I0721 13:41:47.876548 1 start.go:75] "starting controller" logger="cert-manager" version="v1.12.17" git-commit="37b853ff34a6c093e946c657c189f40413c0f628" I0721 13:41:47.876774 1 controller.go:262] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0721 13:41:47.876891 1 client_config.go:618] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0721 13:41:47.883985 1 controller.go:82] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0721 13:41:47.884673 1 controller.go:156] "starting leader election" logger="cert-manager.controller" I0721 13:41:47.884796 1 controller.go:149] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0721 13:41:47.884798 1 controller.go:103] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0721 13:41:47.887516 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0721 13:41:47.903682 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0721 13:41:47.908452 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0721 13:41:47.908558 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0721 13:41:47.911140 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0721 13:41:47.916894 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0721 13:41:47.921580 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0721 13:41:47.926096 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0721 13:41:47.926134 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0721 13:41:47.926229 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0721 13:41:47.928820 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="issuers" I0721 13:41:47.930724 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0721 13:41:47.933144 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0721 13:41:47.935920 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0721 13:41:47.942207 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0721 13:41:47.945201 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="challenges" I0721 13:41:47.947608 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0721 13:41:47.951312 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0721 13:41:47.956152 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0721 13:41:47.959812 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0721 13:41:47.959839 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0721 13:41:47.959846 1 controller.go:203] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0721 13:41:47.959971 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0721 13:41:47.962066 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0721 13:41:47.964019 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0721 13:41:47.967336 1 controller.go:226] "starting controller" logger="cert-manager.controller" controller="orders" I0721 13:41:47.969588 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 13:41:47.971881 1 reflector.go:351] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 13:41:47.974012 1 reflector.go:351] Caches populated for *v1.Ingress from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 13:41:47.985818 1 reflector.go:351] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 13:41:48.004402 1 reflector.go:351] Caches populated for *v1.Issuer from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 13:41:48.018622 1 reflector.go:351] Caches populated for *v1.Order from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 13:41:48.038890 1 reflector.go:351] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 13:41:48.058236 1 reflector.go:351] Caches populated for *v1.Certificate from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 13:41:48.071196 1 reflector.go:351] Caches populated for *v1.Secret from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 13:41:48.077120 1 reflector.go:351] Caches populated for *v1.Challenge from k8s.io/client-go@v0.29.7/tools/cache/reflector.go:229 I0721 13:42:01.110110 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-07-21 13:42:01.110090269 +0000 UTC m=+13.273561796 I0721 13:42:01.919474 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-07-21 13:42:01.919454463 +0000 UTC m=+14.082925990 I0721 13:42:01.919884 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:42:01.919978 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-21 13:42:01.919965286 +0000 UTC m=+14.083436853 E0721 13:42:01.936794 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0721 13:42:01.936885 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-07-21 13:42:01.9368771 +0000 UTC m=+14.100348627 E0721 13:42:01.936919 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0721 13:42:01.939685 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:42:01.939889 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:42:01.939954 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-07-21 13:42:01.939922698 +0000 UTC m=+14.103394245 E0721 13:42:01.945535 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" E0721 13:42:01.945779 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 13:42:01.945892 1 sync.go:62] "error setting up issuer" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 13:42:01.945936 1 controller.go:167] "re-queuing item due to error processing" err="secret \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.clusterissuers" key="atmosphere" I0721 13:42:01.981083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-r9ndn" condition "Approved" to 2026-07-21 13:42:01.981064856 +0000 UTC m=+14.144536403 I0721 13:42:01.994995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-r9ndn" condition "Ready" to 2026-07-21 13:42:01.994977663 +0000 UTC m=+14.158449220 I0721 13:42:02.022327 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:42:02.022317536 +0000 UTC m=+14.185789063 I0721 13:42:02.040263 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:42:02.083982 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:42:06.946677 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:42:06.946662339 +0000 UTC m=+19.110133886 I0721 13:42:27.591580 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-07-21 13:42:27.591558656 +0000 UTC m=+39.755030213 I0721 13:42:27.591722 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:42:27.592040 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-21 13:42:27.592027107 +0000 UTC m=+39.755498634 I0721 13:42:27.610400 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-07-21 13:42:27.61038131 +0000 UTC m=+39.773852837 I0721 13:42:27.613608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:42:27.613733 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:42:27.613786 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-07-21 13:42:27.613777617 +0000 UTC m=+39.777249144 I0721 13:42:27.811980 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:42:27.824300 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9jcdr" condition "Approved" to 2026-07-21 13:42:27.824287425 +0000 UTC m=+39.987758982 I0721 13:42:27.862935 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-9jcdr" condition "Ready" to 2026-07-21 13:42:27.862891967 +0000 UTC m=+40.026363494 I0721 13:42:27.898860 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:42:27.898846431 +0000 UTC m=+40.062317958 I0721 13:42:27.928981 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:42:27.984330 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:44:14.360486 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:44:14.360580 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-21 13:44:14.360566971 +0000 UTC m=+146.524038498 I0721 13:44:14.360557 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-07-21 13:44:14.360495479 +0000 UTC m=+146.523967026 E0721 13:44:14.376415 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 13:44:14.376550 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-07-21 13:44:14.376536863 +0000 UTC m=+146.540008420 I0721 13:44:14.376584 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 13:44:14.379673 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:44:14.379829 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:44:14.379912 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-07-21 13:44:14.379856106 +0000 UTC m=+146.543327663 E0721 13:44:14.388227 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0721 13:44:14.388253 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:44:14.388316 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-07-21 13:44:14.388308389 +0000 UTC m=+146.551779916 I0721 13:44:14.388326 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-21 13:44:14.388301319 +0000 UTC m=+146.551772876 E0721 13:44:14.388467 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 13:44:14.388525 1 sync.go:62] "Error initializing issuer: secret \"valkey-ca\" not found" logger="cert-manager.issuers" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0721 13:44:14.388565 1 controller.go:167] "re-queuing item due to error processing" err="secret \"valkey-ca\" not found" logger="cert-manager.issuers" key="openstack/valkey" I0721 13:44:14.410381 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:44:14.410477 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-07-21 13:44:14.410465666 +0000 UTC m=+146.573937213 I0721 13:44:14.525426 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:44:14.558669 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-hv7dl" condition "Approved" to 2026-07-21 13:44:14.558640381 +0000 UTC m=+146.722111938 I0721 13:44:14.579031 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-hv7dl" condition "Ready" to 2026-07-21 13:44:14.579016603 +0000 UTC m=+146.742488120 I0721 13:44:14.589732 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:44:14.595799 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-z672g" condition "Approved" to 2026-07-21 13:44:14.595784375 +0000 UTC m=+146.759255902 I0721 13:44:14.625079 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-z672g" condition "Ready" to 2026-07-21 13:44:14.625059431 +0000 UTC m=+146.788530968 I0721 13:44:14.661993 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:44:14.661976809 +0000 UTC m=+146.825448356 I0721 13:44:14.685851 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:44:14.686209 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:44:14.686194468 +0000 UTC m=+146.849665995 I0721 13:44:14.695491 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:44:14.706397 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:44:19.389657 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:44:19.389639836 +0000 UTC m=+151.553111393 I0721 13:44:19.424653 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-hv7dl" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:44:19.424635976 +0000 UTC m=+151.588107533 I0721 13:44:19.463653 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:44:19.463619516 +0000 UTC m=+151.627091073 I0721 13:44:19.489322 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:47:06.392554 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:47:06.392609 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready" to 2026-07-21 13:47:06.392565979 +0000 UTC m=+318.556037506 I0721 13:47:06.392656 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Issuing" to 2026-07-21 13:47:06.392646711 +0000 UTC m=+318.556118238 I0721 13:47:06.407551 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:47:06.407614 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="auth-system/keycloak.199-204-45-70.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:47:06.407637 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Issuing" to 2026-07-21 13:47:06.407628871 +0000 UTC m=+318.571100398 I0721 13:47:06.509708 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-9d7ss" condition "Approved" to 2026-07-21 13:47:06.509687742 +0000 UTC m=+318.673159289 I0721 13:47:06.528171 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-204-45-70.nip.io-tls-9d7ss" condition "Ready" to 2026-07-21 13:47:06.528156661 +0000 UTC m=+318.691628188 I0721 13:47:06.557523 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:47:06.557510696 +0000 UTC m=+318.720982223 I0721 13:47:06.580004 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:47:06.580309 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:47:06.580303685 +0000 UTC m=+318.743775192 I0721 13:47:06.597794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:47:06.598202 1 conditions.go:192] Found status change for Certificate "keycloak.199-204-45-70.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:47:06.598192638 +0000 UTC m=+318.761664165 I0721 13:47:06.599786 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="auth-system/keycloak.199-204-45-70.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-204-45-70.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:48:18.550821 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:48:18.550856 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-21 13:48:18.550849666 +0000 UTC m=+390.714321193 I0721 13:48:18.550871 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-07-21 13:48:18.550848036 +0000 UTC m=+390.714319593 I0721 13:48:18.566194 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:48:18.566277 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:48:18.566395 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-07-21 13:48:18.566287148 +0000 UTC m=+390.729758675 E0721 13:48:18.566545 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0721 13:48:18.566645 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-07-21 13:48:18.566624637 +0000 UTC m=+390.730096194 E0721 13:48:18.566827 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 13:48:18.577878 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" E0721 13:48:18.577958 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 13:48:18.577988 1 sync.go:62] "error setting up issuer" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0721 13:48:18.578062 1 controller.go:167] "re-queuing item due to error processing" err="secret \"kube-prometheus-stack-ca\" not found" logger="cert-manager.clusterissuers" key="kube-prometheus-stack" I0721 13:48:18.611210 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jqj9t" condition "Approved" to 2026-07-21 13:48:18.611188038 +0000 UTC m=+390.774659595 I0721 13:48:18.623122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-jqj9t" condition "Ready" to 2026-07-21 13:48:18.62309925 +0000 UTC m=+390.786570807 I0721 13:48:18.645035 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:48:18.645021716 +0000 UTC m=+390.808493233 I0721 13:48:18.662496 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:48:23.578637 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:48:23.57862225 +0000 UTC m=+395.742093807 I0721 13:49:04.779374 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-21 13:49:04.779358692 +0000 UTC m=+436.942830219 I0721 13:49:04.779943 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:49:04.779985 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-07-21 13:49:04.779979828 +0000 UTC m=+436.943451355 I0721 13:49:04.780357 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:49:04.780424 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-07-21 13:49:04.780413569 +0000 UTC m=+436.943885096 I0721 13:49:04.780869 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-21 13:49:04.780859001 +0000 UTC m=+436.944330528 I0721 13:49:04.781309 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-07-21 13:49:04.781302922 +0000 UTC m=+436.944774449 I0721 13:49:04.781511 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:49:04.781543 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-21 13:49:04.781537808 +0000 UTC m=+436.945009335 I0721 13:49:04.823162 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:04.823231 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-07-21 13:49:04.823220816 +0000 UTC m=+436.986692333 I0721 13:49:04.829564 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:04.829660 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-07-21 13:49:04.829651039 +0000 UTC m=+436.993122566 I0721 13:49:04.830183 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:04.830314 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:49:04.830367 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-07-21 13:49:04.830359527 +0000 UTC m=+436.993831064 I0721 13:49:05.011871 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:05.048245 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wdst2" condition "Approved" to 2026-07-21 13:49:05.048224946 +0000 UTC m=+437.211696493 I0721 13:49:05.078647 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-wdst2" condition "Ready" to 2026-07-21 13:49:05.078631427 +0000 UTC m=+437.242102954 I0721 13:49:05.126241 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:49:05.126228795 +0000 UTC m=+437.289700322 I0721 13:49:05.144610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:05.146600 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:05.147938 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:05.148239 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:49:05.148229574 +0000 UTC m=+437.311701101 I0721 13:49:05.170238 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m8cxl" condition "Approved" to 2026-07-21 13:49:05.170229512 +0000 UTC m=+437.333701039 I0721 13:49:05.178536 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:05.180855 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:49:05.180845231 +0000 UTC m=+437.344316738 I0721 13:49:05.187585 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:05.188531 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-m8cxl" condition "Ready" to 2026-07-21 13:49:05.188520046 +0000 UTC m=+437.351991563 I0721 13:49:05.420030 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wl8wk" condition "Approved" to 2026-07-21 13:49:05.420007941 +0000 UTC m=+437.583479468 I0721 13:49:05.467534 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:49:05.467509246 +0000 UTC m=+437.630980763 I0721 13:49:05.522999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-wl8wk" condition "Ready" to 2026-07-21 13:49:05.522983785 +0000 UTC m=+437.686455332 I0721 13:49:05.914346 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:05.914952 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:49:05.91493756 +0000 UTC m=+438.078409107 I0721 13:49:06.321522 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:49:06.321499739 +0000 UTC m=+438.484971296 I0721 13:49:06.364201 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:06.416288 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:06.606049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:06.606584 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:49:06.606573683 +0000 UTC m=+438.770045240 I0721 13:49:06.813935 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:06.862261 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:13.673069 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:49:13.673139 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls" condition "Issuing" to 2026-07-21 13:49:13.673103236 +0000 UTC m=+445.836574773 I0721 13:49:13.673139 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls" condition "Ready" to 2026-07-21 13:49:13.673112376 +0000 UTC m=+445.836583903 I0721 13:49:13.691678 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:13.692018 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:49:13.692110 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls" condition "Issuing" to 2026-07-21 13:49:13.692101188 +0000 UTC m=+445.855572715 I0721 13:49:14.050999 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cgr9m-48jkb" condition "Approved" to 2026-07-21 13:49:14.050924175 +0000 UTC m=+446.214395702 I0721 13:49:14.070529 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-cgr9m-48jkb" condition "Ready" to 2026-07-21 13:49:14.070519502 +0000 UTC m=+446.233991019 I0721 13:49:14.100235 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:49:14.100216875 +0000 UTC m=+446.263688432 I0721 13:49:14.125973 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:14.126267 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:49:14.126260527 +0000 UTC m=+446.289732044 I0721 13:49:14.149068 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-cgr9m-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:38.794975 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:49:38.795022 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-07-21 13:49:38.795011125 +0000 UTC m=+470.958482682 I0721 13:49:38.795192 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-21 13:49:38.795168889 +0000 UTC m=+470.958640436 I0721 13:49:38.820810 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:38.820903 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-07-21 13:49:38.820892881 +0000 UTC m=+470.984364408 I0721 13:49:38.985398 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:49:39.020914 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xzxx8" condition "Approved" to 2026-07-21 13:49:39.020889376 +0000 UTC m=+471.184360933 I0721 13:49:39.046247 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-xzxx8" condition "Ready" to 2026-07-21 13:49:39.046234489 +0000 UTC m=+471.209706006 I0721 13:49:39.080017 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:49:39.080003456 +0000 UTC m=+471.243474983 I0721 13:49:39.099671 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:52:59.338550 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:52:59.338597 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-21 13:52:59.338588063 +0000 UTC m=+671.502059600 I0721 13:52:59.338759 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-07-21 13:52:59.338751667 +0000 UTC m=+671.502223224 I0721 13:52:59.355737 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:52:59.355851 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:52:59.355899 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-07-21 13:52:59.35588878 +0000 UTC m=+671.519360337 I0721 13:52:59.624929 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-scp5d" condition "Approved" to 2026-07-21 13:52:59.62491276 +0000 UTC m=+671.788384287 I0721 13:52:59.646379 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-scp5d" condition "Ready" to 2026-07-21 13:52:59.646365853 +0000 UTC m=+671.809837380 I0721 13:52:59.676321 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:52:59.67630724 +0000 UTC m=+671.839778767 I0721 13:52:59.702823 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:52:59.703792 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:52:59.703784516 +0000 UTC m=+671.867256043 I0721 13:52:59.721340 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:55:30.722286 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:55:30.722453 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-07-21 13:55:30.722442221 +0000 UTC m=+822.885913798 I0721 13:55:30.722309 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-21 13:55:30.722287888 +0000 UTC m=+822.885759445 I0721 13:55:30.742204 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:55:30.742281 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-07-21 13:55:30.742272822 +0000 UTC m=+822.905744349 I0721 13:55:30.852777 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:55:30.889774 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jq6jg" condition "Approved" to 2026-07-21 13:55:30.889758088 +0000 UTC m=+823.053229615 I0721 13:55:30.911083 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-jq6jg" condition "Ready" to 2026-07-21 13:55:30.911066996 +0000 UTC m=+823.074538553 I0721 13:55:30.940215 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:55:30.940198002 +0000 UTC m=+823.103669529 I0721 13:55:30.965785 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:56:36.146259 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-21 13:56:36.146242304 +0000 UTC m=+888.309713831 I0721 13:56:36.146752 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:56:36.146770 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-07-21 13:56:36.146765697 +0000 UTC m=+888.310237224 I0721 13:56:36.166794 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:56:36.167097 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-07-21 13:56:36.167085981 +0000 UTC m=+888.330557518 I0721 13:56:36.469621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:56:36.515135 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-t4xdh" condition "Approved" to 2026-07-21 13:56:36.515101772 +0000 UTC m=+888.678573299 I0721 13:56:36.537752 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-t4xdh" condition "Ready" to 2026-07-21 13:56:36.537734684 +0000 UTC m=+888.701206211 I0721 13:56:36.570833 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:56:36.570812139 +0000 UTC m=+888.734283686 I0721 13:56:36.590482 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:56:36.591058 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:56:36.59103936 +0000 UTC m=+888.754510917 I0721 13:56:36.601560 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:56:36.613784 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:59:43.345814 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-07-21 13:59:43.345784075 +0000 UTC m=+1075.509255642 I0721 13:59:43.347010 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:59:43.347182 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-21 13:59:43.3471693 +0000 UTC m=+1075.510640857 I0721 13:59:43.363883 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:59:43.363970 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 13:59:43.363998 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-07-21 13:59:43.363989269 +0000 UTC m=+1075.527460796 I0721 13:59:43.850236 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:59:43.867989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-kl4l2" condition "Approved" to 2026-07-21 13:59:43.867974168 +0000 UTC m=+1076.031445715 I0721 13:59:43.892012 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-kl4l2" condition "Ready" to 2026-07-21 13:59:43.891997486 +0000 UTC m=+1076.055469043 I0721 13:59:43.924082 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:59:43.924064686 +0000 UTC m=+1076.087536213 I0721 13:59:43.947166 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:59:43.947692 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:59:43.947685404 +0000 UTC m=+1076.111156921 I0721 13:59:43.973503 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 13:59:43.973827 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 13:59:43.973817715 +0000 UTC m=+1076.137289242 I0721 14:05:51.078548 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-21 14:05:51.078532352 +0000 UTC m=+1443.242003879 I0721 14:05:51.078607 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:05:51.078702 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-07-21 14:05:51.078693395 +0000 UTC m=+1443.242164922 I0721 14:05:51.099314 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:05:51.099442 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-07-21 14:05:51.099430212 +0000 UTC m=+1443.262901739 I0721 14:05:51.277583 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:05:51.322377 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-slxvn" condition "Approved" to 2026-07-21 14:05:51.322359546 +0000 UTC m=+1443.485831073 I0721 14:05:51.355750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-slxvn" condition "Ready" to 2026-07-21 14:05:51.355727247 +0000 UTC m=+1443.519198794 I0721 14:05:51.383361 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:05:51.383344128 +0000 UTC m=+1443.546815665 I0721 14:05:51.406335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:05:51.406794 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:05:51.406785805 +0000 UTC m=+1443.570257332 I0721 14:05:51.424264 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:05:51.424623 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:05:51.424613176 +0000 UTC m=+1443.588084693 I0721 14:07:20.217073 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-21 14:07:20.217054086 +0000 UTC m=+1532.380525643 I0721 14:07:20.217659 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:07:20.217709 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-07-21 14:07:20.217697393 +0000 UTC m=+1532.381168920 I0721 14:07:20.240279 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:07:20.240393 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-07-21 14:07:20.240378536 +0000 UTC m=+1532.403850153 I0721 14:07:20.500238 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:07:20.537950 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-gcsh9" condition "Approved" to 2026-07-21 14:07:20.537940608 +0000 UTC m=+1532.701412125 I0721 14:07:20.556066 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-gcsh9" condition "Ready" to 2026-07-21 14:07:20.556050455 +0000 UTC m=+1532.719522012 I0721 14:07:20.590559 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:07:20.590527868 +0000 UTC m=+1532.753999405 I0721 14:07:20.614318 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:08:21.524466 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-21 14:08:21.524401985 +0000 UTC m=+1593.687873552 I0721 14:08:21.524530 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:08:21.524666 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-07-21 14:08:21.524656811 +0000 UTC m=+1593.688128338 I0721 14:08:21.549136 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:08:21.549269 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-07-21 14:08:21.549260017 +0000 UTC m=+1593.712731524 I0721 14:08:21.572187 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:08:21.598212 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-7b87v" condition "Approved" to 2026-07-21 14:08:21.598196411 +0000 UTC m=+1593.761667958 I0721 14:08:21.616837 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-7b87v" condition "Ready" to 2026-07-21 14:08:21.616823635 +0000 UTC m=+1593.780295162 I0721 14:08:21.652765 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:08:21.652750678 +0000 UTC m=+1593.816222215 I0721 14:08:21.675621 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:08:22.187645 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-21 14:08:22.187625654 +0000 UTC m=+1594.351097191 I0721 14:08:22.187661 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:08:22.187828 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-07-21 14:08:22.187815739 +0000 UTC m=+1594.351287296 I0721 14:08:22.202601 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:08:22.202840 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-07-21 14:08:22.20282904 +0000 UTC m=+1594.366300577 I0721 14:08:22.229191 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:08:22.261778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-85wdt" condition "Approved" to 2026-07-21 14:08:22.261761428 +0000 UTC m=+1594.425232965 I0721 14:08:22.283410 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-85wdt" condition "Ready" to 2026-07-21 14:08:22.283399198 +0000 UTC m=+1594.446870715 I0721 14:08:22.321812 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:08:22.321787614 +0000 UTC m=+1594.485259141 I0721 14:08:22.345740 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:08:22.346073 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:08:22.346062771 +0000 UTC m=+1594.509534308 I0721 14:08:22.385632 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:08:22.385946 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:08:22.385939905 +0000 UTC m=+1594.549411412 I0721 14:08:22.975694 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-07-21 14:08:22.975672816 +0000 UTC m=+1595.139144333 I0721 14:08:23.622507 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-07-21 14:08:23.622491678 +0000 UTC m=+1595.785963225 I0721 14:09:10.894753 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-07-21 14:09:10.89472981 +0000 UTC m=+1643.058201327 I0721 14:09:10.895770 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:09:10.895796 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-21 14:09:10.895792717 +0000 UTC m=+1643.059264234 I0721 14:09:10.928710 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:09:10.928805 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:09:10.928828 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-07-21 14:09:10.928823696 +0000 UTC m=+1643.092295203 I0721 14:09:13.156755 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:09:13.188193 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-sd6zz" condition "Approved" to 2026-07-21 14:09:13.188173438 +0000 UTC m=+1645.351644965 I0721 14:09:13.208697 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-sd6zz" condition "Ready" to 2026-07-21 14:09:13.20868649 +0000 UTC m=+1645.372158017 I0721 14:09:13.240622 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:09:13.240604311 +0000 UTC m=+1645.404075838 I0721 14:09:13.264131 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:09:13.265032 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:09:13.265023542 +0000 UTC m=+1645.428495069 I0721 14:09:13.276336 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:09:13.288307 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:11:47.442509 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-07-21 14:11:47.44247655 +0000 UTC m=+1799.605948067 I0721 14:11:47.442708 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:11:47.442807 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-21 14:11:47.442794038 +0000 UTC m=+1799.606265595 I0721 14:11:47.460922 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:11:47.461091 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:11:47.461177 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-07-21 14:11:47.461135445 +0000 UTC m=+1799.624606982 I0721 14:11:47.590812 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:11:47.596478 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-4tfc2" condition "Approved" to 2026-07-21 14:11:47.596467224 +0000 UTC m=+1799.759938751 I0721 14:11:47.615930 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-4tfc2" condition "Ready" to 2026-07-21 14:11:47.615919949 +0000 UTC m=+1799.779391476 I0721 14:11:47.650040 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:11:47.650026226 +0000 UTC m=+1799.813497753 I0721 14:11:47.668918 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:11:47.669274 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:11:47.669267215 +0000 UTC m=+1799.832738742 I0721 14:11:47.691049 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:11:47.696958 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:11:49.208213 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:11:49.208249 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-21 14:11:49.208232375 +0000 UTC m=+1801.371703932 I0721 14:11:49.208244 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-07-21 14:11:49.208237685 +0000 UTC m=+1801.371709202 I0721 14:11:49.227296 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:11:49.227402 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-07-21 14:11:49.227388972 +0000 UTC m=+1801.390860479 I0721 14:11:49.403515 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:11:49.437613 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-rqfkp" condition "Approved" to 2026-07-21 14:11:49.437600245 +0000 UTC m=+1801.601071772 I0721 14:11:49.460356 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-rqfkp" condition "Ready" to 2026-07-21 14:11:49.460339753 +0000 UTC m=+1801.623811280 I0721 14:11:49.488620 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:11:49.488598771 +0000 UTC m=+1801.652070328 I0721 14:11:49.510302 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:11:49.510733 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:11:49.510721924 +0000 UTC m=+1801.674193451 I0721 14:11:49.537610 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:14:54.616254 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-07-21 14:14:54.616239167 +0000 UTC m=+1986.779710684 I0721 14:14:54.616321 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:14:54.616365 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-21 14:14:54.61635501 +0000 UTC m=+1986.779826557 I0721 14:14:54.632759 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:14:54.632873 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:14:54.632897 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-07-21 14:14:54.632888771 +0000 UTC m=+1986.796360318 I0721 14:14:54.781993 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-64jfm" condition "Approved" to 2026-07-21 14:14:54.78197798 +0000 UTC m=+1986.945449507 I0721 14:14:54.804635 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-64jfm" condition "Ready" to 2026-07-21 14:14:54.804618856 +0000 UTC m=+1986.968090383 I0721 14:14:54.845302 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:14:54.84529173 +0000 UTC m=+1987.008763247 I0721 14:14:54.870103 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:15:48.620022 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-g2hj4-vnc" condition "Ready" to 2026-07-21 14:15:48.620008172 +0000 UTC m=+2040.783479709 I0721 14:15:48.621528 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-g2hj4-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:15:48.621643 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-g2hj4-vnc" condition "Issuing" to 2026-07-21 14:15:48.621628003 +0000 UTC m=+2040.785099550 I0721 14:15:48.624407 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-g2hj4-api" condition "Ready" to 2026-07-21 14:15:48.624377103 +0000 UTC m=+2040.787848660 I0721 14:15:48.625667 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-g2hj4-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:15:48.625704 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-g2hj4-api" condition "Issuing" to 2026-07-21 14:15:48.625696556 +0000 UTC m=+2040.789168113 I0721 14:15:48.642353 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-g2hj4-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-g2hj4-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:15:48.642517 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-g2hj4-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:15:48.642565 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-g2hj4-vnc" condition "Issuing" to 2026-07-21 14:15:48.642550754 +0000 UTC m=+2040.806022311 I0721 14:15:48.646053 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-g2hj4-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-g2hj4-api\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:15:48.646151 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/libvirt-libvirt-default-g2hj4-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:15:48.646179 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-g2hj4-api" condition "Issuing" to 2026-07-21 14:15:48.646171897 +0000 UTC m=+2040.809643454 I0721 14:15:48.844397 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-g2hj4-vnc-8px5k" condition "Approved" to 2026-07-21 14:15:48.844379735 +0000 UTC m=+2041.007851262 I0721 14:15:48.868176 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-g2hj4-vnc-8px5k" condition "Ready" to 2026-07-21 14:15:48.86817079 +0000 UTC m=+2041.031642297 I0721 14:15:48.868175 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-g2hj4-api-d96r8" condition "Approved" to 2026-07-21 14:15:48.86815986 +0000 UTC m=+2041.031631417 I0721 14:15:48.886750 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-g2hj4-api-d96r8" condition "Ready" to 2026-07-21 14:15:48.886737232 +0000 UTC m=+2041.050208739 I0721 14:15:48.907968 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-g2hj4-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:15:48.907948521 +0000 UTC m=+2041.071420048 I0721 14:15:48.915721 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-g2hj4-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:15:48.915699288 +0000 UTC m=+2041.079170805 I0721 14:15:48.931820 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-g2hj4-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-g2hj4-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:15:48.932179 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-g2hj4-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:15:48.932169447 +0000 UTC m=+2041.095640964 I0721 14:15:48.936840 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/libvirt-libvirt-default-g2hj4-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-g2hj4-api\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:15:48.937435 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-g2hj4-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:15:48.937418871 +0000 UTC m=+2041.100890418 I0721 14:15:48.944844 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/libvirt-libvirt-default-g2hj4-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-g2hj4-api\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:15:48.955765 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-g2hj4-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-g2hj4-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:15:48.958462 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/libvirt-libvirt-default-g2hj4-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-g2hj4-api\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:19:24.406574 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:19:24.406645 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-07-21 14:19:24.406637838 +0000 UTC m=+2256.570109365 I0721 14:19:24.406673 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-21 14:19:24.406661238 +0000 UTC m=+2256.570132755 I0721 14:19:24.426271 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:19:24.426470 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-07-21 14:19:24.426456785 +0000 UTC m=+2256.589928332 I0721 14:19:24.632763 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:19:24.672034 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-m6nmp" condition "Approved" to 2026-07-21 14:19:24.67202002 +0000 UTC m=+2256.835491547 I0721 14:19:24.705901 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-m6nmp" condition "Ready" to 2026-07-21 14:19:24.70589022 +0000 UTC m=+2256.869361737 I0721 14:19:24.741538 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:19:24.741523304 +0000 UTC m=+2256.904994861 I0721 14:19:24.764905 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:19:24.765549 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:19:24.765537197 +0000 UTC m=+2256.929008754 I0721 14:19:24.784413 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:19:24.785069 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:19:24.785059717 +0000 UTC m=+2256.948531244 I0721 14:19:24.789514 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:19:26.116179 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:19:26.116215 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-07-21 14:19:26.116208101 +0000 UTC m=+2258.279679628 I0721 14:19:26.116263 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-21 14:19:26.116241492 +0000 UTC m=+2258.279713049 I0721 14:19:26.135957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:19:26.136076 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-07-21 14:19:26.136069009 +0000 UTC m=+2258.299540536 I0721 14:19:26.406134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:19:26.440387 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-5xfcz" condition "Approved" to 2026-07-21 14:19:26.440371008 +0000 UTC m=+2258.603842535 I0721 14:19:26.462833 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-5xfcz" condition "Ready" to 2026-07-21 14:19:26.462823291 +0000 UTC m=+2258.626294808 I0721 14:19:26.489043 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:19:26.489031239 +0000 UTC m=+2258.652502756 I0721 14:19:26.507356 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:21:39.142627 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:21:39.142691 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-07-21 14:21:39.142630244 +0000 UTC m=+2391.306101811 I0721 14:21:39.142731 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-21 14:21:39.142721576 +0000 UTC m=+2391.306193103 E0721 14:21:39.158143 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 14:21:39.158247 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-07-21 14:21:39.158236406 +0000 UTC m=+2391.321707963 I0721 14:21:39.158279 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 14:21:39.160096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:21:39.160195 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:21:39.160219 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-07-21 14:21:39.160211305 +0000 UTC m=+2391.323682832 E0721 14:21:39.168059 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" E0721 14:21:39.168208 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 14:21:39.168250 1 sync.go:62] "Error initializing issuer: secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0721 14:21:39.168328 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-client-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-client" I0721 14:21:39.210538 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-xjcgm" condition "Approved" to 2026-07-21 14:21:39.210522378 +0000 UTC m=+2391.373993905 I0721 14:21:39.233330 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-xjcgm" condition "Ready" to 2026-07-21 14:21:39.23331665 +0000 UTC m=+2391.396788177 I0721 14:21:39.267232 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:21:39.267217291 +0000 UTC m=+2391.430688818 I0721 14:21:39.304773 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:21:39.904221 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-07-21 14:21:39.904205771 +0000 UTC m=+2392.067677288 I0721 14:21:39.904612 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:21:39.904631 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-21 14:21:39.904628551 +0000 UTC m=+2392.068100068 E0721 14:21:39.919602 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 14:21:39.919661 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-07-21 14:21:39.919649639 +0000 UTC m=+2392.083121166 I0721 14:21:39.919757 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 14:21:39.923000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:21:39.923266 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:21:39.923295 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-07-21 14:21:39.92328995 +0000 UTC m=+2392.086761477 E0721 14:21:39.930233 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" E0721 14:21:39.930801 1 setup.go:48] "error getting signing CA TLS certificate" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0721 14:21:39.930891 1 sync.go:62] "Error initializing issuer: secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0721 14:21:39.931000 1 controller.go:167] "re-queuing item due to error processing" err="secret \"octavia-server-ca\" not found" logger="cert-manager.issuers" key="openstack/octavia-server" I0721 14:21:39.959134 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:21:39.964437 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-msnth" condition "Approved" to 2026-07-21 14:21:39.964417002 +0000 UTC m=+2392.127888529 I0721 14:21:39.983222 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-msnth" condition "Ready" to 2026-07-21 14:21:39.983208063 +0000 UTC m=+2392.146679580 I0721 14:21:40.012737 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:21:40.012715214 +0000 UTC m=+2392.176186771 I0721 14:21:40.032443 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:21:40.032653 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:21:40.032645715 +0000 UTC m=+2392.196117242 I0721 14:21:40.051193 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:21:40.059767 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:21:40.669760 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:21:40.669797 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-07-21 14:21:40.669787837 +0000 UTC m=+2392.833259364 I0721 14:21:40.670247 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-21 14:21:40.670221489 +0000 UTC m=+2392.833693046 I0721 14:21:40.688319 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:21:40.688393 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-07-21 14:21:40.688383915 +0000 UTC m=+2392.851855442 I0721 14:21:40.710030 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:21:40.741133 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-6r2b9" condition "Approved" to 2026-07-21 14:21:40.741111678 +0000 UTC m=+2392.904583195 I0721 14:21:40.762870 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-6r2b9" condition "Ready" to 2026-07-21 14:21:40.762856274 +0000 UTC m=+2392.926327791 I0721 14:21:44.169111 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:21:44.169096807 +0000 UTC m=+2396.332568364 I0721 14:21:44.184872 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-6r2b9" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:21:44.184852782 +0000 UTC m=+2396.348324309 I0721 14:21:44.215682 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:21:44.215663465 +0000 UTC m=+2396.379135012 I0721 14:21:44.247295 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:21:44.931327 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:21:44.9313116 +0000 UTC m=+2397.094783127 I0721 14:23:59.896829 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-21 14:23:59.896810071 +0000 UTC m=+2532.060281618 I0721 14:23:59.897913 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:23:59.897949 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-07-21 14:23:59.897942979 +0000 UTC m=+2532.061414526 I0721 14:23:59.916907 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:23:59.917197 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-07-21 14:23:59.917174852 +0000 UTC m=+2532.080646409 I0721 14:24:00.340256 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:00.388768 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-t98j6" condition "Approved" to 2026-07-21 14:24:00.388743259 +0000 UTC m=+2532.552214786 I0721 14:24:00.410229 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-t98j6" condition "Ready" to 2026-07-21 14:24:00.410214898 +0000 UTC m=+2532.573686425 I0721 14:24:00.451773 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:24:00.451755111 +0000 UTC m=+2532.615226638 I0721 14:24:00.484538 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:00.484889 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:24:00.484882752 +0000 UTC m=+2532.648354279 I0721 14:24:00.488044 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:00.505529 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:00.505595 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:00.506042 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:24:00.506031383 +0000 UTC m=+2532.669502890 I0721 14:24:47.624416 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-07-21 14:24:47.624359162 +0000 UTC m=+2579.787830689 I0721 14:24:47.647089 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-07-21 14:24:47.647071592 +0000 UTC m=+2579.810543119 I0721 14:24:47.647167 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:24:47.647219 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-21 14:24:47.647207615 +0000 UTC m=+2579.810679152 I0721 14:24:47.663725 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:47.663791 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:24:47.663819 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-07-21 14:24:47.663812182 +0000 UTC m=+2579.827283709 E0721 14:24:47.676839 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.issuers" I0721 14:24:47.739013 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-07-21 14:24:47.73899407 +0000 UTC m=+2579.902465597 I0721 14:24:47.767228 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-21 14:24:47.767218248 +0000 UTC m=+2579.930689775 I0721 14:24:47.767271 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:24:47.767328 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-07-21 14:24:47.767317001 +0000 UTC m=+2579.930788528 I0721 14:24:47.788505 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:47.788619 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-07-21 14:24:47.788610335 +0000 UTC m=+2579.952081862 I0721 14:24:48.092615 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:48.139995 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-mt7w7" condition "Approved" to 2026-07-21 14:24:48.139971555 +0000 UTC m=+2580.303443082 E0721 14:24:48.161060 1 controller.go:167] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.certificates-key-manager" key="cert-manager-test/selfsigned-cert" I0721 14:24:48.165099 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-mt7w7" condition "Ready" to 2026-07-21 14:24:48.165087845 +0000 UTC m=+2580.328559362 I0721 14:24:48.250535 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:24:48.25052533 +0000 UTC m=+2580.413996837 I0721 14:24:48.283994 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:48.371512 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:48.598731 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-07-21 14:24:48.59870724 +0000 UTC m=+2580.762178767 I0721 14:24:48.627495 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:24:48.627542 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-21 14:24:48.627532533 +0000 UTC m=+2580.791004050 I0721 14:24:48.627420 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-07-21 14:24:48.62740609 +0000 UTC m=+2580.790877617 I0721 14:24:48.648011 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:48.648084 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:24:48.648105 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-07-21 14:24:48.64809747 +0000 UTC m=+2580.811568987 I0721 14:24:48.892766 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8dbgh" condition "Approved" to 2026-07-21 14:24:48.892754571 +0000 UTC m=+2581.056226088 I0721 14:24:48.916842 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-8dbgh" condition "Ready" to 2026-07-21 14:24:48.916825485 +0000 UTC m=+2581.080297012 I0721 14:24:48.954535 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:24:48.954517271 +0000 UTC m=+2581.117988828 I0721 14:24:48.972406 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:48.972651 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:24:48.972643146 +0000 UTC m=+2581.136114663 I0721 14:24:48.998424 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:49.104499 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-07-21 14:24:49.104482605 +0000 UTC m=+2581.267954122 I0721 14:24:49.123825 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:24:49.123862 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-21 14:24:49.123854782 +0000 UTC m=+2581.287326299 I0721 14:24:49.124180 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-07-21 14:24:49.12417615 +0000 UTC m=+2581.287647667 I0721 14:24:49.152845 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:49.152943 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:24:49.152973 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-07-21 14:24:49.152965063 +0000 UTC m=+2581.316436610 I0721 14:24:49.304556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-zqdgv" condition "Approved" to 2026-07-21 14:24:49.304542958 +0000 UTC m=+2581.468014465 I0721 14:24:49.350760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-zqdgv" condition "Ready" to 2026-07-21 14:24:49.350740697 +0000 UTC m=+2581.514212224 I0721 14:24:49.390129 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:24:49.390112665 +0000 UTC m=+2581.553584192 I0721 14:24:49.434779 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:49.736571 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-07-21 14:24:49.736547441 +0000 UTC m=+2581.900018968 I0721 14:24:49.767305 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-07-21 14:24:49.767274083 +0000 UTC m=+2581.930745630 I0721 14:24:49.767856 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:24:49.767883 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-21 14:24:49.767878848 +0000 UTC m=+2581.931350375 I0721 14:24:49.813668 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:49.813794 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:24:49.813824 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-07-21 14:24:49.813814691 +0000 UTC m=+2581.977286238 I0721 14:24:50.040957 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:50.095790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-cfkb9" condition "Approved" to 2026-07-21 14:24:50.095777868 +0000 UTC m=+2582.259249385 I0721 14:24:50.204224 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-cfkb9" condition "Ready" to 2026-07-21 14:24:50.204212881 +0000 UTC m=+2582.367684398 I0721 14:24:50.639856 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:24:50.639842036 +0000 UTC m=+2582.803313553 I0721 14:24:50.835096 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:24:50.835377 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:24:50.835370153 +0000 UTC m=+2582.998841660 I0721 14:24:51.086335 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:28:10.911076 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:28:10.911129 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-21 14:28:10.911119058 +0000 UTC m=+2783.074590605 I0721 14:28:10.911372 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Ready" to 2026-07-21 14:28:10.911316543 +0000 UTC m=+2783.074788100 I0721 14:28:10.926999 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:28:10.927136 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:28:10.927159 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-api-certs" condition "Issuing" to 2026-07-21 14:28:10.92715394 +0000 UTC m=+2783.090625467 I0721 14:28:11.147000 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:28:11.154495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-tt9hr" condition "Approved" to 2026-07-21 14:28:11.154487765 +0000 UTC m=+2783.317959282 I0721 14:28:11.190643 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-api-certs-tt9hr" condition "Ready" to 2026-07-21 14:28:11.190631463 +0000 UTC m=+2783.354103000 I0721 14:28:11.222382 1 conditions.go:192] Found status change for Certificate "magnum-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:28:11.222362828 +0000 UTC m=+2783.385834365 I0721 14:28:11.256344 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:28:13.603117 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/magnum-registry-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:28:13.603150 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Issuing" to 2026-07-21 14:28:13.60314343 +0000 UTC m=+2785.766614947 I0721 14:28:13.603591 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-21 14:28:13.603569131 +0000 UTC m=+2785.767040658 I0721 14:28:13.626066 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:28:13.626161 1 conditions.go:203] Setting lastTransitionTime for Certificate "magnum-registry-certs" condition "Ready" to 2026-07-21 14:28:13.626153977 +0000 UTC m=+2785.789625494 I0721 14:28:14.026144 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:28:14.068526 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-kd84x" condition "Approved" to 2026-07-21 14:28:14.068509937 +0000 UTC m=+2786.231981464 I0721 14:28:14.087054 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "magnum-registry-certs-kd84x" condition "Ready" to 2026-07-21 14:28:14.087045002 +0000 UTC m=+2786.250516519 I0721 14:28:14.116839 1 conditions.go:192] Found status change for Certificate "magnum-registry-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:28:14.116821099 +0000 UTC m=+2786.280292616 I0721 14:28:14.145742 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:28:14.290507 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/magnum-registry-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"magnum-registry-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:32:49.063177 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-21 14:32:49.063146883 +0000 UTC m=+3061.226618440 I0721 14:32:49.063257 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/manila-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:32:49.063318 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Issuing" to 2026-07-21 14:32:49.063309537 +0000 UTC m=+3061.226781054 I0721 14:32:49.089598 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:32:49.089768 1 conditions.go:203] Setting lastTransitionTime for Certificate "manila-api-certs" condition "Ready" to 2026-07-21 14:32:49.08975597 +0000 UTC m=+3061.253227507 I0721 14:32:49.279896 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:32:49.330419 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-s4c4z" condition "Approved" to 2026-07-21 14:32:49.330398009 +0000 UTC m=+3061.493869526 I0721 14:32:49.353331 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "manila-api-certs-s4c4z" condition "Ready" to 2026-07-21 14:32:49.353297343 +0000 UTC m=+3061.516768860 I0721 14:32:49.397866 1 conditions.go:192] Found status change for Certificate "manila-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:32:49.397849871 +0000 UTC m=+3061.561321388 I0721 14:32:49.427273 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:32:49.488321 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/manila-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"manila-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:33:25.101911 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-21 14:33:25.101893609 +0000 UTC m=+3097.265365136 I0721 14:33:25.101942 1 trigger_controller.go:194] "Certificate must be re-issued" logger="cert-manager.certificates-trigger" key="openstack/horizon-int-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0721 14:33:25.101989 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Issuing" to 2026-07-21 14:33:25.101980852 +0000 UTC m=+3097.265452379 I0721 14:33:25.119627 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-readiness" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:33:25.119807 1 conditions.go:203] Setting lastTransitionTime for Certificate "horizon-int-certs" condition "Ready" to 2026-07-21 14:33:25.119792188 +0000 UTC m=+3097.283263735 I0721 14:33:25.280125 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:33:25.319889 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-njtzr" condition "Approved" to 2026-07-21 14:33:25.319873279 +0000 UTC m=+3097.483344806 I0721 14:33:25.341188 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "horizon-int-certs-njtzr" condition "Ready" to 2026-07-21 14:33:25.341174653 +0000 UTC m=+3097.504646180 I0721 14:33:25.381641 1 conditions.go:192] Found status change for Certificate "horizon-int-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-07-21 14:33:25.381623368 +0000 UTC m=+3097.545094925 I0721 14:33:25.413608 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-issuing" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again" I0721 14:33:25.472312 1 controller.go:162] "re-queuing item due to optimistic locking on resource" logger="cert-manager.certificates-key-manager" key="openstack/horizon-int-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"horizon-int-certs\": the object has been modified; please apply your changes to the latest version and try again"