I0425 16:01:21.138161       1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628"
I0425 16:01:21.138249       1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"]
W0425 16:01:21.138309       1 client_config.go:618] Neither --kubeconfig nor --master was specified.  Using the inClusterConfig.  This might not work.
I0425 16:01:21.145041       1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller"
I0425 16:01:21.145555       1 controller.go:156] "starting leader election" logger="cert-manager.controller"
I0425 16:01:21.145597       1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402"
I0425 16:01:21.145675       1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403"
I0425 16:01:21.148151       1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller...
I0425 16:01:21.161638       1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller
I0425 16:01:21.166797       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault"
I0425 16:01:21.166885       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver"
I0425 16:01:21.169871       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers"
I0425 16:01:21.171890       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager"
I0425 16:01:21.178045       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders"
I0425 16:01:21.183933       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi"
I0425 16:01:21.184039       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned"
I0425 16:01:21.188728       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness"
I0425 16:01:21.190942       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault"
I0425 16:01:21.192598       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca"
I0425 16:01:21.192613       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim"
I0425 16:01:21.192653       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi"
I0425 16:01:21.194422       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim"
I0425 16:01:21.196430       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing"
I0425 16:01:21.198220       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager"
I0425 16:01:21.200048       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics"
I0425 16:01:21.201833       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager"
I0425 16:01:21.206953       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger"
I0425 16:01:21.210052       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme"
I0425 16:01:21.212426       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme"
I0425 16:01:21.212454       1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned"
I0425 16:01:21.212504       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca"
I0425 16:01:21.215102       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers"
I0425 16:01:21.218309       1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges"
I0425 16:01:21.220717       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0425 16:01:21.220874       1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0425 16:01:21.221108       1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0425 16:01:21.221319       1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0425 16:01:21.223351       1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0425 16:01:21.223939       1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0425 16:01:21.224124       1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0425 16:01:21.224453       1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0425 16:01:21.225023       1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0425 16:01:21.319592       1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229
I0425 16:01:41.808668       1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-04-25 16:01:41.808650753 +0000 UTC m=+20.704504438
I0425 16:01:42.629878       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-25 16:01:42.62985157 +0000 UTC m=+21.525705255
I0425 16:01:42.630059       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:01:42.630165       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-04-25 16:01:42.630153879 +0000 UTC m=+21.526007574
I0425 16:01:42.649440       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:42.649532       1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-04-25 16:01:42.649524632 +0000 UTC m=+21.545378297
E0425 16:01:42.677855       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0425 16:01:42.677916       1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-04-25 16:01:42.677905965 +0000 UTC m=+21.573759660
E0425 16:01:42.678072       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
I0425 16:01:42.698475       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
E0425 16:01:42.698479       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
E0425 16:01:42.699060       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0425 16:01:42.699128       1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1"
E0425 16:01:42.699224       1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere"
I0425 16:01:42.735407       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-shw4b" condition "Approved" to 2026-04-25 16:01:42.735374952 +0000 UTC m=+21.631228637
I0425 16:01:42.762217       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-shw4b" condition "Ready" to 2026-04-25 16:01:42.762202348 +0000 UTC m=+21.658056033
I0425 16:01:42.851249       1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:01:42.851232863 +0000 UTC m=+21.747086558
I0425 16:01:42.891710       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:42.974496       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:47.699871       1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:01:47.699861086 +0000 UTC m=+26.595714751
I0425 16:01:48.215548       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:01:48.215903       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-25 16:01:48.215884913 +0000 UTC m=+27.111738608
I0425 16:01:48.215578       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-04-25 16:01:48.215571663 +0000 UTC m=+27.111425318
I0425 16:01:48.231717       1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-04-25 16:01:48.231704958 +0000 UTC m=+27.127558633
I0425 16:01:48.245093       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:48.245462       1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-04-25 16:01:48.245454971 +0000 UTC m=+27.141308626
I0425 16:01:48.491872       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:48.524013       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cvkbc" condition "Approved" to 2026-04-25 16:01:48.524002512 +0000 UTC m=+27.419856177
I0425 16:01:48.554999       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-cvkbc" condition "Ready" to 2026-04-25 16:01:48.554988213 +0000 UTC m=+27.450841878
I0425 16:01:48.585720       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:01:48.585702836 +0000 UTC m=+27.481556521
I0425 16:01:48.606317       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:48.607201       1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:01:48.607188382 +0000 UTC m=+27.503042067
I0425 16:01:48.628629       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:48.630655       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:52.858762       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-25 16:01:52.858738931 +0000 UTC m=+31.754592646
I0425 16:01:52.858851       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:01:52.859015       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-04-25 16:01:52.859003969 +0000 UTC m=+31.754857654
I0425 16:01:52.882787       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:52.882975       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-25 16:01:52.882865047 +0000 UTC m=+31.778718712
I0425 16:01:52.905726       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:52.905865       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-04-25 16:01:52.905852987 +0000 UTC m=+31.801706672
I0425 16:01:52.909613       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:52.914328       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-vpwlx" condition "Approved" to 2026-04-25 16:01:52.914308922 +0000 UTC m=+31.810162607
I0425 16:01:52.944152       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-vpwlx" condition "Ready" to 2026-04-25 16:01:52.944140708 +0000 UTC m=+31.839994373
I0425 16:01:52.989360       1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:01:52.989345917 +0000 UTC m=+31.885199602
I0425 16:01:53.007387       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:53.574861       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:01:53.574877       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-04-25 16:01:53.574860412 +0000 UTC m=+32.470714097
I0425 16:01:53.574901       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-25 16:01:53.574893463 +0000 UTC m=+32.470747128
I0425 16:01:53.591464       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:53.591814       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:01:53.591884       1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-04-25 16:01:53.591866132 +0000 UTC m=+32.487719827
I0425 16:01:53.643861       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-6gs7r" condition "Approved" to 2026-04-25 16:01:53.643842924 +0000 UTC m=+32.539696609
I0425 16:01:53.661013       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-6gs7r" condition "Ready" to 2026-04-25 16:01:53.6610021 +0000 UTC m=+32.556855765
I0425 16:01:53.690617       1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:01:53.690601759 +0000 UTC m=+32.586455434
I0425 16:01:53.711443       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:53.770123       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:01:54.270928       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-04-25 16:01:54.270912538 +0000 UTC m=+33.166766223
I0425 16:01:54.988463       1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-04-25 16:01:54.98845065 +0000 UTC m=+33.884304315
I0425 16:03:56.809687       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:03:56.809741       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-25 16:03:56.809728293 +0000 UTC m=+155.705581958
I0425 16:03:56.810296       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-04-25 16:03:56.810288186 +0000 UTC m=+155.706141851
E0425 16:03:56.824057       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0425 16:03:56.824094       1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-04-25 16:03:56.824088668 +0000 UTC m=+155.719942333
I0425 16:03:56.824114       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0425 16:03:56.826106       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:03:56.826183       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:03:56.826307       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-04-25 16:03:56.826298359 +0000 UTC m=+155.722152054
E0425 16:03:56.833630       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
E0425 16:03:56.833685       1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
I0425 16:03:56.833778       1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1"
E0425 16:03:56.833873       1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey"
I0425 16:03:56.844435       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:03:56.844462       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-04-25 16:03:56.844457371 +0000 UTC m=+155.740311046
I0425 16:03:56.844782       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-25 16:03:56.844711327 +0000 UTC m=+155.740564992
I0425 16:03:56.860983       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:03:56.861121       1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-04-25 16:03:56.861107929 +0000 UTC m=+155.756961624
I0425 16:03:57.108663       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:03:57.132736       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-wcl67" condition "Approved" to 2026-04-25 16:03:57.132724059 +0000 UTC m=+156.028577724
I0425 16:03:57.138777       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-wcx4m" condition "Approved" to 2026-04-25 16:03:57.138762049 +0000 UTC m=+156.034615744
I0425 16:03:57.161770       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-wcl67" condition "Ready" to 2026-04-25 16:03:57.161757674 +0000 UTC m=+156.057611339
I0425 16:03:57.163871       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-wcx4m" condition "Ready" to 2026-04-25 16:03:57.163860174 +0000 UTC m=+156.059713859
I0425 16:03:57.186096       1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:03:57.186088371 +0000 UTC m=+156.081942036
I0425 16:03:57.202187       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:04:01.834063       1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:04:01.834048655 +0000 UTC m=+160.729902320
I0425 16:04:01.845807       1 conditions.go:252] Found status change for CertificateRequest "valkey-server-wcx4m" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:04:01.845796069 +0000 UTC m=+160.741649734
I0425 16:04:01.880633       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:04:01.880617429 +0000 UTC m=+160.776471094
I0425 16:04:01.901195       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:04:01.901854       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:04:01.901843963 +0000 UTC m=+160.797697648
I0425 16:04:01.907459       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:04:01.913637       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:04:01.915758       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:04:01.916127       1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:04:01.916119836 +0000 UTC m=+160.811973521
I0425 16:08:36.306660       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready" to 2026-04-25 16:08:36.306640258 +0000 UTC m=+435.202493943
I0425 16:08:36.306698       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-65.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:08:36.306821       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Issuing" to 2026-04-25 16:08:36.306814272 +0000 UTC m=+435.202667927
I0425 16:08:36.323149       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:08:36.323447       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-65.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:08:36.323496       1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Issuing" to 2026-04-25 16:08:36.323481156 +0000 UTC m=+435.219334911
I0425 16:08:36.493674       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:08:36.502772       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-65.nip.io-tls-vvcgp" condition "Approved" to 2026-04-25 16:08:36.502764858 +0000 UTC m=+435.398618513
I0425 16:08:36.522775       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-65.nip.io-tls-vvcgp" condition "Ready" to 2026-04-25 16:08:36.522764133 +0000 UTC m=+435.418617818
I0425 16:08:36.549503       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:08:36.549492731 +0000 UTC m=+435.445346396
I0425 16:08:36.578480       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:08:36.578759       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:08:36.578751627 +0000 UTC m=+435.474605302
I0425 16:08:36.581685       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:08:36.591590       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:08:36.591885       1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-65.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:08:36.591879255 +0000 UTC m=+435.487732910
I0425 16:08:36.597419       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-65.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-65.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:10:45.085344       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-25 16:10:45.085324792 +0000 UTC m=+563.981178477
I0425 16:10:45.085744       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:10:45.086309       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-04-25 16:10:45.085828147 +0000 UTC m=+563.981681842
I0425 16:10:45.102472       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:10:45.102592       1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-04-25 16:10:45.102582113 +0000 UTC m=+563.998435778
I0425 16:10:45.940891       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:10:45.973735       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vk56p" condition "Approved" to 2026-04-25 16:10:45.973717374 +0000 UTC m=+564.869571059
I0425 16:10:45.992609       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-vk56p" condition "Ready" to 2026-04-25 16:10:45.992582157 +0000 UTC m=+564.888435842
I0425 16:10:46.021508       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:10:46.021490395 +0000 UTC m=+564.917344080
I0425 16:10:46.042475       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:10:46.042857       1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:10:46.042846407 +0000 UTC m=+564.938700082
I0425 16:10:46.066452       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:11:35.894844       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:11:35.894886       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-25 16:11:35.894876258 +0000 UTC m=+614.790729953
I0425 16:11:35.895262       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-04-25 16:11:35.895254008 +0000 UTC m=+614.791107703
I0425 16:11:35.916468       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:11:35.916527       1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist"
I0425 16:11:35.916542       1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-04-25 16:11:35.916536548 +0000 UTC m=+614.812390233
I0425 16:11:36.151782       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:11:36.158045       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-95pcm" condition "Approved" to 2026-04-25 16:11:36.15803557 +0000 UTC m=+615.053889225
I0425 16:11:36.176904       1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-95pcm" condition "Ready" to 2026-04-25 16:11:36.176894263 +0000 UTC m=+615.072747918
I0425 16:11:36.206188       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:11:36.206175001 +0000 UTC m=+615.102028666
I0425 16:11:36.223937       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"
I0425 16:11:36.224185       1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-04-25 16:11:36.224176802 +0000 UTC m=+615.120030467
I0425 16:11:36.244633       1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"