14:02:57.130270 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-24 14:02:57.130249256 +0000 UTC m=+276.577054332 I0424 14:02:57.686611 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0424 14:02:57.686690 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 14:02:57.686752 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-24 14:02:57.686745616 +0000 UTC m=+277.133550652 I0424 14:02:58.675174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 14:02:58.677190 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gqm6z" condition "Approved" to 2026-04-24 14:02:58.677177355 +0000 UTC m=+278.123982401 I0424 14:02:58.920994 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-gqm6z" condition "Ready" to 2026-04-24 14:02:58.92098386 +0000 UTC m=+278.367788906 I0424 14:02:59.486702 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-27p2b" condition "Approved" to 2026-04-24 14:02:59.486683955 +0000 UTC m=+278.933489051 I0424 14:02:59.539492 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 14:02:59.539476497 +0000 UTC m=+278.986281543 I0424 14:02:59.638050 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-27p2b" condition "Ready" to 2026-04-24 14:02:59.638033026 +0000 UTC m=+279.084838102 I0424 14:02:59.648654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 14:02:59.649014 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 14:02:59.64900796 +0000 UTC m=+279.095812996 I0424 14:03:00.330041 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0424 14:03:01.921847 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 14:03:01.921832301 +0000 UTC m=+281.368637347 I0424 14:03:02.057895 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-27p2b" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 14:03:02.057880204 +0000 UTC m=+281.504685260 I0424 14:03:02.458333 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 14:03:02.458324268 +0000 UTC m=+281.905129314 I0424 14:03:02.557276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0424 14:03:02.558185 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 14:03:02.558171285 +0000 UTC m=+282.004976371 I0424 14:03:03.084237 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0424 14:03:03.085466 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0424 14:10:00.226044 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-222.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 14:10:00.226009 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready" to 2026-04-24 14:10:00.225957186 +0000 UTC m=+699.672762222 I0424 14:10:00.226207 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Issuing" to 2026-04-24 14:10:00.226194241 +0000 UTC m=+699.672999317 I0424 14:10:00.241768 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 14:10:00.241837 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-222.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0424 14:10:00.241857 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Issuing" to 2026-04-24 14:10:00.241848312 +0000 UTC m=+699.688653378 I0424 14:10:01.230898 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-222.nip.io-tls-ttkkh" condition "Approved" to 2026-04-24 14:10:01.230884773 +0000 UTC m=+700.677689839 I0424 14:10:01.251335 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-222.nip.io-tls-ttkkh" condition "Ready" to 2026-04-24 14:10:01.251322441 +0000 UTC m=+700.698127507 I0424 14:10:01.282265 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 14:10:01.282251735 +0000 UTC m=+700.729056831 I0424 14:10:01.298287 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 14:10:01.298658 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 14:10:01.298650492 +0000 UTC m=+700.745455548 I0424 14:10:01.335191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-222.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-222.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0424 14:10:01.335574 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-222.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-24 14:10:01.33556666 +0000 UTC m=+700.782371706