I0910 01:58:51.761793 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0910 01:58:51.761940 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0910 01:58:51.762041 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0910 01:58:51.768610 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0910 01:58:51.769103 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0910 01:58:51.769196 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0910 01:58:51.769340 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0910 01:58:51.772904 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0910 01:58:51.788920 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0910 01:58:51.793955 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0910 01:58:51.798787 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0910 01:58:51.802545 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0910 01:58:51.806778 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0910 01:58:51.806971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0910 01:58:51.812375 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0910 01:58:51.816289 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0910 01:58:51.820108 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0910 01:58:51.820200 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0910 01:58:51.823727 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0910 01:58:51.827607 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0910 01:58:51.831782 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0910 01:58:51.835865 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0910 01:58:51.838533 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0910 01:58:51.842193 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0910 01:58:51.842653 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0910 01:58:51.842669 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0910 01:58:51.847649 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0910 01:58:51.851552 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0910 01:58:51.855867 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0910 01:58:51.860538 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0910 01:58:51.867471 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0910 01:58:51.867507 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0910 01:58:51.867507 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0910 01:58:51.871654 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:58:51.871716 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:58:51.872792 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:58:51.873589 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:58:51.897797 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:58:51.918735 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:58:51.943535 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:58:51.963402 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:58:51.982402 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:58:51.985321 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0910 01:59:01.941719 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-09-10 01:59:01.941705343 +0000 UTC m=+10.228477287 I0910 01:59:02.660672 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-09-10 01:59:02.660655446 +0000 UTC m=+10.947427430 I0910 01:59:02.660743 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 01:59:02.660812 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 01:59:02.660801509 +0000 UTC m=+10.947573463 E0910 01:59:02.676146 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 01:59:02.676252 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-09-10 01:59:02.676243397 +0000 UTC m=+10.963015371 E0910 01:59:02.676283 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 01:59:02.679739 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:02.679802 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 01:59:02.679822 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-09-10 01:59:02.679816844 +0000 UTC m=+10.966588798 E0910 01:59:02.690630 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0910 01:59:02.691015 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 01:59:02.691144 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 01:59:02.691256 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0910 01:59:02.730436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8jkgl" condition "Approved" to 2026-09-10 01:59:02.73041997 +0000 UTC m=+11.017191964 I0910 01:59:02.744240 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-8jkgl" condition "Ready" to 2026-09-10 01:59:02.744223944 +0000 UTC m=+11.030995918 I0910 01:59:02.775896 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:59:02.775881287 +0000 UTC m=+11.062653271 I0910 01:59:02.798908 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:02.799392 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:59:02.799380597 +0000 UTC m=+11.086152581 I0910 01:59:02.803581 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:02.817567 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:02.817863 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:59:02.81785272 +0000 UTC m=+11.104624674 I0910 01:59:02.822764 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:07.691962 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:59:07.69194919 +0000 UTC m=+15.978721174 I0910 01:59:29.122995 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 01:59:29.123041 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 01:59:29.123030262 +0000 UTC m=+37.409802246 I0910 01:59:29.123111 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-09-10 01:59:29.123082383 +0000 UTC m=+37.409854357 I0910 01:59:29.138238 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-09-10 01:59:29.138214965 +0000 UTC m=+37.424986939 I0910 01:59:29.158349 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:29.158479 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 01:59:29.158520 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-09-10 01:59:29.158508477 +0000 UTC m=+37.445280451 I0910 01:59:29.339004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:29.350836 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jkf8j" condition "Approved" to 2026-09-10 01:59:29.350822817 +0000 UTC m=+37.637594801 I0910 01:59:29.387242 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-jkf8j" condition "Ready" to 2026-09-10 01:59:29.387223322 +0000 UTC m=+37.673995306 I0910 01:59:29.426706 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:59:29.426687221 +0000 UTC m=+37.713459195 I0910 01:59:29.463048 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:29.463391 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:59:29.463381771 +0000 UTC m=+37.750153725 I0910 01:59:29.475414 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:29.493275 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0910 01:59:29.493761 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 01:59:29.493749288 +0000 UTC m=+37.780521272 I0910 02:01:13.691303 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-09-10 02:01:13.691282746 +0000 UTC m=+141.978054720 I0910 02:01:13.691450 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:01:13.691741 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-10 02:01:13.691723846 +0000 UTC m=+141.978495840 E0910 02:01:13.708150 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:01:13.708266 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-09-10 02:01:13.708256929 +0000 UTC m=+141.995028903 I0910 02:01:13.708332 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:01:13.711106 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:13.711224 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:01:13.711250 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-09-10 02:01:13.711237263 +0000 UTC m=+141.998009247 E0910 02:01:13.723206 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" E0910 02:01:13.723661 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:01:13.723779 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 02:01:13.724025 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0910 02:01:13.726045 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:01:13.726092 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-10 02:01:13.726079029 +0000 UTC m=+142.012851003 I0910 02:01:13.726297 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-09-10 02:01:13.726283924 +0000 UTC m=+142.013055908 I0910 02:01:13.748394 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:13.748503 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:01:13.748533 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-09-10 02:01:13.748521988 +0000 UTC m=+142.035293982 I0910 02:01:13.940342 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-zhvdz" condition "Approved" to 2026-09-10 02:01:13.940321441 +0000 UTC m=+142.227093415 I0910 02:01:13.979846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-zhvdz" condition "Ready" to 2026-09-10 02:01:13.979828994 +0000 UTC m=+142.266600978 I0910 02:01:14.004555 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-h6r6x" condition "Approved" to 2026-09-10 02:01:14.004539461 +0000 UTC m=+142.291311435 I0910 02:01:14.012132 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:14.012118043 +0000 UTC m=+142.298890027 I0910 02:01:14.028336 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-h6r6x" condition "Ready" to 2026-09-10 02:01:14.028316159 +0000 UTC m=+142.315088133 I0910 02:01:14.037709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:18.724218 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:18.724203798 +0000 UTC m=+147.010975772 I0910 02:01:18.741587 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-h6r6x" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:18.741576669 +0000 UTC m=+147.028348653 I0910 02:01:18.771931 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:01:18.771920537 +0000 UTC m=+147.058692521 I0910 02:01:18.795403 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:01:18.867118 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:04:37.043574 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-186.nip.io-tls" condition "Ready" to 2026-09-10 02:04:37.04355621 +0000 UTC m=+345.330328184 I0910 02:04:37.043711 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.162-253-55-186.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:04:37.043782 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-186.nip.io-tls" condition "Issuing" to 2026-09-10 02:04:37.043774695 +0000 UTC m=+345.330546649 I0910 02:04:37.063021 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-186.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-186.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:04:37.063119 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.162-253-55-186.nip.io-tls" condition "Ready" to 2026-09-10 02:04:37.063108308 +0000 UTC m=+345.349880282 I0910 02:04:37.208580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-186.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-186.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:04:37.246397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-186.nip.io-tls-rtxhd" condition "Approved" to 2026-09-10 02:04:37.246380078 +0000 UTC m=+345.533152052 I0910 02:04:37.270798 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.162-253-55-186.nip.io-tls-rtxhd" condition "Ready" to 2026-09-10 02:04:37.27078649 +0000 UTC m=+345.557558464 I0910 02:04:37.303049 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-186.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:04:37.303035427 +0000 UTC m=+345.589807411 I0910 02:04:37.329773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.162-253-55-186.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-186.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:04:37.330336 1 conditions.go:192] Found status change for Certificate "keycloak.162-253-55-186.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:04:37.330290439 +0000 UTC m=+345.617062413 I0910 02:04:37.356203 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.162-253-55-186.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.162-253-55-186.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:51.587096 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:05:51.587090 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 02:05:51.587066837 +0000 UTC m=+419.873838811 I0910 02:05:51.587213 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-09-10 02:05:51.58719829 +0000 UTC m=+419.873970334 E0910 02:05:51.606548 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 02:05:51.606638 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-09-10 02:05:51.606628804 +0000 UTC m=+419.893400778 E0910 02:05:51.606671 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0910 02:05:51.606670 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:51.606763 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 02:05:51.606752058 +0000 UTC m=+419.893524032 I0910 02:05:51.622909 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:51.622993 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 02:05:51.622983453 +0000 UTC m=+419.909755427 I0910 02:05:51.623286 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" E0910 02:05:51.624444 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0910 02:05:51.624530 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 02:05:51.624569 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0910 02:05:51.624611 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0910 02:05:51.630435 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hk6gv" condition "Approved" to 2026-09-10 02:05:51.630423172 +0000 UTC m=+419.917195146 I0910 02:05:51.643211 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-09-10 02:05:51.643195715 +0000 UTC m=+419.929967699 I0910 02:05:51.648436 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-hk6gv" condition "Ready" to 2026-09-10 02:05:51.648424276 +0000 UTC m=+419.935196250 I0910 02:05:51.654856 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:51.670990 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:05:51.670978457 +0000 UTC m=+419.957750431 I0910 02:05:51.695497 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:05:56.624955 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:05:56.624942135 +0000 UTC m=+424.911714119 I0910 02:06:37.482921 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-09-10 02:06:37.482901827 +0000 UTC m=+465.769673831 I0910 02:06:37.483473 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:06:37.483619 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 02:06:37.483610792 +0000 UTC m=+465.770382776 I0910 02:06:37.498567 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:06:37.498610 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 02:06:37.498601371 +0000 UTC m=+465.785373325 I0910 02:06:37.503459 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 02:06:37.503443605 +0000 UTC m=+465.790215589 I0910 02:06:37.503740 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:06:37.504611 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-09-10 02:06:37.50459972 +0000 UTC m=+465.791371714 I0910 02:06:37.510376 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-09-10 02:06:37.498409757 +0000 UTC m=+465.785181721 I0910 02:06:37.561248 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:37.561395 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:06:37.561434 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-09-10 02:06:37.561427772 +0000 UTC m=+465.848199726 I0910 02:06:37.581678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:37.581712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:37.581752 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-09-10 02:06:37.581746516 +0000 UTC m=+465.868518460 I0910 02:06:37.581773 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:06:37.581800 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-09-10 02:06:37.581795767 +0000 UTC m=+465.868567711 I0910 02:06:37.733351 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bmv29" condition "Approved" to 2026-09-10 02:06:37.73332542 +0000 UTC m=+466.020097364 I0910 02:06:37.734468 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:37.752474 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-bmv29" condition "Ready" to 2026-09-10 02:06:37.752459009 +0000 UTC m=+466.039230993 I0910 02:06:37.763636 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-drtl4" condition "Approved" to 2026-09-10 02:06:37.763621007 +0000 UTC m=+466.050392961 I0910 02:06:37.767938 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-k6dhc" condition "Approved" to 2026-09-10 02:06:37.767927679 +0000 UTC m=+466.054699643 I0910 02:06:37.783883 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-drtl4" condition "Ready" to 2026-09-10 02:06:37.783862209 +0000 UTC m=+466.070634163 I0910 02:06:37.790922 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-k6dhc" condition "Ready" to 2026-09-10 02:06:37.790911339 +0000 UTC m=+466.077683293 I0910 02:06:37.807350 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:06:37.80733777 +0000 UTC m=+466.094109714 I0910 02:06:38.073375 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:38.073691 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:06:38.073681654 +0000 UTC m=+466.360453608 I0910 02:06:38.209595 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:06:38.209571403 +0000 UTC m=+466.496343337 I0910 02:06:38.373665 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:06:38.373648395 +0000 UTC m=+466.660420369 I0910 02:06:38.524255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:38.524843 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:06:38.524832041 +0000 UTC m=+466.811604015 I0910 02:06:38.572074 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:38.673921 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:38.674672 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:06:38.674661478 +0000 UTC m=+466.961433452 I0910 02:06:39.175126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:39.224525 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:39.274017 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:39.324643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:46.263073 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-b5d46-tls" condition "Ready" to 2026-09-10 02:06:46.263055743 +0000 UTC m=+474.549827717 I0910 02:06:46.263146 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b5d46-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:06:46.263199 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-b5d46-tls" condition "Issuing" to 2026-09-10 02:06:46.263190906 +0000 UTC m=+474.549962890 I0910 02:06:46.285350 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b5d46-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b5d46-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:46.285458 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-b5d46-tls" condition "Ready" to 2026-09-10 02:06:46.285443871 +0000 UTC m=+474.572215855 I0910 02:06:46.405437 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b5d46-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b5d46-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:46.448963 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-b5d46-9xfhn" condition "Approved" to 2026-09-10 02:06:46.44894707 +0000 UTC m=+474.735719034 I0910 02:06:46.471742 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-b5d46-9xfhn" condition "Ready" to 2026-09-10 02:06:46.471727947 +0000 UTC m=+474.758499931 I0910 02:06:46.500578 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-b5d46-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:06:46.500558562 +0000 UTC m=+474.787330546 I0910 02:06:46.520859 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b5d46-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b5d46-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:06:46.521190 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-b5d46-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:06:46.521182272 +0000 UTC m=+474.807954226 I0910 02:06:46.540787 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-b5d46-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-b5d46-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:07:13.606390 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:07:13.606438 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-09-10 02:07:13.606425677 +0000 UTC m=+501.893197661 I0910 02:07:13.606540 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 02:07:13.606520259 +0000 UTC m=+501.893292243 I0910 02:07:13.625417 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:07:13.625601 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-09-10 02:07:13.625588766 +0000 UTC m=+501.912360740 I0910 02:07:13.735937 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:07:13.769059 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v295t" condition "Approved" to 2026-09-10 02:07:13.769045237 +0000 UTC m=+502.055817181 I0910 02:07:13.792652 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-v295t" condition "Ready" to 2026-09-10 02:07:13.79263726 +0000 UTC m=+502.079409214 I0910 02:07:13.822368 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:07:13.822353385 +0000 UTC m=+502.109125339 I0910 02:07:13.845535 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:07:13.845852 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:07:13.845842555 +0000 UTC m=+502.132614499 I0910 02:07:13.864179 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:07:13.867230 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:10:32.074472 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:10:32.074579 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-09-10 02:10:32.074567965 +0000 UTC m=+700.361339919 I0910 02:10:32.074648 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 02:10:32.074624736 +0000 UTC m=+700.361396710 I0910 02:10:32.100565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:10:32.100713 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-09-10 02:10:32.100698642 +0000 UTC m=+700.387470626 I0910 02:10:32.184218 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:10:32.222901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vn4sq" condition "Approved" to 2026-09-10 02:10:32.22288359 +0000 UTC m=+700.509655574 I0910 02:10:32.245701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vn4sq" condition "Ready" to 2026-09-10 02:10:32.245686387 +0000 UTC m=+700.532458361 I0910 02:10:32.276481 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:10:32.276450773 +0000 UTC m=+700.563222757 I0910 02:10:32.298099 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:13:04.438705 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:13:04.438768 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-09-10 02:13:04.438745821 +0000 UTC m=+852.725517795 I0910 02:13:04.438784 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-10 02:13:04.438773091 +0000 UTC m=+852.725545065 I0910 02:13:04.458070 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:13:04.458156 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:13:04.458384 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-09-10 02:13:04.458371608 +0000 UTC m=+852.745143602 I0910 02:13:04.890259 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:13:04.898850 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-22cdf" condition "Approved" to 2026-09-10 02:13:04.898839589 +0000 UTC m=+853.185611533 I0910 02:13:04.925136 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-22cdf" condition "Ready" to 2026-09-10 02:13:04.925121768 +0000 UTC m=+853.211893752 I0910 02:13:04.969780 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:13:04.969763699 +0000 UTC m=+853.256535673 I0910 02:13:04.996481 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:13:05.073234 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:14:13.358540 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-09-10 02:14:13.358523373 +0000 UTC m=+921.645295327 I0910 02:14:13.358748 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:14:13.358917 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-10 02:14:13.358906111 +0000 UTC m=+921.645678085 I0910 02:14:13.379552 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:14:13.379666 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:14:13.379744 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-09-10 02:14:13.379733515 +0000 UTC m=+921.666505499 I0910 02:14:13.592299 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-2n9ls" condition "Approved" to 2026-09-10 02:14:13.592284981 +0000 UTC m=+921.879056955 I0910 02:14:13.621412 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-2n9ls" condition "Ready" to 2026-09-10 02:14:13.621401452 +0000 UTC m=+921.908173396 I0910 02:14:13.656667 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:14:13.656618711 +0000 UTC m=+921.943390685 I0910 02:14:13.689408 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:14:13.689914 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:14:13.68990413 +0000 UTC m=+921.976676114 I0910 02:14:13.694294 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:14:13.720519 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:17:19.120299 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-09-10 02:17:19.12027942 +0000 UTC m=+1107.407051394 I0910 02:17:19.120405 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:17:19.120463 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-10 02:17:19.120454264 +0000 UTC m=+1107.407226238 I0910 02:17:19.144191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:17:19.144261 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:17:19.144276 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-09-10 02:17:19.144269622 +0000 UTC m=+1107.431041576 I0910 02:17:19.463580 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:17:19.472543 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gnfdh" condition "Approved" to 2026-09-10 02:17:19.472524498 +0000 UTC m=+1107.759296472 I0910 02:17:19.493905 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-gnfdh" condition "Ready" to 2026-09-10 02:17:19.493891953 +0000 UTC m=+1107.780663927 I0910 02:17:19.529543 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:17:19.529531894 +0000 UTC m=+1107.816303878 I0910 02:17:19.556050 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:17:19.621654 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:23:30.855787 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-10 02:23:30.855772362 +0000 UTC m=+1479.142544346 I0910 02:23:30.856204 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:23:30.856234 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-09-10 02:23:30.856227821 +0000 UTC m=+1479.142999805 I0910 02:23:30.874712 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:23:30.874865 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-09-10 02:23:30.874852249 +0000 UTC m=+1479.161624233 I0910 02:23:31.021916 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:23:31.064162 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-865nj" condition "Approved" to 2026-09-10 02:23:31.064139256 +0000 UTC m=+1479.350911230 I0910 02:23:31.091674 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-865nj" condition "Ready" to 2026-09-10 02:23:31.091663264 +0000 UTC m=+1479.378435208 I0910 02:23:31.144086 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:23:31.144067222 +0000 UTC m=+1479.430839176 I0910 02:23:31.171374 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:23:31.171964 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:23:31.171957497 +0000 UTC m=+1479.458729451 I0910 02:23:31.191483 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:23:31.205035 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:24:58.958128 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-10 02:24:58.958105714 +0000 UTC m=+1567.244877708 I0910 02:24:58.958130 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:24:58.958248 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-09-10 02:24:58.958239857 +0000 UTC m=+1567.245011841 I0910 02:24:58.977886 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:24:58.977988 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-09-10 02:24:58.977977678 +0000 UTC m=+1567.264749662 I0910 02:24:59.169433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:24:59.224224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-54dtf" condition "Approved" to 2026-09-10 02:24:59.224214731 +0000 UTC m=+1567.510986685 I0910 02:24:59.259113 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-54dtf" condition "Ready" to 2026-09-10 02:24:59.259083585 +0000 UTC m=+1567.545855539 I0910 02:24:59.337103 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:24:59.337081139 +0000 UTC m=+1567.623853123 I0910 02:24:59.362709 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:24:59.363239 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:24:59.363228487 +0000 UTC m=+1567.650000471 I0910 02:24:59.375997 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:24:59.389273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:24:59.389559 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:24:59.389552189 +0000 UTC m=+1567.676324133 I0910 02:24:59.396319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:26:04.823279 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-10 02:26:04.823261554 +0000 UTC m=+1633.110033538 I0910 02:26:04.823776 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:26:04.823805 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-09-10 02:26:04.823799307 +0000 UTC m=+1633.110571281 I0910 02:26:04.854255 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:26:04.854737 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-09-10 02:26:04.854726676 +0000 UTC m=+1633.141498650 I0910 02:26:04.880926 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:26:04.917285 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-dbtsz" condition "Approved" to 2026-09-10 02:26:04.91726906 +0000 UTC m=+1633.204041034 I0910 02:26:04.943311 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-dbtsz" condition "Ready" to 2026-09-10 02:26:04.943296555 +0000 UTC m=+1633.230068509 I0910 02:26:04.975503 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:26:04.975486792 +0000 UTC m=+1633.262258746 I0910 02:26:04.996982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:26:04.997245 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:26:04.997238305 +0000 UTC m=+1633.284010259 I0910 02:26:05.026663 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:26:05.454234 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-09-10 02:26:05.454221785 +0000 UTC m=+1633.740993729 I0910 02:26:05.454519 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:26:05.454536 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-10 02:26:05.454534062 +0000 UTC m=+1633.741305996 I0910 02:26:05.467985 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:26:05.468034 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:26:05.468050 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-09-10 02:26:05.4680462 +0000 UTC m=+1633.754818154 I0910 02:26:05.518781 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-jn4cj" condition "Approved" to 2026-09-10 02:26:05.518759362 +0000 UTC m=+1633.805531316 I0910 02:26:05.535887 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-jn4cj" condition "Ready" to 2026-09-10 02:26:05.535860577 +0000 UTC m=+1633.822632551 I0910 02:26:05.581255 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:26:05.581236254 +0000 UTC m=+1633.868008208 I0910 02:26:05.604092 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:26:05.604847 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:26:05.604832938 +0000 UTC m=+1633.891604932 I0910 02:26:05.621500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:26:05.621944 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:26:05.621932932 +0000 UTC m=+1633.908704886 I0910 02:26:06.107195 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-09-10 02:26:06.107163925 +0000 UTC m=+1634.393935879 I0910 02:26:06.707331 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-09-10 02:26:06.707317017 +0000 UTC m=+1634.994089001 I0910 02:26:53.796606 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:26:53.796663 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-09-10 02:26:53.796652468 +0000 UTC m=+1682.083424452 I0910 02:26:53.797520 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-10 02:26:53.797476676 +0000 UTC m=+1682.084248760 I0910 02:26:53.852993 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:26:53.853064 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-09-10 02:26:53.853057961 +0000 UTC m=+1682.139829915 I0910 02:26:55.092100 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:26:55.287426 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-8264d" condition "Approved" to 2026-09-10 02:26:55.28741736 +0000 UTC m=+1683.574189304 I0910 02:26:55.453624 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-8264d" condition "Ready" to 2026-09-10 02:26:55.453609797 +0000 UTC m=+1683.740381771 I0910 02:26:55.613878 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:26:55.613859395 +0000 UTC m=+1683.900631369 I0910 02:26:55.700924 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:26:55.702075 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:26:55.702063977 +0000 UTC m=+1683.988835961 I0910 02:26:55.776063 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:29:30.275105 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:29:30.275174 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-09-10 02:29:30.27516603 +0000 UTC m=+1838.561937984 I0910 02:29:30.275799 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-10 02:29:30.275785523 +0000 UTC m=+1838.562557507 I0910 02:29:30.297643 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:29:30.297866 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-09-10 02:29:30.297847193 +0000 UTC m=+1838.584619147 I0910 02:29:30.493162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:29:30.569653 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-gpcfd" condition "Approved" to 2026-09-10 02:29:30.569635446 +0000 UTC m=+1838.856407420 I0910 02:29:30.604771 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-gpcfd" condition "Ready" to 2026-09-10 02:29:30.604754755 +0000 UTC m=+1838.891526739 I0910 02:29:30.695978 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:29:30.695967529 +0000 UTC m=+1838.982739473 I0910 02:29:30.723288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:29:31.700167 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-09-10 02:29:31.700148922 +0000 UTC m=+1839.986920896 I0910 02:29:31.700302 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:29:31.700343 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-10 02:29:31.700334046 +0000 UTC m=+1839.987106020 I0910 02:29:31.719941 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:29:31.720017 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:29:31.720041 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-09-10 02:29:31.720033646 +0000 UTC m=+1840.006805620 I0910 02:29:31.917577 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-glgdr" condition "Approved" to 2026-09-10 02:29:31.917557235 +0000 UTC m=+1840.204329199 I0910 02:29:31.939640 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-glgdr" condition "Ready" to 2026-09-10 02:29:31.939629886 +0000 UTC m=+1840.226401840 I0910 02:29:31.972364 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:29:31.972349483 +0000 UTC m=+1840.259121437 I0910 02:29:32.000565 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:29:32.085570 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:32:44.449494 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-10 02:32:44.449477863 +0000 UTC m=+2032.736249847 I0910 02:32:44.449697 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:32:44.449780 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-09-10 02:32:44.449770679 +0000 UTC m=+2032.736542673 I0910 02:32:44.472126 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:32:44.472342 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-09-10 02:32:44.47232752 +0000 UTC m=+2032.759099494 I0910 02:32:44.763537 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:32:44.800813 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-npdrt" condition "Approved" to 2026-09-10 02:32:44.800801425 +0000 UTC m=+2033.087573379 I0910 02:32:44.826725 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-npdrt" condition "Ready" to 2026-09-10 02:32:44.826704196 +0000 UTC m=+2033.113476180 I0910 02:32:44.855319 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:32:44.855305216 +0000 UTC m=+2033.142077200 I0910 02:32:44.883000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:32:44.883633 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:32:44.88362107 +0000 UTC m=+2033.170393054 I0910 02:32:44.902500 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:32:44.903596 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:32:44.903571705 +0000 UTC m=+2033.190343679 I0910 02:33:31.539000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-tdxgd-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:33:31.539034 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tdxgd-api" condition "Issuing" to 2026-09-10 02:33:31.539027051 +0000 UTC m=+2079.825799005 I0910 02:33:31.539144 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tdxgd-vnc" condition "Ready" to 2026-09-10 02:33:31.539112603 +0000 UTC m=+2079.825884577 I0910 02:33:31.539000 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-tdxgd-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:33:31.539288 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tdxgd-vnc" condition "Issuing" to 2026-09-10 02:33:31.539283617 +0000 UTC m=+2079.826055571 I0910 02:33:31.539382 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tdxgd-api" condition "Ready" to 2026-09-10 02:33:31.539366748 +0000 UTC m=+2079.826138722 I0910 02:33:31.568410 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-tdxgd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdxgd-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:33:31.568588 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tdxgd-api" condition "Ready" to 2026-09-10 02:33:31.568573181 +0000 UTC m=+2079.855345155 I0910 02:33:31.568624 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-tdxgd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdxgd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:33:31.568756 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-tdxgd-vnc" condition "Ready" to 2026-09-10 02:33:31.568744404 +0000 UTC m=+2079.855516378 I0910 02:33:31.651882 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-tdxgd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdxgd-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:33:31.682721 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-tdxgd-api-xvqx4" condition "Approved" to 2026-09-10 02:33:31.682709094 +0000 UTC m=+2079.969481048 I0910 02:33:31.705505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-tdxgd-api-xvqx4" condition "Ready" to 2026-09-10 02:33:31.70549495 +0000 UTC m=+2079.992266894 I0910 02:33:31.746972 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-tdxgd-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:33:31.746952944 +0000 UTC m=+2080.033724908 I0910 02:33:31.747433 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-tdxgd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdxgd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:33:31.766382 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-tdxgd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdxgd-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:33:31.766662 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-tdxgd-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:33:31.766653114 +0000 UTC m=+2080.053425068 I0910 02:33:31.781334 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-tdxgd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdxgd-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:33:31.781394 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-tdxgd-vnc-tc9zj" condition "Approved" to 2026-09-10 02:33:31.781375978 +0000 UTC m=+2080.068147962 I0910 02:33:31.787324 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-tdxgd-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdxgd-api\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:33:31.800407 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-tdxgd-vnc-tc9zj" condition "Ready" to 2026-09-10 02:33:31.800393433 +0000 UTC m=+2080.087165387 I0910 02:33:31.833498 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-tdxgd-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:33:31.833480189 +0000 UTC m=+2080.120252163 I0910 02:33:31.849945 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-tdxgd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdxgd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:33:31.850542 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-tdxgd-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:33:31.850529173 +0000 UTC m=+2080.137301147 I0910 02:33:31.870669 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-tdxgd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdxgd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:33:31.897348 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-tdxgd-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-tdxgd-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:36:58.020234 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:36:58.020318 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-09-10 02:36:58.020309028 +0000 UTC m=+2286.307081002 I0910 02:36:58.020537 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-10 02:36:58.020506342 +0000 UTC m=+2286.307278326 I0910 02:36:58.039085 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:36:58.039185 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-09-10 02:36:58.03917858 +0000 UTC m=+2286.325950514 I0910 02:36:58.231112 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:36:58.269957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-kpwsz" condition "Approved" to 2026-09-10 02:36:58.26994557 +0000 UTC m=+2286.556717514 I0910 02:36:58.295646 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-kpwsz" condition "Ready" to 2026-09-10 02:36:58.295629587 +0000 UTC m=+2286.582401571 I0910 02:36:58.325934 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:36:58.325901693 +0000 UTC m=+2286.612673637 I0910 02:36:58.352490 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:36:58.352795 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:36:58.352787927 +0000 UTC m=+2286.639559861 I0910 02:36:58.375425 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:36:58.375769 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:36:58.375758716 +0000 UTC m=+2286.662530660 I0910 02:36:59.539898 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-09-10 02:36:59.539876836 +0000 UTC m=+2287.826648840 I0910 02:36:59.540043 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:36:59.540092 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-10 02:36:59.540080092 +0000 UTC m=+2287.826852076 I0910 02:36:59.558232 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:36:59.558467 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:36:59.558558 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-09-10 02:36:59.558545385 +0000 UTC m=+2287.845317369 I0910 02:36:59.898560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:36:59.913017 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-5zp95" condition "Approved" to 2026-09-10 02:36:59.912998463 +0000 UTC m=+2288.199770437 I0910 02:36:59.934575 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-5zp95" condition "Ready" to 2026-09-10 02:36:59.934561082 +0000 UTC m=+2288.221333026 I0910 02:36:59.979943 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:36:59.97992791 +0000 UTC m=+2288.266699864 I0910 02:37:00.004174 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:37:00.004534 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:37:00.004526923 +0000 UTC m=+2288.291298867 I0910 02:37:00.030791 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:37:00.032971 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:39:21.110487 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:39:21.110526 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-10 02:39:21.110518596 +0000 UTC m=+2429.397290550 I0910 02:39:21.110526 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-09-10 02:39:21.110501816 +0000 UTC m=+2429.397273820 E0910 02:39:21.128412 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:39:21.128490 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-09-10 02:39:21.128481779 +0000 UTC m=+2429.415253763 I0910 02:39:21.128519 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:39:21.130398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:39:21.130629 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:39:21.130657 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-09-10 02:39:21.130649895 +0000 UTC m=+2429.417421879 E0910 02:39:21.146621 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0910 02:39:21.146825 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:39:21.146920 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 02:39:21.146983 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0910 02:39:21.194929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-947gb" condition "Approved" to 2026-09-10 02:39:21.194914226 +0000 UTC m=+2429.481686210 I0910 02:39:21.220016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-947gb" condition "Ready" to 2026-09-10 02:39:21.220005651 +0000 UTC m=+2429.506777595 I0910 02:39:21.253561 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:39:21.253547786 +0000 UTC m=+2429.540319730 I0910 02:39:21.271484 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:39:21.271854 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:39:21.271846545 +0000 UTC m=+2429.558618509 I0910 02:39:21.279986 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:39:21.294868 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:39:21.800898 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-10 02:39:21.800880795 +0000 UTC m=+2430.087652779 I0910 02:39:21.801119 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:39:21.801180 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-09-10 02:39:21.801166421 +0000 UTC m=+2430.087938405 E0910 02:39:21.812486 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:39:21.812604 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-09-10 02:39:21.812537994 +0000 UTC m=+2430.099309968 I0910 02:39:21.812702 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:39:21.824027 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:39:21.824182 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-09-10 02:39:21.824169282 +0000 UTC m=+2430.110941276 E0910 02:39:21.829295 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0910 02:39:21.829397 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0910 02:39:21.829468 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0910 02:39:21.829544 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0910 02:39:21.850181 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:39:21.882284 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-5jnbj" condition "Approved" to 2026-09-10 02:39:21.882270951 +0000 UTC m=+2430.169042895 I0910 02:39:21.900689 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-5jnbj" condition "Ready" to 2026-09-10 02:39:21.900678164 +0000 UTC m=+2430.187450118 I0910 02:39:21.925054 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:39:21.925039842 +0000 UTC m=+2430.211811796 I0910 02:39:21.947960 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:39:21.994446 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:39:22.457427 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:39:22.457458 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-10 02:39:22.457439945 +0000 UTC m=+2430.744211929 I0910 02:39:22.457485 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-09-10 02:39:22.457471365 +0000 UTC m=+2430.744243339 I0910 02:39:22.476656 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:39:22.476729 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-09-10 02:39:22.476721605 +0000 UTC m=+2430.763493549 I0910 02:39:22.498980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:39:22.530846 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-6g76v" condition "Approved" to 2026-09-10 02:39:22.53083111 +0000 UTC m=+2430.817603094 I0910 02:39:22.553051 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-6g76v" condition "Ready" to 2026-09-10 02:39:22.553032913 +0000 UTC m=+2430.839804887 I0910 02:39:26.147388 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:39:26.147372879 +0000 UTC m=+2434.434144833 I0910 02:39:26.162105 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-6g76v" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:39:26.162087123 +0000 UTC m=+2434.448859097 I0910 02:39:26.194525 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:39:26.194508894 +0000 UTC m=+2434.481280868 I0910 02:39:26.235314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:39:26.831158 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:39:26.831146748 +0000 UTC m=+2435.117918702 I0910 02:41:42.932406 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:41:42.932465 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-09-10 02:41:42.932452161 +0000 UTC m=+2571.219224135 I0910 02:41:42.932555 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-10 02:41:42.932531623 +0000 UTC m=+2571.219303617 I0910 02:41:42.954276 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:41:42.954367 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-09-10 02:41:42.954361187 +0000 UTC m=+2571.241133141 I0910 02:41:43.151865 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:41:43.205373 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-svtl7" condition "Approved" to 2026-09-10 02:41:43.20535336 +0000 UTC m=+2571.492125324 I0910 02:41:43.232291 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-svtl7" condition "Ready" to 2026-09-10 02:41:43.232268994 +0000 UTC m=+2571.519040978 I0910 02:41:43.272079 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:41:43.272066212 +0000 UTC m=+2571.558838166 I0910 02:41:43.298056 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:41:43.298585 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:41:43.298576667 +0000 UTC m=+2571.585348641 I0910 02:41:43.325065 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:41:43.325431 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:41:43.325423659 +0000 UTC m=+2571.612195603 I0910 02:41:43.329018 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:30.558074 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-09-10 02:42:30.558056937 +0000 UTC m=+2618.844828891 I0910 02:42:30.580667 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-10 02:42:30.58065181 +0000 UTC m=+2618.867423784 I0910 02:42:30.581127 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:42:30.581200 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-09-10 02:42:30.581191741 +0000 UTC m=+2618.867963715 I0910 02:42:30.602845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:30.602924 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-09-10 02:42:30.602914425 +0000 UTC m=+2618.889686399 E0910 02:42:30.617643 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0910 02:42:30.688321 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-09-10 02:42:30.688298515 +0000 UTC m=+2618.975070489 I0910 02:42:30.717711 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:42:30.717762 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-09-10 02:42:30.717750742 +0000 UTC m=+2619.004522726 I0910 02:42:30.718566 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-10 02:42:30.7185551 +0000 UTC m=+2619.005327084 I0910 02:42:30.741127 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:30.741260 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-09-10 02:42:30.741250194 +0000 UTC m=+2619.028022178 E0910 02:42:31.048696 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0910 02:42:31.074185 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:31.107308 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-6jmhw" condition "Approved" to 2026-09-10 02:42:31.107300529 +0000 UTC m=+2619.394072473 I0910 02:42:31.129264 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-6jmhw" condition "Ready" to 2026-09-10 02:42:31.129252756 +0000 UTC m=+2619.416024690 I0910 02:42:31.169047 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:42:31.169038235 +0000 UTC m=+2619.455810179 I0910 02:42:31.190724 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:31.191039 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:42:31.191032103 +0000 UTC m=+2619.477804067 I0910 02:42:31.210503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:31.555009 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-09-10 02:42:31.554996114 +0000 UTC m=+2619.841768058 I0910 02:42:31.572532 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-09-10 02:42:31.572522048 +0000 UTC m=+2619.859293992 I0910 02:42:31.572749 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:42:31.572764 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-10 02:42:31.572762273 +0000 UTC m=+2619.859534207 I0910 02:42:31.586361 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:31.586420 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:42:31.586441 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-09-10 02:42:31.586436915 +0000 UTC m=+2619.873208859 I0910 02:42:31.750536 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-cqp66" condition "Approved" to 2026-09-10 02:42:31.750524302 +0000 UTC m=+2620.037296256 I0910 02:42:31.768618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-cqp66" condition "Ready" to 2026-09-10 02:42:31.768603249 +0000 UTC m=+2620.055375203 I0910 02:42:31.801733 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:42:31.801722404 +0000 UTC m=+2620.088494348 I0910 02:42:31.833853 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:31.877372 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:31.995634 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-09-10 02:42:31.995620209 +0000 UTC m=+2620.282392153 I0910 02:42:32.013403 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-10 02:42:32.013392687 +0000 UTC m=+2620.300164631 I0910 02:42:32.013638 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:42:32.013650 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-09-10 02:42:32.013647233 +0000 UTC m=+2620.300419167 I0910 02:42:32.037178 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:32.037348 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-09-10 02:42:32.037327208 +0000 UTC m=+2620.324099142 I0910 02:42:32.201292 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:32.228133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-2lsql" condition "Approved" to 2026-09-10 02:42:32.228122616 +0000 UTC m=+2620.514894560 I0910 02:42:32.256990 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-2lsql" condition "Ready" to 2026-09-10 02:42:32.256981321 +0000 UTC m=+2620.543753265 I0910 02:42:32.289816 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:42:32.289804201 +0000 UTC m=+2620.576576145 I0910 02:42:32.317693 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:32.317973 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:42:32.317968192 +0000 UTC m=+2620.604740136 I0910 02:42:32.458626 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-09-10 02:42:32.45861326 +0000 UTC m=+2620.745385204 I0910 02:42:32.489962 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0910 02:42:32.489990 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-09-10 02:42:32.489983489 +0000 UTC m=+2620.776755433 I0910 02:42:32.490166 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-10 02:42:32.490163293 +0000 UTC m=+2620.776935237 I0910 02:42:32.566485 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:32.674464 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:32.768789 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:32.772031 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-09-10 02:42:32.772011112 +0000 UTC m=+2621.058783106 I0910 02:42:33.018571 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:33.177618 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-xlfq9" condition "Approved" to 2026-09-10 02:42:33.177606621 +0000 UTC m=+2621.464378565 I0910 02:42:33.276460 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-xlfq9" condition "Ready" to 2026-09-10 02:42:33.276451208 +0000 UTC m=+2621.563223152 I0910 02:42:33.721785 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:42:33.721767033 +0000 UTC m=+2622.008538987 I0910 02:42:33.874201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0910 02:42:33.874576 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-09-10 02:42:33.87456823 +0000 UTC m=+2622.161340194 I0910 02:42:34.069166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"