I0717 18:09:30.406601 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0717 18:09:30.406825 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0717 18:09:30.411083 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0717 18:09:30.411115 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0717 18:09:30.411128 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0717 18:09:30.411634 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0717 18:09:30.411695 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0717 18:09:30.411831 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0717 18:09:30.417450 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0717 18:09:30.452334 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0717 18:09:30.458075 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0717 18:09:30.462864 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0717 18:09:30.466001 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0717 18:09:30.466033 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0717 18:09:30.466043 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0717 18:09:30.471215 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0717 18:09:30.475555 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0717 18:09:30.479624 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0717 18:09:30.479669 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0717 18:09:30.479684 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0717 18:09:30.479750 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0717 18:09:30.484896 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0717 18:09:30.489432 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0717 18:09:30.492685 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0717 18:09:30.497672 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0717 18:09:30.502995 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0717 18:09:30.503063 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0717 18:09:30.506116 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0717 18:09:30.509179 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0717 18:09:30.512055 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0717 18:09:30.514719 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0717 18:09:30.517161 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0717 18:09:30.519213 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0717 18:09:30.521061 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0717 18:09:30.525740 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 18:09:30.527381 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 18:09:30.528623 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 18:09:30.528664 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 18:09:30.529585 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 18:09:30.545335 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 18:09:30.563713 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 18:09:30.580059 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 18:09:30.599246 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 18:09:30.617431 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 18:09:30.634338 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0717 18:09:46.475634 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-17 18:09:46.475580002 +0000 UTC m=+16.100366999 I0717 18:09:47.209985 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:09:47.210047 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-17 18:09:47.210035123 +0000 UTC m=+16.834822120 I0717 18:09:47.211516 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-17 18:09:47.211505676 +0000 UTC m=+16.836292673 E0717 18:09:47.222831 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 18:09:47.222881 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-17 18:09:47.222872427 +0000 UTC m=+16.847659394 E0717 18:09:47.222925 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 18:09:47.223346 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:47.223441 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-17 18:09:47.22343366 +0000 UTC m=+16.848220627 I0717 18:09:47.234731 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" E0717 18:09:47.234872 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0717 18:09:47.234969 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 18:09:47.235008 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 18:09:47.235049 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0717 18:09:47.239436 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:47.266850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-07-17 18:09:47.266834183 +0000 UTC m=+16.891621170 I0717 18:09:47.292956 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-07-17 18:09:47.29294129 +0000 UTC m=+16.917728287 I0717 18:09:47.316473 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:47.316444259 +0000 UTC m=+16.941231246 I0717 18:09:47.330560 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:47.331154 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:47.331144335 +0000 UTC m=+16.955931302 I0717 18:09:47.342791 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:47.345978 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:09:52.235986 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:09:52.235977614 +0000 UTC m=+21.860764571 I0717 18:10:16.452226 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:10:16.452280 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-17 18:10:16.452273518 +0000 UTC m=+46.077060485 I0717 18:10:16.452719 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-17 18:10:16.452700228 +0000 UTC m=+46.077487205 I0717 18:10:16.469180 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:10:16.470900 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-17 18:10:16.470884414 +0000 UTC m=+46.095671381 I0717 18:10:16.471074 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-17 18:10:16.471066739 +0000 UTC m=+46.095853706 I0717 18:10:16.663218 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:10:16.692012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-07-17 18:10:16.692002288 +0000 UTC m=+46.316789255 I0717 18:10:16.716485 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-07-17 18:10:16.716475169 +0000 UTC m=+46.341262136 I0717 18:10:16.745085 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:10:16.745074104 +0000 UTC m=+46.369861061 I0717 18:10:16.758395 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:10:16.758932 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:10:16.758924231 +0000 UTC m=+46.383711198 I0717 18:10:16.762024 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:10:16.775198 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:12:28.260809 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-17 18:12:28.260761349 +0000 UTC m=+177.885548346 I0717 18:12:28.261310 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:12:28.261416 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-17 18:12:28.261404163 +0000 UTC m=+177.886191150 E0717 18:12:28.276524 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0717 18:12:28.276596 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-07-17 18:12:28.276590701 +0000 UTC m=+177.901377668 I0717 18:12:28.276616 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0717 18:12:28.277998 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:12:28.278166 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:12:28.278199 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-17 18:12:28.278189849 +0000 UTC m=+177.902976816 E0717 18:12:28.284687 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" E0717 18:12:28.285076 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0717 18:12:28.285159 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0717 18:12:28.285205 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" I0717 18:12:28.288346 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:12:28.288382 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-17 18:12:28.288372242 +0000 UTC m=+177.913159209 I0717 18:12:28.288765 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-17 18:12:28.288758281 +0000 UTC m=+177.913545248 I0717 18:12:28.300222 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:12:28.300355 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-17 18:12:28.300343067 +0000 UTC m=+177.925130034 I0717 18:12:28.622312 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:12:28.655117 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-07-17 18:12:28.655098194 +0000 UTC m=+178.279885181 I0717 18:12:28.671951 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-07-17 18:12:28.67193712 +0000 UTC m=+178.296724087 I0717 18:12:28.709559 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:12:28.721123 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-07-17 18:12:28.721108288 +0000 UTC m=+178.345895275 I0717 18:12:28.739040 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-07-17 18:12:28.739025939 +0000 UTC m=+178.363812936 I0717 18:12:28.760964 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:12:28.760953882 +0000 UTC m=+178.385740869 I0717 18:12:28.772366 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:12:28.772854 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:12:28.772849546 +0000 UTC m=+178.397636513 I0717 18:12:28.786956 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:12:33.286051 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:12:33.286030981 +0000 UTC m=+182.910817948 I0717 18:12:33.329905 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:12:33.329887486 +0000 UTC m=+182.954674483 I0717 18:12:33.357815 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:12:33.357797986 +0000 UTC m=+182.982584953 I0717 18:12:33.371290 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:12:33.411198 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:15:28.479380 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:15:28.479466 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Issuing" to 2026-07-17 18:15:28.479458557 +0000 UTC m=+358.104245514 I0717 18:15:28.479569 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-07-17 18:15:28.479550749 +0000 UTC m=+358.104337806 I0717 18:15:28.501567 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:15:28.501685 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-07-17 18:15:28.501670616 +0000 UTC m=+358.126457623 I0717 18:15:28.575885 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:15:28.608632 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-1" condition "Approved" to 2026-07-17 18:15:28.608619646 +0000 UTC m=+358.233406613 I0717 18:15:28.623538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-1" condition "Ready" to 2026-07-17 18:15:28.623526147 +0000 UTC m=+358.248313114 I0717 18:15:28.647129 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:15:28.647115358 +0000 UTC m=+358.271902345 I0717 18:15:28.666042 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:15:28.667032 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:15:28.667021564 +0000 UTC m=+358.291808561 I0717 18:15:28.674058 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:15:28.682907 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:16:43.952571 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:16:43.952647 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-17 18:16:43.952629002 +0000 UTC m=+433.577415969 I0717 18:16:43.952678 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-17 18:16:43.952663353 +0000 UTC m=+433.577450390 I0717 18:16:43.963387 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:16:43.963482 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-17 18:16:43.963474151 +0000 UTC m=+433.588261108 E0717 18:16:43.964042 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0717 18:16:43.964154 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-17 18:16:43.964141187 +0000 UTC m=+433.588928184 E0717 18:16:43.964198 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 18:16:43.976066 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0717 18:16:43.976219 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 18:16:43.976308 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0717 18:16:43.976350 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0717 18:16:43.976892 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:16:43.996056 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-07-17 18:16:43.996043818 +0000 UTC m=+433.620830785 I0717 18:16:44.013163 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-07-17 18:16:44.0131524 +0000 UTC m=+433.637939367 I0717 18:16:44.037652 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:16:44.037642171 +0000 UTC m=+433.662429128 I0717 18:16:44.051447 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:16:44.051920 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:16:44.051909218 +0000 UTC m=+433.676696215 I0717 18:16:44.067999 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:16:48.976921 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:16:48.976906068 +0000 UTC m=+438.601693055 I0717 18:17:28.017334 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:17:28.017416 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-17 18:17:28.017405762 +0000 UTC m=+477.642192739 I0717 18:17:28.017434 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-17 18:17:28.017416342 +0000 UTC m=+477.642203309 I0717 18:17:28.031749 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:17:28.031790 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-17 18:17:28.031780931 +0000 UTC m=+477.656567888 I0717 18:17:28.032021 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-17 18:17:28.032016887 +0000 UTC m=+477.656803844 I0717 18:17:28.032269 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-17 18:17:28.032265452 +0000 UTC m=+477.657052399 I0717 18:17:28.032431 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:17:28.032448 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-17 18:17:28.032444457 +0000 UTC m=+477.657231414 I0717 18:17:28.037405 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:28.037444 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:17:28.037459 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-17 18:17:28.037455571 +0000 UTC m=+477.662242528 I0717 18:17:28.056873 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:28.057326 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:17:28.057354 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-17 18:17:28.057346067 +0000 UTC m=+477.682133034 I0717 18:17:28.061992 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:28.062055 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:17:28.062111 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-17 18:17:28.062074325 +0000 UTC m=+477.686861292 I0717 18:17:28.226969 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-07-17 18:17:28.226953553 +0000 UTC m=+477.851740520 I0717 18:17:28.237397 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:28.239158 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-07-17 18:17:28.239141812 +0000 UTC m=+477.863928779 I0717 18:17:28.246441 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-07-17 18:17:28.246429149 +0000 UTC m=+477.871216126 I0717 18:17:28.262703 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:17:28.262685372 +0000 UTC m=+477.887472339 I0717 18:17:28.263270 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-07-17 18:17:28.263261365 +0000 UTC m=+477.888048332 I0717 18:17:28.275566 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:28.276096 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:17:28.276086929 +0000 UTC m=+477.900873896 I0717 18:17:28.284268 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:17:28.284261905 +0000 UTC m=+477.909048872 I0717 18:17:28.313660 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:28.360704 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:28.464918 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:28.465549 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:17:28.465540569 +0000 UTC m=+478.090327536 I0717 18:17:28.862768 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:28.936438 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:28.984483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-07-17 18:17:28.984468797 +0000 UTC m=+478.609255764 I0717 18:17:29.206737 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-07-17 18:17:29.20672656 +0000 UTC m=+478.831513517 I0717 18:17:29.632622 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:17:29.632607126 +0000 UTC m=+479.257394093 I0717 18:17:29.660711 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:29.661286 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:17:29.661276803 +0000 UTC m=+479.286063770 I0717 18:17:29.861436 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:42.928165 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:17:42.928200 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls" condition "Issuing" to 2026-07-17 18:17:42.928192024 +0000 UTC m=+492.552978991 I0717 18:17:42.928559 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls" condition "Ready" to 2026-07-17 18:17:42.928553182 +0000 UTC m=+492.553340149 I0717 18:17:42.944266 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:42.944374 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls" condition "Ready" to 2026-07-17 18:17:42.944362375 +0000 UTC m=+492.569149342 I0717 18:17:43.173110 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:43.210777 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls-1" condition "Approved" to 2026-07-17 18:17:43.210763328 +0000 UTC m=+492.835550295 I0717 18:17:43.230347 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls-1" condition "Ready" to 2026-07-17 18:17:43.230328416 +0000 UTC m=+492.855115383 I0717 18:17:43.260766 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:17:43.260748423 +0000 UTC m=+492.885535390 I0717 18:17:43.280515 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:43.280920 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:17:43.280911075 +0000 UTC m=+492.905698032 I0717 18:17:43.399075 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:17:43.399631 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-ksvjh-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:17:43.399621274 +0000 UTC m=+493.024408241 I0717 18:19:03.831791 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:19:03.831822 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-17 18:19:03.831793818 +0000 UTC m=+573.456580805 I0717 18:19:03.831848 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-17 18:19:03.831834649 +0000 UTC m=+573.456621616 I0717 18:19:03.944690 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:19:03.944894 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:19:03.944952 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-17 18:19:03.944938699 +0000 UTC m=+573.569725696 I0717 18:19:04.192870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-07-17 18:19:04.192853669 +0000 UTC m=+573.817640646 I0717 18:19:04.210873 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-07-17 18:19:04.210861212 +0000 UTC m=+573.835648179 I0717 18:19:04.253047 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:19:04.253035478 +0000 UTC m=+573.877822445 I0717 18:19:04.267086 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:19:04.268322 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:19:04.268312988 +0000 UTC m=+573.893099945 I0717 18:19:04.271969 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:19:04.284485 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:22:41.329981 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-17 18:22:41.329956771 +0000 UTC m=+790.954743768 I0717 18:22:41.330084 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:22:41.330191 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-17 18:22:41.330177496 +0000 UTC m=+790.954964493 I0717 18:22:41.344844 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:22:41.344991 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-17 18:22:41.344977746 +0000 UTC m=+790.969764743 I0717 18:22:41.476648 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:22:41.518681 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-07-17 18:22:41.518666038 +0000 UTC m=+791.143453005 I0717 18:22:41.537353 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-07-17 18:22:41.537333357 +0000 UTC m=+791.162120324 I0717 18:22:41.563423 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:22:41.563407386 +0000 UTC m=+791.188194353 I0717 18:22:41.576125 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:22:41.577058 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:22:41.57704641 +0000 UTC m=+791.201833397 I0717 18:22:41.592788 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:25:24.812323 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-17 18:25:24.812279719 +0000 UTC m=+954.437066716 I0717 18:25:24.812580 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:25:24.812655 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-17 18:25:24.812642287 +0000 UTC m=+954.437429274 I0717 18:25:24.828538 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:25:24.828663 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-17 18:25:24.828649032 +0000 UTC m=+954.453436019 I0717 18:25:24.914074 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:25:24.955408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Approved" to 2026-07-17 18:25:24.955373912 +0000 UTC m=+954.580160899 I0717 18:25:24.977184 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Ready" to 2026-07-17 18:25:24.97716938 +0000 UTC m=+954.601956347 I0717 18:25:25.008706 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:25:25.008685562 +0000 UTC m=+954.633472549 I0717 18:25:25.026510 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:25:25.028104 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:25:25.028094566 +0000 UTC m=+954.652881533 I0717 18:25:25.051694 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:26:50.792587 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:26:50.792630 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-17 18:26:50.792619664 +0000 UTC m=+1040.417406621 I0717 18:26:50.792663 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-17 18:26:50.792643935 +0000 UTC m=+1040.417430892 I0717 18:26:50.805991 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:26:50.806096 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:26:50.806131 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-17 18:26:50.806120543 +0000 UTC m=+1040.430907510 I0717 18:26:50.992372 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:26:51.004242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Approved" to 2026-07-17 18:26:51.004194184 +0000 UTC m=+1040.628981151 I0717 18:26:51.041581 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Ready" to 2026-07-17 18:26:51.04156414 +0000 UTC m=+1040.666351097 I0717 18:26:51.065604 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:26:51.065596699 +0000 UTC m=+1040.690383656 I0717 18:26:51.080332 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:26:51.081400 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:26:51.081384501 +0000 UTC m=+1040.706171488 I0717 18:26:51.100993 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:30:36.628700 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-17 18:30:36.628534749 +0000 UTC m=+1266.253321746 I0717 18:30:36.628701 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:30:36.629046 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-17 18:30:36.62902329 +0000 UTC m=+1266.253810277 I0717 18:30:36.641362 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:30:36.641474 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-17 18:30:36.641466148 +0000 UTC m=+1266.266253115 I0717 18:30:36.743368 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:30:36.780866 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Approved" to 2026-07-17 18:30:36.780849372 +0000 UTC m=+1266.405636359 I0717 18:30:36.795098 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Ready" to 2026-07-17 18:30:36.795084551 +0000 UTC m=+1266.419871498 I0717 18:30:36.817646 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:30:36.817639312 +0000 UTC m=+1266.442426269 I0717 18:30:36.833032 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:30:36.834056 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:30:36.834047162 +0000 UTC m=+1266.458834109 I0717 18:30:36.850220 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:38:24.246801 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:38:24.246945 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-17 18:38:24.246935003 +0000 UTC m=+1733.871721970 I0717 18:38:24.246882 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-17 18:38:24.246735019 +0000 UTC m=+1733.871521996 I0717 18:38:24.259688 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:38:24.259811 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-17 18:38:24.259800918 +0000 UTC m=+1733.884587875 I0717 18:38:24.674019 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:38:24.721354 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Approved" to 2026-07-17 18:38:24.721306981 +0000 UTC m=+1734.346093978 I0717 18:38:24.754873 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Ready" to 2026-07-17 18:38:24.754853381 +0000 UTC m=+1734.379640348 I0717 18:38:24.848828 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:38:24.848813117 +0000 UTC m=+1734.473600114 I0717 18:38:24.880744 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:38:24.881922 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:38:24.881906957 +0000 UTC m=+1734.506693954 I0717 18:38:24.908600 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:40:11.833483 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-17 18:40:11.83344783 +0000 UTC m=+1841.458234827 I0717 18:40:11.833544 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:40:11.833635 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-17 18:40:11.833623274 +0000 UTC m=+1841.458410261 I0717 18:40:11.885001 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:40:11.885104 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-17 18:40:11.885094384 +0000 UTC m=+1841.509881351 I0717 18:40:12.053403 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:40:12.133712 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-07-17 18:40:12.133698169 +0000 UTC m=+1841.758485136 I0717 18:40:12.210196 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-07-17 18:40:12.210176693 +0000 UTC m=+1841.834963680 I0717 18:40:12.378231 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:40:12.378210898 +0000 UTC m=+1842.002997895 I0717 18:40:12.438446 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:41:21.886089 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:41:21.886141 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-17 18:41:21.886128741 +0000 UTC m=+1911.510915728 I0717 18:41:21.886209 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-17 18:41:21.886183292 +0000 UTC m=+1911.510970289 I0717 18:41:21.899866 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:41:21.899976 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-17 18:41:21.899969859 +0000 UTC m=+1911.524756846 I0717 18:41:21.915861 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:41:21.951669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-07-17 18:41:21.951650464 +0000 UTC m=+1911.576437441 I0717 18:41:21.970986 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-07-17 18:41:21.970967887 +0000 UTC m=+1911.595754864 I0717 18:41:21.991735 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:41:21.991715334 +0000 UTC m=+1911.616502291 I0717 18:41:22.006188 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:41:22.006596 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:41:22.006589265 +0000 UTC m=+1911.631376212 I0717 18:41:22.024795 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:41:22.601319 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:41:22.601394 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-17 18:41:22.601385052 +0000 UTC m=+1912.226172039 I0717 18:41:22.601528 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-17 18:41:22.601519605 +0000 UTC m=+1912.226306592 I0717 18:41:22.626871 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:41:22.627055 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-17 18:41:22.627041381 +0000 UTC m=+1912.251828378 I0717 18:41:22.643290 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:41:22.668529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-07-17 18:41:22.668511252 +0000 UTC m=+1912.293298219 I0717 18:41:22.692409 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-07-17 18:41:22.692395701 +0000 UTC m=+1912.317182668 I0717 18:41:22.723686 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:41:22.722112552 +0000 UTC m=+1912.346899509 I0717 18:41:22.750099 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:41:22.750473 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:41:22.750464873 +0000 UTC m=+1912.375251840 I0717 18:41:22.758064 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:41:22.769557 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:41:22.770032 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:41:22.770014712 +0000 UTC m=+1912.394801709 I0717 18:41:23.308410 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-17 18:41:23.308399494 +0000 UTC m=+1912.933186461 I0717 18:41:24.005325 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-17 18:41:24.005311625 +0000 UTC m=+1913.630098582 I0717 18:42:10.272572 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:42:10.272602 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-17 18:42:10.272594494 +0000 UTC m=+1959.897381451 I0717 18:42:10.272895 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-17 18:42:10.272891482 +0000 UTC m=+1959.897678439 I0717 18:42:10.288718 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:42:10.288867 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:42:10.288898 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-17 18:42:10.288890618 +0000 UTC m=+1959.913677575 I0717 18:42:13.178194 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:42:13.227388 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Approved" to 2026-07-17 18:42:13.227357879 +0000 UTC m=+1962.852144866 I0717 18:42:13.269203 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Ready" to 2026-07-17 18:42:13.269182039 +0000 UTC m=+1962.893969036 I0717 18:42:13.397612 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:42:13.397594466 +0000 UTC m=+1963.022381463 I0717 18:42:13.417200 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:42:13.420085 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:42:13.420069281 +0000 UTC m=+1963.044856268 I0717 18:42:13.469682 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:45:19.247184 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-17 18:45:19.247170195 +0000 UTC m=+2148.871957152 I0717 18:45:19.248368 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:45:19.248428 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-17 18:45:19.248413333 +0000 UTC m=+2148.873200330 I0717 18:45:19.268731 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:45:19.269002 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:45:19.269031 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-17 18:45:19.26902282 +0000 UTC m=+2148.893809787 I0717 18:45:19.466156 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:45:19.485094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Approved" to 2026-07-17 18:45:19.485077785 +0000 UTC m=+2149.109864752 I0717 18:45:19.504833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Ready" to 2026-07-17 18:45:19.504814994 +0000 UTC m=+2149.129601991 I0717 18:45:19.530806 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:45:19.530790899 +0000 UTC m=+2149.155577856 I0717 18:45:19.549189 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:45:19.607964 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:45:20.950516 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-17 18:45:20.950503137 +0000 UTC m=+2150.575290104 I0717 18:45:20.950761 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:45:20.950821 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-17 18:45:20.950805153 +0000 UTC m=+2150.575592150 I0717 18:45:20.964369 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:45:20.964443 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:45:20.964471 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-17 18:45:20.96446546 +0000 UTC m=+2150.589252427 I0717 18:45:21.112574 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Approved" to 2026-07-17 18:45:21.112552458 +0000 UTC m=+2150.737339415 I0717 18:45:21.129736 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Ready" to 2026-07-17 18:45:21.129720981 +0000 UTC m=+2150.754507948 I0717 18:45:21.158812 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:45:21.158798953 +0000 UTC m=+2150.783585900 I0717 18:45:21.176373 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:45:21.242004 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:48:59.300693 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-17 18:48:59.300663329 +0000 UTC m=+2368.925450326 I0717 18:48:59.301195 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:48:59.301245 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-17 18:48:59.301239643 +0000 UTC m=+2368.926026630 I0717 18:48:59.379047 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:48:59.379196 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-17 18:48:59.379183126 +0000 UTC m=+2369.003970113 I0717 18:48:59.549925 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:48:59.582140 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Approved" to 2026-07-17 18:48:59.582123452 +0000 UTC m=+2369.206910419 I0717 18:48:59.594370 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Ready" to 2026-07-17 18:48:59.594358142 +0000 UTC m=+2369.219145109 I0717 18:48:59.618065 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:48:59.618056295 +0000 UTC m=+2369.242843252 I0717 18:48:59.633581 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:48:59.634334 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:48:59.634326096 +0000 UTC m=+2369.259113063 I0717 18:48:59.639300 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:48:59.651168 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:49:02.116968 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-trxr8-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:49:02.117066 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-trxr8-vnc" condition "Issuing" to 2026-07-17 18:49:02.117055774 +0000 UTC m=+2371.741842761 I0717 18:49:02.117547 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-trxr8-vnc" condition "Ready" to 2026-07-17 18:49:02.117538715 +0000 UTC m=+2371.742325702 I0717 18:49:02.121833 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-trxr8-api" condition "Ready" to 2026-07-17 18:49:02.121822422 +0000 UTC m=+2371.746609439 I0717 18:49:02.122415 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-trxr8-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:49:02.122450 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-trxr8-api" condition "Issuing" to 2026-07-17 18:49:02.122440847 +0000 UTC m=+2371.747227834 I0717 18:49:02.133196 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-trxr8-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-trxr8-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:49:02.133305 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-trxr8-vnc" condition "Ready" to 2026-07-17 18:49:02.133294026 +0000 UTC m=+2371.758080983 I0717 18:49:02.136010 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-trxr8-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-trxr8-api\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:49:02.136114 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-trxr8-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:49:02.136142 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-trxr8-api" condition "Issuing" to 2026-07-17 18:49:02.136132591 +0000 UTC m=+2371.760919548 I0717 18:49:02.295271 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-trxr8-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-trxr8-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:49:02.316523 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-trxr8-vnc-1" condition "Approved" to 2026-07-17 18:49:02.316509159 +0000 UTC m=+2371.941296116 I0717 18:49:02.333215 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-trxr8-vnc-1" condition "Ready" to 2026-07-17 18:49:02.333201601 +0000 UTC m=+2371.957988568 I0717 18:49:02.357628 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-trxr8-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:49:02.35761113 +0000 UTC m=+2371.982398117 I0717 18:49:02.371076 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-trxr8-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-trxr8-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:49:02.371744 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-trxr8-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:49:02.371734163 +0000 UTC m=+2371.996521130 I0717 18:49:02.386735 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-trxr8-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-trxr8-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:49:02.424997 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-trxr8-api-1" condition "Approved" to 2026-07-17 18:49:02.424981332 +0000 UTC m=+2372.049768289 I0717 18:49:02.440482 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-trxr8-api-1" condition "Ready" to 2026-07-17 18:49:02.440466016 +0000 UTC m=+2372.065252973 I0717 18:49:02.460983 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-trxr8-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:49:02.460972865 +0000 UTC m=+2372.085759832 I0717 18:49:02.474616 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-trxr8-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-trxr8-api\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:54:02.715963 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-17 18:54:02.715916398 +0000 UTC m=+2672.340703365 I0717 18:54:02.715965 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:54:02.716261 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-17 18:54:02.716245326 +0000 UTC m=+2672.341032343 I0717 18:54:02.731731 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:54:02.731923 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:54:02.731969 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-17 18:54:02.731959866 +0000 UTC m=+2672.356746823 I0717 18:54:02.907376 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:54:02.921672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Approved" to 2026-07-17 18:54:02.921655207 +0000 UTC m=+2672.546442204 I0717 18:54:02.936300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Ready" to 2026-07-17 18:54:02.936281011 +0000 UTC m=+2672.561067978 I0717 18:54:02.960998 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:54:02.960949006 +0000 UTC m=+2672.585736003 I0717 18:54:02.978739 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:54:02.979246 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:54:02.979238515 +0000 UTC m=+2672.604025472 I0717 18:54:02.987027 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:54:03.002881 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:54:04.250874 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:54:04.250933 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-17 18:54:04.250925183 +0000 UTC m=+2673.875712140 I0717 18:54:04.250973 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-17 18:54:04.250955404 +0000 UTC m=+2673.875742381 I0717 18:54:04.262749 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:54:04.262897 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:54:04.262930 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-17 18:54:04.262921357 +0000 UTC m=+2673.887708324 I0717 18:54:04.517079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Approved" to 2026-07-17 18:54:04.517062984 +0000 UTC m=+2674.141849951 I0717 18:54:04.533363 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Ready" to 2026-07-17 18:54:04.533347517 +0000 UTC m=+2674.158134484 I0717 18:54:04.567261 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:54:04.567250643 +0000 UTC m=+2674.192037600 I0717 18:54:04.581073 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:54:04.581853 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:54:04.581840027 +0000 UTC m=+2674.206627004 I0717 18:54:04.596221 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:57:13.755995 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:57:13.756060 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-17 18:57:13.756050012 +0000 UTC m=+2863.380836969 I0717 18:57:13.756258 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-17 18:57:13.756236126 +0000 UTC m=+2863.381023113 I0717 18:57:13.823618 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:57:13.823768 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-17 18:57:13.823757392 +0000 UTC m=+2863.448544349 E0717 18:57:13.829918 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0717 18:57:13.829977 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-07-17 18:57:13.829966684 +0000 UTC m=+2863.454753651 I0717 18:57:13.830179 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0717 18:57:13.844487 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" E0717 18:57:13.844719 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0717 18:57:13.844760 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0717 18:57:13.844835 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" I0717 18:57:13.881189 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:57:14.019261 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Approved" to 2026-07-17 18:57:14.019243656 +0000 UTC m=+2863.644030633 I0717 18:57:14.102949 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Ready" to 2026-07-17 18:57:14.102935352 +0000 UTC m=+2863.727722319 I0717 18:57:14.268272 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:57:14.268256396 +0000 UTC m=+2863.893043383 I0717 18:57:14.358400 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:57:14.359096 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:57:14.359084645 +0000 UTC m=+2863.983871632 I0717 18:57:14.496768 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:57:14.509048 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-17 18:57:14.509009786 +0000 UTC m=+2864.133796753 I0717 18:57:14.510172 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:57:14.512040 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-17 18:57:14.512025655 +0000 UTC m=+2864.136812642 I0717 18:57:14.523130 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:57:14.523250 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:57:14.523280 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-17 18:57:14.523271303 +0000 UTC m=+2864.148058260 E0717 18:57:14.530184 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0717 18:57:14.530247 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-07-17 18:57:14.530234792 +0000 UTC m=+2864.155021769 I0717 18:57:14.530310 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0717 18:57:14.546167 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" E0717 18:57:14.547169 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0717 18:57:14.547250 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0717 18:57:14.547320 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" I0717 18:57:14.721080 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:57:14.742483 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Approved" to 2026-07-17 18:57:14.74246805 +0000 UTC m=+2864.367255017 I0717 18:57:14.911933 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Ready" to 2026-07-17 18:57:14.911921219 +0000 UTC m=+2864.536708176 I0717 18:57:14.945954 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:57:14.945934627 +0000 UTC m=+2864.570721574 I0717 18:57:14.965625 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:57:15.365716 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:57:15.365711 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-17 18:57:15.365690895 +0000 UTC m=+2864.990477862 I0717 18:57:15.365745 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-17 18:57:15.365739156 +0000 UTC m=+2864.990526123 I0717 18:57:15.382908 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:57:15.383046 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 18:57:15.383074 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-17 18:57:15.383065263 +0000 UTC m=+2865.007852230 I0717 18:57:15.430355 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:57:15.466094 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Approved" to 2026-07-17 18:57:15.466074482 +0000 UTC m=+2865.090861449 I0717 18:57:15.500489 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Ready" to 2026-07-17 18:57:15.5004609 +0000 UTC m=+2865.125247897 I0717 18:57:18.844988 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:57:18.844971782 +0000 UTC m=+2868.469758749 I0717 18:57:18.870236 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:57:18.87021318 +0000 UTC m=+2868.495000177 I0717 18:57:18.959993 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:57:18.959968584 +0000 UTC m=+2868.584755571 I0717 18:57:19.048587 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 18:57:19.547364 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 18:57:19.547346927 +0000 UTC m=+2869.172133884 I0717 19:00:10.757123 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:00:10.757193 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-17 19:00:10.757183991 +0000 UTC m=+3040.381970948 I0717 19:00:10.757657 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-17 19:00:10.757637871 +0000 UTC m=+3040.382424858 I0717 19:00:10.773465 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:00:10.773753 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:00:10.773787 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-17 19:00:10.773778021 +0000 UTC m=+3040.398564998 I0717 19:00:11.032124 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Approved" to 2026-07-17 19:00:11.032112864 +0000 UTC m=+3040.656899821 I0717 19:00:11.052588 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Ready" to 2026-07-17 19:00:11.052578382 +0000 UTC m=+3040.677365339 I0717 19:00:11.089685 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:00:11.08966625 +0000 UTC m=+3040.714453207 I0717 19:00:11.106141 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:00:11.107125 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:00:11.107115371 +0000 UTC m=+3040.731902328 I0717 19:00:11.126785 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:02.351704 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-17 19:01:02.351651754 +0000 UTC m=+3091.976438721 I0717 19:01:02.375307 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:01:02.375418 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-17 19:01:02.375406137 +0000 UTC m=+3092.000193124 I0717 19:01:02.375438 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-17 19:01:02.375413067 +0000 UTC m=+3092.000200054 I0717 19:01:02.424939 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:02.425077 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-17 19:01:02.425065813 +0000 UTC m=+3092.049852790 E0717 19:01:02.455051 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller" I0717 19:01:02.567678 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-17 19:01:02.567655846 +0000 UTC m=+3092.192442813 I0717 19:01:02.591478 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:01:02.591550 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-17 19:01:02.591529853 +0000 UTC m=+3092.216316830 I0717 19:01:02.594214 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-17 19:01:02.594201184 +0000 UTC m=+3092.218988191 E0717 19:01:02.707270 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" I0717 19:01:02.716554 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:02.716679 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-17 19:01:02.716665027 +0000 UTC m=+3092.341452024 I0717 19:01:02.984609 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:03.193766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-07-17 19:01:03.193747695 +0000 UTC m=+3092.818534672 I0717 19:01:03.221601 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-07-17 19:01:03.221585122 +0000 UTC m=+3092.846372089 I0717 19:01:03.262548 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:01:03.262528618 +0000 UTC m=+3092.887315575 I0717 19:01:03.329195 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:05.054333 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-17 19:01:05.054313763 +0000 UTC m=+3094.679100740 I0717 19:01:05.078215 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-17 19:01:05.0781968 +0000 UTC m=+3094.702983767 I0717 19:01:05.078255 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:01:05.078306 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-17 19:01:05.078296252 +0000 UTC m=+3094.703083219 I0717 19:01:05.091323 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:05.091466 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:01:05.091498 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-17 19:01:05.091487993 +0000 UTC m=+3094.716274960 I0717 19:01:05.243757 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-07-17 19:01:05.243732608 +0000 UTC m=+3094.868519565 I0717 19:01:05.298301 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-07-17 19:01:05.298287676 +0000 UTC m=+3094.923074623 I0717 19:01:05.336358 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:01:05.336340957 +0000 UTC m=+3094.961127924 I0717 19:01:05.355697 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:05.417591 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:05.665891 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-17 19:01:05.665872178 +0000 UTC m=+3095.290659135 I0717 19:01:05.708325 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:01:05.708359 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-17 19:01:05.70835118 +0000 UTC m=+3095.333138137 I0717 19:01:05.708467 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-17 19:01:05.708447173 +0000 UTC m=+3095.333234140 I0717 19:01:05.724596 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:05.724895 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:01:05.724936 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-17 19:01:05.724927039 +0000 UTC m=+3095.349714006 I0717 19:01:05.870755 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:06.019317 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-07-17 19:01:06.019294066 +0000 UTC m=+3095.644081063 I0717 19:01:06.144600 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-07-17 19:01:06.144578533 +0000 UTC m=+3095.769365500 I0717 19:01:06.277832 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:01:06.277813253 +0000 UTC m=+3095.902600210 I0717 19:01:06.308835 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:06.386283 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:06.764190 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-17 19:01:06.764173882 +0000 UTC m=+3096.388960839 I0717 19:01:06.819303 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-17 19:01:06.819274063 +0000 UTC m=+3096.444061020 I0717 19:01:06.819701 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:01:06.819719 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-17 19:01:06.819716473 +0000 UTC m=+3096.444503430 I0717 19:01:06.866156 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:06.866387 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:01:06.866464 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-17 19:01:06.866452103 +0000 UTC m=+3096.491239100 I0717 19:01:07.188450 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-07-17 19:01:07.188427781 +0000 UTC m=+3096.813214738 I0717 19:01:07.218637 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-07-17 19:01:07.218625043 +0000 UTC m=+3096.843411990 I0717 19:01:07.274173 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:01:07.274145833 +0000 UTC m=+3096.898932830 I0717 19:01:07.306182 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:07.306703 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:01:07.306695858 +0000 UTC m=+3096.931482815 I0717 19:01:07.311562 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:07.349979 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:01:07.350277 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:01:07.350270275 +0000 UTC m=+3096.975057222 I0717 19:05:17.383625 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:05:17.383687 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-17 19:05:17.383679152 +0000 UTC m=+3347.008466109 I0717 19:05:17.383808 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-17 19:05:17.383790795 +0000 UTC m=+3347.008577782 I0717 19:05:17.857345 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:05:17.857517 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-17 19:05:17.857504036 +0000 UTC m=+3347.482291023 I0717 19:05:19.795975 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:05:20.478063 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-1" condition "Approved" to 2026-07-17 19:05:20.478050346 +0000 UTC m=+3350.102837303 I0717 19:05:20.996543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-1" condition "Ready" to 2026-07-17 19:05:20.996531351 +0000 UTC m=+3350.621318308 I0717 19:05:21.437502 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:05:21.437483813 +0000 UTC m=+3351.062270770 I0717 19:05:21.590990 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:05:23.222483 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:05:23.222547 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-17 19:05:23.222538583 +0000 UTC m=+3352.847325550 I0717 19:05:23.224120 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-17 19:05:23.222710377 +0000 UTC m=+3352.847497344 I0717 19:05:23.281811 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:05:23.282046 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0717 19:05:23.282085 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-17 19:05:23.282073655 +0000 UTC m=+3352.906860622 I0717 19:05:23.804550 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-1" condition "Approved" to 2026-07-17 19:05:23.804527182 +0000 UTC m=+3353.429314179 I0717 19:05:23.971559 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-1" condition "Ready" to 2026-07-17 19:05:23.971540633 +0000 UTC m=+3353.596327630 I0717 19:05:24.240922 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:05:24.240904257 +0000 UTC m=+3353.865691264 I0717 19:05:24.387559 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0717 19:05:24.389163 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-17 19:05:24.38914811 +0000 UTC m=+3354.013935077 I0717 19:05:24.432589 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" E0717 19:06:11.358407 1 leaderelection.go:340] Failed to update lock optimitically: etcdserver: request timed out, falling back to slow path E0717 19:07:07.118393 1 leaderelection.go:340] Failed to update lock optimitically: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused, falling back to slow path E0717 19:07:07.119183 1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused E0717 19:07:22.120068 1 leaderelection.go:340] Failed to update lock optimitically: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused, falling back to slow path E0717 19:07:22.120797 1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused E0717 19:07:37.122715 1 leaderelection.go:340] Failed to update lock optimitically: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused, falling back to slow path E0717 19:07:37.123746 1 leaderelection.go:347] error retrieving resource lock cert-manager/cert-manager-controller: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused I0717 19:07:47.117863 1 leaderelection.go:285] failed to renew lease cert-manager/cert-manager-controller: timed out waiting for the condition E0717 19:07:47.118904 1 leaderelection.go:308] Failed to release lock: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/cert-manager/leases/cert-manager-controller": dial tcp 10.96.0.1:443: connect: connection refused I0717 19:07:47.119131 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.clusterissuers" I0717 19:07:47.119333 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-selfsigned" I0717 19:07:47.119407 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.issuers" I0717 19:07:47.119451 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.orders" I0717 19:07:47.119511 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-venafi" I0717 19:07:47.119569 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-trigger" I0717 19:07:47.119596 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.ingress-shim" I0717 19:07:47.119626 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-metrics" I0717 19:07:47.119658 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-revision-manager" I0717 19:07:47.119689 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-acme" I0717 19:07:47.119722 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-ca" I0717 19:07:47.119765 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.challenges" I0717 19:07:47.119817 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-issuing" I0717 19:07:47.119849 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-readiness" I0717 19:07:47.119880 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-issuer-vault" I0717 19:07:47.119930 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificaterequests-approver" I0717 19:07:47.119960 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-key-manager" I0717 19:07:47.119996 1 controller.go:122] "shutting down queue as workqueue signaled shutdown" logger="cert-manager.controller.certificates-request-manager" E0717 19:07:47.120187 1 main.go:40] "error executing command" err="error starting controller: leader election lost" logger="cert-manager"