I0817 10:18:52.812975 1 controller.go:284] "configured acme dns01 nameservers" logger="cert-manager.controller.build-context" nameservers=["10.96.0.10:53"] W0817 10:18:52.813208 1 client_config.go:659] Neither --kubeconfig nor --master was specified. Using the inClusterConfig. This might not work. I0817 10:18:52.816574 1 controller.go:89] "enabled controllers: [certificaterequests-approver certificaterequests-issuer-acme certificaterequests-issuer-ca certificaterequests-issuer-selfsigned certificaterequests-issuer-vault certificaterequests-issuer-venafi certificates-issuing certificates-key-manager certificates-metrics certificates-readiness certificates-request-manager certificates-revision-manager certificates-trigger challenges clusterissuers ingress-shim issuers orders]" logger="cert-manager.controller" I0817 10:18:52.816598 1 controller.go:435] "serving insecurely as tls certificate data not provided" logger="cert-manager.controller" I0817 10:18:52.816608 1 controller.go:102] "listening for insecure connections" logger="cert-manager.controller" address="0.0.0.0:9402" I0817 10:18:52.817032 1 controller.go:178] "starting leader election" logger="cert-manager.controller" I0817 10:18:52.817133 1 controller.go:127] "starting metrics server" logger="cert-manager.controller" address="[::]:9402" I0817 10:18:52.817193 1 controller.go:171] "starting healthz server" logger="cert-manager.controller" address="[::]:9403" I0817 10:18:52.822033 1 leaderelection.go:250] attempting to acquire leader lease cert-manager/cert-manager-controller... I0817 10:18:52.839695 1 leaderelection.go:260] successfully acquired lease cert-manager/cert-manager-controller I0817 10:18:52.843475 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="issuers" I0817 10:18:52.846331 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-trigger" I0817 10:18:52.848922 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-selfsigned" I0817 10:18:52.854842 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-vault" I0817 10:18:52.855068 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-venafi" I0817 10:18:52.857861 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-request-manager" I0817 10:18:52.860413 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="orders" I0817 10:18:52.862981 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-approver" I0817 10:18:52.865442 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-key-manager" I0817 10:18:52.867759 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-metrics" I0817 10:18:52.873384 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-readiness" I0817 10:18:52.876356 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="clusterissuers" I0817 10:18:52.878720 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-acme" I0817 10:18:52.878747 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-ca" I0817 10:18:52.878754 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-venafi" I0817 10:18:52.878826 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-issuing" I0817 10:18:52.881418 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-ca" I0817 10:18:52.884016 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="certificatesigningrequests-issuer-selfsigned" I0817 10:18:52.884132 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-vault" I0817 10:18:52.886640 1 controller.go:225] "not starting controller as it's disabled" logger="cert-manager.controller" controller="gateway-shim" I0817 10:18:52.886782 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="challenges" I0817 10:18:52.888394 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="ingress-shim" I0817 10:18:52.890218 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificates-revision-manager" I0817 10:18:52.893510 1 controller.go:248] "starting controller" logger="cert-manager.controller" controller="certificaterequests-issuer-acme" I0817 10:18:52.897579 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0817 10:18:52.897762 1 reflector.go:359] Caches populated for *v1.Secret from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0817 10:18:52.898241 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0817 10:18:52.898566 1 reflector.go:359] Caches populated for *v1.Certificate from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0817 10:18:52.899043 1 reflector.go:359] Caches populated for *v1.PartialObjectMetadata from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0817 10:18:52.899094 1 reflector.go:359] Caches populated for *v1.Ingress from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0817 10:18:52.955598 1 reflector.go:359] Caches populated for *v1.ClusterIssuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0817 10:18:52.975170 1 reflector.go:359] Caches populated for *v1.Issuer from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0817 10:18:52.994778 1 reflector.go:359] Caches populated for *v1.Order from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0817 10:18:53.018765 1 reflector.go:359] Caches populated for *v1.Challenge from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0817 10:18:53.033866 1 reflector.go:359] Caches populated for *v1.CertificateRequest from k8s.io/client-go@v0.30.1/tools/cache/reflector.go:232 I0817 10:19:05.828240 1 conditions.go:96] Setting lastTransitionTime for Issuer "self-signed" condition "Ready" to 2026-08-17 10:19:05.82816938 +0000 UTC m=+13.041332516 I0817 10:19:06.620889 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:19:06.620947 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Ready" to 2026-08-17 10:19:06.62093281 +0000 UTC m=+13.834095906 I0817 10:19:06.621009 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-17 10:19:06.620996092 +0000 UTC m=+13.834159228 E0817 10:19:06.633056 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0817 10:19:06.633217 1 conditions.go:96] Setting lastTransitionTime for Issuer "atmosphere" condition "Ready" to 2026-08-17 10:19:06.633202447 +0000 UTC m=+13.846365593 E0817 10:19:06.633256 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0817 10:19:06.633960 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:19:06.634085 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/self-signed-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:19:06.634119 1 conditions.go:203] Setting lastTransitionTime for Certificate "self-signed-ca" condition "Issuing" to 2026-08-17 10:19:06.63411127 +0000 UTC m=+13.847274406 E0817 10:19:06.642800 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" E0817 10:19:06.642942 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller.setup" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0817 10:19:06.642982 1 sync.go:62] "error setting up issuer" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" resource_name="atmosphere" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0817 10:19:06.643022 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"cert-manager-selfsigned-ca\" not found" logger="cert-manager.controller" key="atmosphere" I0817 10:19:06.663249 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:19:06.680569 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Approved" to 2026-08-17 10:19:06.680554983 +0000 UTC m=+13.893718099 I0817 10:19:06.703651 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "self-signed-ca-1" condition "Ready" to 2026-08-17 10:19:06.703630832 +0000 UTC m=+13.916793968 I0817 10:19:06.723207 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:19:06.723194845 +0000 UTC m=+13.936357961 I0817 10:19:06.738482 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:19:06.740531 1 conditions.go:192] Found status change for Certificate "self-signed-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:19:06.740507425 +0000 UTC m=+13.953670531 I0817 10:19:06.744406 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:19:06.750396 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:19:06.766494 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/self-signed-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"self-signed-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:19:11.643798 1 conditions.go:85] Found status change for Issuer "atmosphere" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:19:11.643779556 +0000 UTC m=+18.856942702 I0817 10:19:32.540740 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-17 10:19:32.54072253 +0000 UTC m=+39.753885636 I0817 10:19:32.540746 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:19:32.541075 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Issuing" to 2026-08-17 10:19:32.541059908 +0000 UTC m=+39.754223084 I0817 10:19:32.549155 1 conditions.go:96] Setting lastTransitionTime for Issuer "rabbitmq-cluster-operator" condition "Ready" to 2026-08-17 10:19:32.549141301 +0000 UTC m=+39.762304427 I0817 10:19:32.551233 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:19:32.551385 1 conditions.go:203] Setting lastTransitionTime for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready" to 2026-08-17 10:19:32.551376655 +0000 UTC m=+39.764539771 I0817 10:19:32.922873 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:19:32.952711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Approved" to 2026-08-17 10:19:32.952691155 +0000 UTC m=+40.165854331 I0817 10:19:32.981790 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rabbitmq-messaging-topology-operator-webhook-1" condition "Ready" to 2026-08-17 10:19:32.981772241 +0000 UTC m=+40.194935387 I0817 10:19:33.007562 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:19:33.007549877 +0000 UTC m=+40.220713013 I0817 10:19:33.022624 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:19:33.023510 1 conditions.go:192] Found status change for Certificate "rabbitmq-messaging-topology-operator-webhook" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:19:33.023499738 +0000 UTC m=+40.236662874 I0817 10:19:33.031148 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:19:33.037679 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rabbitmq-messaging-topology-operator-webhook" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rabbitmq-messaging-topology-operator-webhook\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:21:15.140560 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-08-17 10:21:15.140513693 +0000 UTC m=+142.353676789 I0817 10:21:15.140975 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:21:15.141098 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Issuing" to 2026-08-17 10:21:15.141081957 +0000 UTC m=+142.354245103 I0817 10:21:15.155394 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:21:15.156272 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-ca" condition "Ready" to 2026-08-17 10:21:15.156252243 +0000 UTC m=+142.369415379 E0817 10:21:15.156397 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0817 10:21:15.156504 1 conditions.go:96] Setting lastTransitionTime for Issuer "valkey" condition "Ready" to 2026-08-17 10:21:15.156494159 +0000 UTC m=+142.369657275 I0817 10:21:15.156534 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0817 10:21:15.168815 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-08-17 10:21:15.168802142 +0000 UTC m=+142.381965258 I0817 10:21:15.168928 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/valkey-server" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:21:15.168974 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Issuing" to 2026-08-17 10:21:15.168965156 +0000 UTC m=+142.382128272 E0817 10:21:15.169070 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" E0817 10:21:15.169167 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller.setup" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0817 10:21:15.169259 1 sync.go:62] "Error initializing issuer: secrets \"valkey-ca\" not found" logger="cert-manager.controller" resource_name="valkey" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0817 10:21:15.169328 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"valkey-ca\" not found" logger="cert-manager.controller" key="openstack/valkey" I0817 10:21:15.180986 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:21:15.181078 1 conditions.go:203] Setting lastTransitionTime for Certificate "valkey-server" condition "Ready" to 2026-08-17 10:21:15.181069336 +0000 UTC m=+142.394232472 I0817 10:21:15.249019 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:21:15.282830 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Approved" to 2026-08-17 10:21:15.282806617 +0000 UTC m=+142.495969763 I0817 10:21:15.300765 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-ca-1" condition "Ready" to 2026-08-17 10:21:15.300753169 +0000 UTC m=+142.513916275 I0817 10:21:15.322938 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:21:15.322925937 +0000 UTC m=+142.536089053 I0817 10:21:15.334089 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:21:15.335110 1 conditions.go:192] Found status change for Certificate "valkey-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:21:15.335096048 +0000 UTC m=+142.548259184 I0817 10:21:15.335653 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:21:15.347976 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:21:15.352353 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:21:15.364013 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Approved" to 2026-08-17 10:21:15.363999321 +0000 UTC m=+142.577162437 I0817 10:21:15.377181 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "valkey-server-1" condition "Ready" to 2026-08-17 10:21:15.377144386 +0000 UTC m=+142.590307502 I0817 10:21:20.171248 1 conditions.go:85] Found status change for Issuer "valkey" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:21:20.17049463 +0000 UTC m=+147.383657766 I0817 10:21:20.184002 1 conditions.go:252] Found status change for CertificateRequest "valkey-server-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:21:20.183991392 +0000 UTC m=+147.397154508 I0817 10:21:20.218083 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:21:20.218062214 +0000 UTC m=+147.431225360 I0817 10:21:20.231050 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:21:20.231412 1 conditions.go:192] Found status change for Certificate "valkey-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:21:20.231403603 +0000 UTC m=+147.444566709 I0817 10:21:20.243752 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/valkey-server" error="Operation cannot be fulfilled on certificates.cert-manager.io \"valkey-server\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:24:00.899939 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-219.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:24:00.899995 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-219.nip.io-tls" condition "Issuing" to 2026-08-17 10:24:00.899987433 +0000 UTC m=+308.113150549 I0817 10:24:00.899985 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-219.nip.io-tls" condition "Ready" to 2026-08-17 10:24:00.899950492 +0000 UTC m=+308.113113638 I0817 10:24:00.912029 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-219.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-219.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:24:00.912108 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-219.nip.io-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:24:00.912137 1 conditions.go:203] Setting lastTransitionTime for Certificate "keycloak.199-19-213-219.nip.io-tls" condition "Issuing" to 2026-08-17 10:24:00.912129901 +0000 UTC m=+308.125293037 I0817 10:24:01.127444 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-219.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-219.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:24:01.143502 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-219.nip.io-tls-1" condition "Approved" to 2026-08-17 10:24:01.143488193 +0000 UTC m=+308.356651319 I0817 10:24:01.162658 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keycloak.199-19-213-219.nip.io-tls-1" condition "Ready" to 2026-08-17 10:24:01.162644125 +0000 UTC m=+308.375807261 I0817 10:24:01.185304 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-219.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:24:01.185287742 +0000 UTC m=+308.398450888 I0817 10:24:01.199498 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-219.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-219.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:24:01.200551 1 conditions.go:192] Found status change for Certificate "keycloak.199-19-213-219.nip.io-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:24:01.200538436 +0000 UTC m=+308.413701582 I0817 10:24:01.213295 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="auth-system/keycloak.199-19-213-219.nip.io-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keycloak.199-19-213-219.nip.io-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:11.212281 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Ready" to 2026-08-17 10:25:11.212253106 +0000 UTC m=+378.425416212 I0817 10:25:11.212642 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:25:11.212705 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-17 10:25:11.212692896 +0000 UTC m=+378.425856042 I0817 10:25:11.222743 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:11.222804 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:25:11.222828 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-ca" condition "Issuing" to 2026-08-17 10:25:11.222821495 +0000 UTC m=+378.435984611 E0817 10:25:11.225176 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" I0817 10:25:11.225267 1 conditions.go:96] Setting lastTransitionTime for Issuer "kube-prometheus-stack" condition "Ready" to 2026-08-17 10:25:11.225254005 +0000 UTC m=+378.438417151 E0817 10:25:11.225310 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0817 10:25:11.235582 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" E0817 10:25:11.235923 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller.setup" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0817 10:25:11.235986 1 sync.go:62] "error setting up issuer" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" resource_name="kube-prometheus-stack" resource_namespace="" resource_kind="ClusterIssuer" resource_version="v1" E0817 10:25:11.236102 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"kube-prometheus-stack-ca\" not found" logger="cert-manager.controller" key="kube-prometheus-stack" I0817 10:25:11.261785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Approved" to 2026-08-17 10:25:11.26176205 +0000 UTC m=+378.474925196 I0817 10:25:11.277021 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-ca-1" condition "Ready" to 2026-08-17 10:25:11.277008623 +0000 UTC m=+378.490171739 I0817 10:25:11.299144 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:25:11.299129056 +0000 UTC m=+378.512292182 I0817 10:25:11.311669 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:11.312089 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:25:11.312078644 +0000 UTC m=+378.525241780 I0817 10:25:11.325227 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager/kube-prometheus-stack-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:16.236950 1 conditions.go:85] Found status change for Issuer "kube-prometheus-stack" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:25:16.236935343 +0000 UTC m=+383.450098479 I0817 10:25:55.989940 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/alertmanager-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:25:55.989979 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Issuing" to 2026-08-17 10:25:55.989972048 +0000 UTC m=+423.203135164 I0817 10:25:55.990258 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-17 10:25:55.990243045 +0000 UTC m=+423.203406161 I0817 10:25:55.996266 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:25:55.996296 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-17 10:25:55.996290164 +0000 UTC m=+423.209453270 I0817 10:25:55.996530 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:25:55.996873 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-17 10:25:55.996868349 +0000 UTC m=+423.210031465 I0817 10:25:55.997401 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Ready" to 2026-08-17 10:25:55.997396632 +0000 UTC m=+423.210559728 I0817 10:25:55.997764 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Ready" to 2026-08-17 10:25:55.997760741 +0000 UTC m=+423.210923847 I0817 10:25:56.028032 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:56.028181 1 conditions.go:203] Setting lastTransitionTime for Certificate "alertmanager-tls" condition "Ready" to 2026-08-17 10:25:56.028172482 +0000 UTC m=+423.241335598 I0817 10:25:56.041451 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:56.041573 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/grafana-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:25:56.041597 1 conditions.go:203] Setting lastTransitionTime for Certificate "grafana-tls" condition "Issuing" to 2026-08-17 10:25:56.041591073 +0000 UTC m=+423.254754179 I0817 10:25:56.046732 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:56.046816 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:25:56.046839 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-tls" condition "Issuing" to 2026-08-17 10:25:56.046834602 +0000 UTC m=+423.259997708 I0817 10:25:56.209805 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:56.240122 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Approved" to 2026-08-17 10:25:56.240112954 +0000 UTC m=+423.453276070 I0817 10:25:56.256958 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "alertmanager-tls-1" condition "Ready" to 2026-08-17 10:25:56.25694819 +0000 UTC m=+423.470111306 I0817 10:25:56.273843 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Approved" to 2026-08-17 10:25:56.273828006 +0000 UTC m=+423.486991122 I0817 10:25:56.288559 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:25:56.288546071 +0000 UTC m=+423.501709197 I0817 10:25:56.290228 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-tls-1" condition "Ready" to 2026-08-17 10:25:56.290221021 +0000 UTC m=+423.503384137 I0817 10:25:56.304373 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:56.313439 1 conditions.go:192] Found status change for Certificate "alertmanager-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:25:56.313428765 +0000 UTC m=+423.526591871 I0817 10:25:56.324100 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:25:56.324086337 +0000 UTC m=+423.537249443 I0817 10:25:56.329480 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:56.333790 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/alertmanager-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"alertmanager-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:56.433382 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:56.433988 1 conditions.go:192] Found status change for Certificate "prometheus-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:25:56.433978591 +0000 UTC m=+423.647141707 I0817 10:25:56.885637 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:56.934886 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:57.000855 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Approved" to 2026-08-17 10:25:57.000838506 +0000 UTC m=+424.214001632 I0817 10:25:57.091424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "grafana-tls-1" condition "Ready" to 2026-08-17 10:25:57.091408912 +0000 UTC m=+424.304572028 I0817 10:25:57.590770 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:25:57.590751731 +0000 UTC m=+424.803914877 I0817 10:25:57.684946 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:25:57.685526 1 conditions.go:192] Found status change for Certificate "grafana-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:25:57.68551671 +0000 UTC m=+424.898679836 I0817 10:25:57.885495 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/grafana-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"grafana-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:26:04.209639 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:26:04.209693 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls" condition "Issuing" to 2026-08-17 10:26:04.209680787 +0000 UTC m=+431.422843923 I0817 10:26:04.210295 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls" condition "Ready" to 2026-08-17 10:26:04.210286751 +0000 UTC m=+431.423449887 I0817 10:26:04.228042 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:26:04.228637 1 conditions.go:203] Setting lastTransitionTime for Certificate "kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls" condition "Ready" to 2026-08-17 10:26:04.228624065 +0000 UTC m=+431.441787211 I0817 10:26:04.596726 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:26:04.623989 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls-1" condition "Approved" to 2026-08-17 10:26:04.623977506 +0000 UTC m=+431.837140622 I0817 10:26:04.640103 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls-1" condition "Ready" to 2026-08-17 10:26:04.640089063 +0000 UTC m=+431.853252199 I0817 10:26:04.663170 1 conditions.go:192] Found status change for Certificate "kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:26:04.663154783 +0000 UTC m=+431.876317919 I0817 10:26:04.679037 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:26:04.727062 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"kube-prometheus-stack-prometheus-node-exporter-lz6m6-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:26:25.498967 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready" to 2026-08-17 10:26:25.498924373 +0000 UTC m=+452.712087489 I0817 10:26:25.499965 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:26:25.499991 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-17 10:26:25.499986029 +0000 UTC m=+452.713149155 I0817 10:26:25.509566 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:26:25.509659 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:26:25.509690 1 conditions.go:203] Setting lastTransitionTime for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Issuing" to 2026-08-17 10:26:25.509683899 +0000 UTC m=+452.722847015 I0817 10:26:25.666032 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Approved" to 2026-08-17 10:26:25.666011778 +0000 UTC m=+452.879174904 I0817 10:26:25.683172 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "prometheus-kube-prometheus-stack-prometheus-0-tls-1" condition "Ready" to 2026-08-17 10:26:25.683158632 +0000 UTC m=+452.896321738 I0817 10:26:25.712373 1 conditions.go:192] Found status change for Certificate "prometheus-kube-prometheus-stack-prometheus-0-tls" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:26:25.712356762 +0000 UTC m=+452.925519978 I0817 10:26:25.727581 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="monitoring/prometheus-kube-prometheus-stack-prometheus-0-tls" error="Operation cannot be fulfilled on certificates.cert-manager.io \"prometheus-kube-prometheus-stack-prometheus-0-tls\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:29:55.336982 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:29:55.337044 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-17 10:29:55.337038126 +0000 UTC m=+662.550201252 I0817 10:29:55.337111 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Ready" to 2026-08-17 10:29:55.336956604 +0000 UTC m=+662.550119750 I0817 10:29:55.351842 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:29:55.352058 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/keystone-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:29:55.352125 1 conditions.go:203] Setting lastTransitionTime for Certificate "keystone-api-certs" condition "Issuing" to 2026-08-17 10:29:55.352083636 +0000 UTC m=+662.565246752 I0817 10:29:55.504261 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:29:55.523209 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Approved" to 2026-08-17 10:29:55.523193521 +0000 UTC m=+662.736356637 I0817 10:29:55.539785 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "keystone-api-certs-1" condition "Ready" to 2026-08-17 10:29:55.539770098 +0000 UTC m=+662.752933244 I0817 10:29:55.563587 1 conditions.go:192] Found status change for Certificate "keystone-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:29:55.563568831 +0000 UTC m=+662.776731947 I0817 10:29:55.579623 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/keystone-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"keystone-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:32:31.663023 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/barbican-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:32:31.663050 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-17 10:32:31.662994433 +0000 UTC m=+818.876157579 I0817 10:32:31.663221 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Issuing" to 2026-08-17 10:32:31.663207178 +0000 UTC m=+818.876370324 I0817 10:32:31.674089 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:32:31.674205 1 conditions.go:203] Setting lastTransitionTime for Certificate "barbican-api-certs" condition "Ready" to 2026-08-17 10:32:31.674193797 +0000 UTC m=+818.887356913 I0817 10:32:31.839868 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:32:31.872799 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Approved" to 2026-08-17 10:32:31.872781995 +0000 UTC m=+819.085945131 I0817 10:32:31.895061 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "barbican-api-certs-1" condition "Ready" to 2026-08-17 10:32:31.89504707 +0000 UTC m=+819.108210186 I0817 10:32:31.918724 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:32:31.91871022 +0000 UTC m=+819.131873326 I0817 10:32:31.938857 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:32:31.939424 1 conditions.go:192] Found status change for Certificate "barbican-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:32:31.939417186 +0000 UTC m=+819.152580292 I0817 10:32:31.957362 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/barbican-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"barbican-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:33:39.254072 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready" to 2026-08-17 10:33:39.254043343 +0000 UTC m=+886.467206459 I0817 10:33:39.254468 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:33:39.254512 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-08-17 10:33:39.254501575 +0000 UTC m=+886.467664691 I0817 10:33:39.267335 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:33:39.267420 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:33:39.267452 1 conditions.go:203] Setting lastTransitionTime for Certificate "rook-ceph-rgw-ceph-certs" condition "Issuing" to 2026-08-17 10:33:39.267443021 +0000 UTC m=+886.480606137 I0817 10:33:39.534916 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Approved" to 2026-08-17 10:33:39.534902394 +0000 UTC m=+886.748065540 I0817 10:33:39.552272 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "rook-ceph-rgw-ceph-certs-1" condition "Ready" to 2026-08-17 10:33:39.5522584 +0000 UTC m=+886.765421546 I0817 10:33:39.597815 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:33:39.597794894 +0000 UTC m=+886.810958030 I0817 10:33:39.620634 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:33:39.621630 1 conditions.go:192] Found status change for Certificate "rook-ceph-rgw-ceph-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:33:39.621619726 +0000 UTC m=+886.834782872 I0817 10:33:39.645447 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/rook-ceph-rgw-ceph-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"rook-ceph-rgw-ceph-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:36:53.207508 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-08-17 10:36:53.207458791 +0000 UTC m=+1080.420621937 I0817 10:36:53.207712 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/glance-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:36:53.207766 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Issuing" to 2026-08-17 10:36:53.207758788 +0000 UTC m=+1080.420921894 I0817 10:36:53.219429 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:36:53.219540 1 conditions.go:203] Setting lastTransitionTime for Certificate "glance-api-certs" condition "Ready" to 2026-08-17 10:36:53.219530958 +0000 UTC m=+1080.432694064 I0817 10:36:53.374611 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:36:53.411191 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Approved" to 2026-08-17 10:36:53.411174485 +0000 UTC m=+1080.624337591 I0817 10:36:53.428505 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "glance-api-certs-1" condition "Ready" to 2026-08-17 10:36:53.42849463 +0000 UTC m=+1080.641657746 I0817 10:36:53.450684 1 conditions.go:192] Found status change for Certificate "glance-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:36:53.450673463 +0000 UTC m=+1080.663836589 I0817 10:36:53.464981 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/glance-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"glance-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:44:55.453369 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Ready" to 2026-08-17 10:44:55.453326013 +0000 UTC m=+1562.666489119 I0817 10:44:55.453462 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:44:55.453505 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-08-17 10:44:55.453495257 +0000 UTC m=+1562.666658403 I0817 10:44:55.463417 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:44:55.463649 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/cinder-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:44:55.463681 1 conditions.go:203] Setting lastTransitionTime for Certificate "cinder-api-certs" condition "Issuing" to 2026-08-17 10:44:55.463672955 +0000 UTC m=+1562.676836071 I0817 10:44:55.675058 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:44:55.699250 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Approved" to 2026-08-17 10:44:55.699240007 +0000 UTC m=+1562.912403123 I0817 10:44:55.715714 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "cinder-api-certs-1" condition "Ready" to 2026-08-17 10:44:55.715703078 +0000 UTC m=+1562.928866204 I0817 10:44:55.741196 1 conditions.go:192] Found status change for Certificate "cinder-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:44:55.741183349 +0000 UTC m=+1562.954346475 I0817 10:44:55.757512 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/cinder-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"cinder-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:46:36.843175 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Ready" to 2026-08-17 10:46:36.843155605 +0000 UTC m=+1664.056318711 I0817 10:46:36.843249 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:46:36.843332 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-08-17 10:46:36.843321099 +0000 UTC m=+1664.056484215 I0817 10:46:36.855738 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:46:36.855840 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/placement-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:46:36.855869 1 conditions.go:203] Setting lastTransitionTime for Certificate "placement-api-certs" condition "Issuing" to 2026-08-17 10:46:36.855858533 +0000 UTC m=+1664.069021659 I0817 10:46:37.105760 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Approved" to 2026-08-17 10:46:37.105742387 +0000 UTC m=+1664.318905503 I0817 10:46:37.120424 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "placement-api-certs-1" condition "Ready" to 2026-08-17 10:46:37.120410543 +0000 UTC m=+1664.333573659 I0817 10:46:37.147644 1 conditions.go:192] Found status change for Certificate "placement-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:46:37.147631174 +0000 UTC m=+1664.360794270 I0817 10:46:37.161866 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:46:37.204436 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/placement-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"placement-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:47:36.159035 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Ready" to 2026-08-17 10:47:36.159003757 +0000 UTC m=+1723.372166893 I0817 10:47:36.159458 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:47:36.159499 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-17 10:47:36.159490599 +0000 UTC m=+1723.372653715 I0817 10:47:36.174920 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:47:36.175101 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:47:36.175188 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-vnc-ca" condition "Issuing" to 2026-08-17 10:47:36.17517586 +0000 UTC m=+1723.388339006 I0817 10:47:36.208950 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:47:36.220227 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Approved" to 2026-08-17 10:47:36.220199042 +0000 UTC m=+1723.433362188 I0817 10:47:36.236391 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-vnc-ca-1" condition "Ready" to 2026-08-17 10:47:36.236380725 +0000 UTC m=+1723.449543831 I0817 10:47:36.270566 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:47:36.270540304 +0000 UTC m=+1723.483703420 I0817 10:47:36.282339 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:47:36.282838 1 conditions.go:192] Found status change for Certificate "libvirt-vnc-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:47:36.282827482 +0000 UTC m=+1723.495990598 I0817 10:47:36.313190 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-vnc-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-vnc-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:47:36.886842 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-17 10:47:36.88682728 +0000 UTC m=+1724.099990386 I0817 10:47:36.887034 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-api-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:47:36.887094 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Issuing" to 2026-08-17 10:47:36.887082306 +0000 UTC m=+1724.100245422 I0817 10:47:36.900695 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:47:36.900823 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-api-ca" condition "Ready" to 2026-08-17 10:47:36.900811239 +0000 UTC m=+1724.113974355 I0817 10:47:36.921567 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:47:36.955789 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Approved" to 2026-08-17 10:47:36.955773082 +0000 UTC m=+1724.168936198 I0817 10:47:36.971202 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-api-ca-1" condition "Ready" to 2026-08-17 10:47:36.971190557 +0000 UTC m=+1724.184353673 I0817 10:47:36.992470 1 conditions.go:192] Found status change for Certificate "libvirt-api-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:47:36.992458883 +0000 UTC m=+1724.205621999 I0817 10:47:37.011732 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:47:37.056353 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-api-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-api-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:47:37.687832 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-vnc" condition "Ready" to 2026-08-17 10:47:37.687821068 +0000 UTC m=+1724.900984184 I0817 10:47:38.364488 1 conditions.go:96] Setting lastTransitionTime for Issuer "libvirt-api" condition "Ready" to 2026-08-17 10:47:38.364470668 +0000 UTC m=+1725.577633784 I0817 10:48:23.473946 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-08-17 10:48:23.4739322 +0000 UTC m=+1770.687095326 I0817 10:48:23.474138 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:48:23.474186 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Issuing" to 2026-08-17 10:48:23.474177926 +0000 UTC m=+1770.687341022 I0817 10:48:23.494220 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:48:23.494542 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-vencrypt" condition "Ready" to 2026-08-17 10:48:23.49453176 +0000 UTC m=+1770.707694876 I0817 10:48:27.081479 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:48:27.120454 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Approved" to 2026-08-17 10:48:27.120441792 +0000 UTC m=+1774.333604908 I0817 10:48:27.139408 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-vencrypt-1" condition "Ready" to 2026-08-17 10:48:27.139396192 +0000 UTC m=+1774.352559308 I0817 10:48:27.164775 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-vencrypt" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:48:27.164763188 +0000 UTC m=+1774.377926294 I0817 10:48:27.179403 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-vencrypt" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-vencrypt\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:51:19.841938 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:51:19.842026 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-08-17 10:51:19.842007386 +0000 UTC m=+1947.055170502 I0817 10:51:19.842033 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Ready" to 2026-08-17 10:51:19.842018196 +0000 UTC m=+1947.055181302 I0817 10:51:19.853632 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:51:19.853736 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:51:19.853763 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-api-certs" condition "Issuing" to 2026-08-17 10:51:19.853755503 +0000 UTC m=+1947.066918619 I0817 10:51:20.066406 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:51:20.084701 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Approved" to 2026-08-17 10:51:20.084684265 +0000 UTC m=+1947.297847461 I0817 10:51:20.099129 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-api-certs-1" condition "Ready" to 2026-08-17 10:51:20.099117036 +0000 UTC m=+1947.312280152 I0817 10:51:20.118709 1 conditions.go:192] Found status change for Certificate "nova-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:51:20.118697744 +0000 UTC m=+1947.331860860 I0817 10:51:20.136936 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:51:21.342105 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:51:21.342177 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Issuing" to 2026-08-17 10:51:21.342142854 +0000 UTC m=+1948.555305960 I0817 10:51:21.342199 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-17 10:51:21.342143324 +0000 UTC m=+1948.555306470 I0817 10:51:21.356180 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:51:21.356328 1 conditions.go:203] Setting lastTransitionTime for Certificate "nova-novncproxy-certs" condition "Ready" to 2026-08-17 10:51:21.35631627 +0000 UTC m=+1948.569479416 I0817 10:51:21.567713 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:51:21.600152 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Approved" to 2026-08-17 10:51:21.600141156 +0000 UTC m=+1948.813304262 I0817 10:51:21.618828 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "nova-novncproxy-certs-1" condition "Ready" to 2026-08-17 10:51:21.618798302 +0000 UTC m=+1948.831961428 I0817 10:51:21.648170 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:51:21.648153847 +0000 UTC m=+1948.861316953 I0817 10:51:21.662469 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:51:21.663046 1 conditions.go:192] Found status change for Certificate "nova-novncproxy-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:51:21.66303953 +0000 UTC m=+1948.876202636 I0817 10:51:21.667580 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:51:21.677625 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:51:21.682981 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/nova-novncproxy-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"nova-novncproxy-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:54:52.149219 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Ready" to 2026-08-17 10:54:52.14916593 +0000 UTC m=+2159.362329056 I0817 10:54:52.149180 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:54:52.149402 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-08-17 10:54:52.149392896 +0000 UTC m=+2159.362556022 I0817 10:54:52.161424 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:54:52.161740 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/neutron-server-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:54:52.161786 1 conditions.go:203] Setting lastTransitionTime for Certificate "neutron-server-certs" condition "Issuing" to 2026-08-17 10:54:52.161773932 +0000 UTC m=+2159.374937078 I0817 10:54:52.316423 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:54:52.338957 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Approved" to 2026-08-17 10:54:52.338943909 +0000 UTC m=+2159.552107025 I0817 10:54:52.355160 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "neutron-server-certs-1" condition "Ready" to 2026-08-17 10:54:52.35514987 +0000 UTC m=+2159.568312976 I0817 10:54:52.381807 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:54:52.381797657 +0000 UTC m=+2159.594960773 I0817 10:54:52.397195 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:54:52.397990 1 conditions.go:192] Found status change for Certificate "neutron-server-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:54:52.397981218 +0000 UTC m=+2159.611144344 I0817 10:54:52.410248 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:54:52.411207 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/neutron-server-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"neutron-server-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:55:05.355960 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-7hchb-api" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:55:05.355997 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7hchb-api" condition "Issuing" to 2026-08-17 10:55:05.355989668 +0000 UTC m=+2172.569152774 I0817 10:55:05.356436 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7hchb-api" condition "Ready" to 2026-08-17 10:55:05.356430689 +0000 UTC m=+2172.569593795 I0817 10:55:05.360054 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-7hchb-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:55:05.360090 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7hchb-vnc" condition "Issuing" to 2026-08-17 10:55:05.36008248 +0000 UTC m=+2172.573245586 I0817 10:55:05.360489 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7hchb-vnc" condition "Ready" to 2026-08-17 10:55:05.360483539 +0000 UTC m=+2172.573646645 I0817 10:55:05.375100 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-7hchb-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7hchb-api\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:55:05.375200 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7hchb-api" condition "Ready" to 2026-08-17 10:55:05.375192742 +0000 UTC m=+2172.588355858 I0817 10:55:05.379009 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-7hchb-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7hchb-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:55:05.379114 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-7hchb-vnc" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:55:05.379139 1 conditions.go:203] Setting lastTransitionTime for Certificate "libvirt-libvirt-default-7hchb-vnc" condition "Issuing" to 2026-08-17 10:55:05.37913263 +0000 UTC m=+2172.592295746 I0817 10:55:05.557104 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-7hchb-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7hchb-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:55:05.586157 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7hchb-vnc-1" condition "Approved" to 2026-08-17 10:55:05.586138025 +0000 UTC m=+2172.799301161 I0817 10:55:05.592624 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-7hchb-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7hchb-api\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:55:05.606678 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7hchb-vnc-1" condition "Ready" to 2026-08-17 10:55:05.606665652 +0000 UTC m=+2172.819828758 I0817 10:55:05.629062 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7hchb-api-1" condition "Approved" to 2026-08-17 10:55:05.629039894 +0000 UTC m=+2172.842203040 I0817 10:55:05.642778 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "libvirt-libvirt-default-7hchb-api-1" condition "Ready" to 2026-08-17 10:55:05.642766204 +0000 UTC m=+2172.855929310 I0817 10:55:05.647358 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7hchb-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:55:05.647346966 +0000 UTC m=+2172.860510062 I0817 10:55:05.663355 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-7hchb-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7hchb-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:55:05.664576 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7hchb-vnc" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:55:05.664568143 +0000 UTC m=+2172.877731259 I0817 10:55:05.678199 1 conditions.go:192] Found status change for Certificate "libvirt-libvirt-default-7hchb-api" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:55:05.678187188 +0000 UTC m=+2172.891350304 I0817 10:55:05.679402 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-7hchb-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7hchb-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:55:05.686237 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-7hchb-vnc" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7hchb-vnc\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:55:05.694447 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-7hchb-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7hchb-api\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:55:05.762578 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/libvirt-libvirt-default-7hchb-api" error="Operation cannot be fulfilled on certificates.cert-manager.io \"libvirt-libvirt-default-7hchb-api\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:59:43.213632 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:59:43.213718 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-17 10:59:43.2136798 +0000 UTC m=+2450.426842906 I0817 10:59:43.214013 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Ready" to 2026-08-17 10:59:43.214007589 +0000 UTC m=+2450.427170695 I0817 10:59:43.230224 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:59:43.230463 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:59:43.230531 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-api-certs" condition "Issuing" to 2026-08-17 10:59:43.230522637 +0000 UTC m=+2450.443685763 I0817 10:59:43.322548 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:59:43.335290 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Approved" to 2026-08-17 10:59:43.335275514 +0000 UTC m=+2450.548438640 I0817 10:59:43.348556 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-api-certs-1" condition "Ready" to 2026-08-17 10:59:43.348545023 +0000 UTC m=+2450.561708119 I0817 10:59:43.376212 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:59:43.376191566 +0000 UTC m=+2450.589354712 I0817 10:59:43.394273 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:59:43.395130 1 conditions.go:192] Found status change for Certificate "heat-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:59:43.395119403 +0000 UTC m=+2450.608282519 I0817 10:59:43.404020 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:59:43.409849 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:59:44.834989 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-17 10:59:44.834973637 +0000 UTC m=+2452.048136743 I0817 10:59:44.835048 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/heat-cfn-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 10:59:44.835137 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Issuing" to 2026-08-17 10:59:44.835126251 +0000 UTC m=+2452.048289397 I0817 10:59:44.846555 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:59:44.846771 1 conditions.go:203] Setting lastTransitionTime for Certificate "heat-cfn-certs" condition "Ready" to 2026-08-17 10:59:44.846758948 +0000 UTC m=+2452.059922114 I0817 10:59:44.998920 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:59:45.026495 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Approved" to 2026-08-17 10:59:45.026475189 +0000 UTC m=+2452.239638305 I0817 10:59:45.045560 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "heat-cfn-certs-1" condition "Ready" to 2026-08-17 10:59:45.045548409 +0000 UTC m=+2452.258711505 I0817 10:59:45.070830 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:59:45.070816674 +0000 UTC m=+2452.283979790 I0817 10:59:45.085891 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 10:59:45.086492 1 conditions.go:192] Found status change for Certificate "heat-cfn-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 10:59:45.086483571 +0000 UTC m=+2452.299646677 I0817 10:59:45.098461 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/heat-cfn-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"heat-cfn-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:01:51.796405 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Ready" to 2026-08-17 11:01:51.796363439 +0000 UTC m=+2579.009526575 I0817 11:01:51.796453 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:01:51.796493 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-17 11:01:51.796483072 +0000 UTC m=+2579.009646208 I0817 11:01:51.807618 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:01:51.807751 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:01:51.807778 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-ca" condition "Issuing" to 2026-08-17 11:01:51.807769749 +0000 UTC m=+2579.020932865 E0817 11:01:51.808225 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0817 11:01:51.808305 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-client" condition "Ready" to 2026-08-17 11:01:51.808295042 +0000 UTC m=+2579.021458168 I0817 11:01:51.808334 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0817 11:01:51.821456 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" E0817 11:01:51.821588 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0817 11:01:51.821635 1 sync.go:62] "Error initializing issuer: secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" resource_name="octavia-client" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0817 11:01:51.821683 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-client-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-client" I0817 11:01:51.858817 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Approved" to 2026-08-17 11:01:51.85880464 +0000 UTC m=+2579.071967736 I0817 11:01:51.877762 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-ca-1" condition "Ready" to 2026-08-17 11:01:51.877754414 +0000 UTC m=+2579.090917520 I0817 11:01:51.904463 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:01:51.904424718 +0000 UTC m=+2579.117587864 I0817 11:01:51.916682 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:01:51.917055 1 conditions.go:192] Found status change for Certificate "octavia-client-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:01:51.917045207 +0000 UTC m=+2579.130208333 I0817 11:01:51.930577 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:01:51.934033 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:01:52.516714 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-08-17 11:01:52.516702015 +0000 UTC m=+2579.729865131 I0817 11:01:52.517101 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-server-ca" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:01:52.517157 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Issuing" to 2026-08-17 11:01:52.517150777 +0000 UTC m=+2579.730313893 I0817 11:01:52.529402 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:01:52.529494 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-server-ca" condition "Ready" to 2026-08-17 11:01:52.529485289 +0000 UTC m=+2579.742648405 E0817 11:01:52.531203 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0817 11:01:52.531256 1 conditions.go:96] Setting lastTransitionTime for Issuer "octavia-server" condition "Ready" to 2026-08-17 11:01:52.531248713 +0000 UTC m=+2579.744411839 I0817 11:01:52.531277 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0817 11:01:52.543047 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" E0817 11:01:52.543133 1 setup.go:48] "error getting signing CA TLS certificate" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller.setup" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" I0817 11:01:52.543155 1 sync.go:62] "Error initializing issuer: secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" resource_name="octavia-server" resource_namespace="openstack" resource_kind="Issuer" resource_version="v1" E0817 11:01:52.543180 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"octavia-server-ca\" not found" logger="cert-manager.controller" key="openstack/octavia-server" I0817 11:01:52.544393 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:01:52.570102 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Approved" to 2026-08-17 11:01:52.570091994 +0000 UTC m=+2579.783255110 I0817 11:01:52.587400 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-server-ca-1" condition "Ready" to 2026-08-17 11:01:52.587390229 +0000 UTC m=+2579.800553345 I0817 11:01:52.613279 1 conditions.go:192] Found status change for Certificate "octavia-server-ca" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:01:52.613238672 +0000 UTC m=+2579.826401788 I0817 11:01:52.635972 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-server-ca" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-server-ca\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:01:53.321258 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Ready" to 2026-08-17 11:01:53.321243826 +0000 UTC m=+2580.534406942 I0817 11:01:53.321431 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:01:53.321483 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-17 11:01:53.321472122 +0000 UTC m=+2580.534635238 I0817 11:01:53.333094 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:01:53.333251 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-client-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:01:53.333315 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-client-certs" condition "Issuing" to 2026-08-17 11:01:53.333306392 +0000 UTC m=+2580.546469508 I0817 11:01:53.364696 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:01:53.372728 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Approved" to 2026-08-17 11:01:53.372717568 +0000 UTC m=+2580.585880684 I0817 11:01:53.385197 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-client-certs-1" condition "Ready" to 2026-08-17 11:01:53.385185793 +0000 UTC m=+2580.598348899 I0817 11:01:56.822054 1 conditions.go:85] Found status change for Issuer "octavia-client" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:01:56.822035914 +0000 UTC m=+2584.035199050 I0817 11:01:56.832165 1 conditions.go:252] Found status change for CertificateRequest "octavia-client-certs-1" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:01:56.832153953 +0000 UTC m=+2584.045317069 I0817 11:01:56.852231 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:01:56.852214884 +0000 UTC m=+2584.065378010 I0817 11:01:56.867378 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:01:56.867936 1 conditions.go:192] Found status change for Certificate "octavia-client-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:01:56.867925569 +0000 UTC m=+2584.081088685 I0817 11:01:56.890215 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-client-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-client-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:01:57.544253 1 conditions.go:85] Found status change for Issuer "octavia-server" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:01:57.544241906 +0000 UTC m=+2584.757405012 I0817 11:04:33.471932 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Ready" to 2026-08-17 11:04:33.471915611 +0000 UTC m=+2740.685078757 I0817 11:04:33.472843 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:04:33.472911 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-08-17 11:04:33.472902296 +0000 UTC m=+2740.686065442 I0817 11:04:33.488180 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:04:33.488254 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="openstack/octavia-api-certs" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:04:33.488478 1 conditions.go:203] Setting lastTransitionTime for Certificate "octavia-api-certs" condition "Issuing" to 2026-08-17 11:04:33.488264232 +0000 UTC m=+2740.701427348 I0817 11:04:33.705590 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:04:33.720219 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Approved" to 2026-08-17 11:04:33.720208174 +0000 UTC m=+2740.933371280 I0817 11:04:33.736488 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "octavia-api-certs-1" condition "Ready" to 2026-08-17 11:04:33.736477212 +0000 UTC m=+2740.949640348 I0817 11:04:33.773595 1 conditions.go:192] Found status change for Certificate "octavia-api-certs" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:04:33.77358054 +0000 UTC m=+2740.986743666 I0817 11:04:33.786096 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="openstack/octavia-api-certs" error="Operation cannot be fulfilled on certificates.cert-manager.io \"octavia-api-certs\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:20.551042 1 conditions.go:96] Setting lastTransitionTime for Issuer "test-selfsigned" condition "Ready" to 2026-08-17 11:05:20.551027413 +0000 UTC m=+2787.764190529 I0817 11:05:20.575889 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:05:20.576045 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-17 11:05:20.576028334 +0000 UTC m=+2787.789191450 I0817 11:05:20.576418 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Issuing" to 2026-08-17 11:05:20.576403253 +0000 UTC m=+2787.789566459 I0817 11:05:20.591991 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"selfsigned-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:20.592189 1 conditions.go:203] Setting lastTransitionTime for Certificate "selfsigned-cert" condition "Ready" to 2026-08-17 11:05:20.592165109 +0000 UTC m=+2787.805328225 E0817 11:05:20.605606 1 controller.go:134] "issuer in work queue no longer exists" err="issuer.cert-manager.io \"test-selfsigned\" not found" logger="cert-manager.controller" I0817 11:05:20.663746 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-selfsigned-issuer" condition "Ready" to 2026-08-17 11:05:20.663732469 +0000 UTC m=+2787.876895585 I0817 11:05:20.679225 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-system/capi-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:05:20.679324 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Issuing" to 2026-08-17 11:05:20.679314431 +0000 UTC m=+2787.892477547 I0817 11:05:20.679585 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-17 11:05:20.679569827 +0000 UTC m=+2787.892732933 I0817 11:05:20.689503 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:20.689572 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-serving-cert" condition "Ready" to 2026-08-17 11:05:20.689564951 +0000 UTC m=+2787.902728067 E0817 11:05:20.835423 1 controller.go:162] "re-queuing item due to error processing" err="secrets \"selfsigned-cert-\" is forbidden: unable to create new content in namespace cert-manager-test because it is being terminated" logger="cert-manager.controller" key="cert-manager-test/selfsigned-cert" I0817 11:05:20.893350 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:20.927432 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Approved" to 2026-08-17 11:05:20.927422128 +0000 UTC m=+2788.140585234 I0817 11:05:20.998016 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-serving-cert-1" condition "Ready" to 2026-08-17 11:05:20.998001704 +0000 UTC m=+2788.211164810 I0817 11:05:21.039803 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:05:21.039785696 +0000 UTC m=+2788.252948842 I0817 11:05:21.061644 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:21.062216 1 conditions.go:192] Found status change for Certificate "capi-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:05:21.062209714 +0000 UTC m=+2788.275372830 I0817 11:05:21.081801 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-system/capi-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:21.501511 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-bootstrap-selfsigned-issuer" condition "Ready" to 2026-08-17 11:05:21.501499528 +0000 UTC m=+2788.714662634 I0817 11:05:21.523568 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready" to 2026-08-17 11:05:21.523554868 +0000 UTC m=+2788.736717994 I0817 11:05:21.524101 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:05:21.524131 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-17 11:05:21.524126352 +0000 UTC m=+2788.737289478 I0817 11:05:21.550249 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:21.550408 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:05:21.550443 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Issuing" to 2026-08-17 11:05:21.550434746 +0000 UTC m=+2788.763597852 I0817 11:05:21.949607 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:21.964711 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Approved" to 2026-08-17 11:05:21.964692947 +0000 UTC m=+2789.177856093 I0817 11:05:21.988672 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-bootstrap-serving-cert-1" condition "Ready" to 2026-08-17 11:05:21.988659653 +0000 UTC m=+2789.201822759 I0817 11:05:21.996633 1 conditions.go:96] Setting lastTransitionTime for Issuer "capi-kubeadm-control-plane-selfsigned-issuer" condition "Ready" to 2026-08-17 11:05:21.996618418 +0000 UTC m=+2789.209781544 I0817 11:05:22.015620 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-bootstrap-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:05:22.015609333 +0000 UTC m=+2789.228772439 I0817 11:05:22.016204 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:05:22.016219 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-17 11:05:22.016216337 +0000 UTC m=+2789.229379443 I0817 11:05:22.016733 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready" to 2026-08-17 11:05:22.01672925 +0000 UTC m=+2789.229892356 I0817 11:05:22.038958 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:22.039012 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:05:22.039031 1 conditions.go:203] Setting lastTransitionTime for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Issuing" to 2026-08-17 11:05:22.039024955 +0000 UTC m=+2789.252188061 I0817 11:05:22.039041 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:22.098554 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-bootstrap-system/capi-kubeadm-bootstrap-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-bootstrap-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:22.274038 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:22.289596 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Approved" to 2026-08-17 11:05:22.289584913 +0000 UTC m=+2789.502748019 I0817 11:05:22.329312 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capi-kubeadm-control-plane-serving-cert-1" condition "Ready" to 2026-08-17 11:05:22.329300435 +0000 UTC m=+2789.542463541 I0817 11:05:22.367575 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:05:22.36756491 +0000 UTC m=+2789.580728026 I0817 11:05:22.388247 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:22.389779 1 conditions.go:192] Found status change for Certificate "capi-kubeadm-control-plane-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:05:22.389770543 +0000 UTC m=+2789.602933659 I0817 11:05:22.554175 1 conditions.go:96] Setting lastTransitionTime for Issuer "capo-selfsigned-issuer" condition "Ready" to 2026-08-17 11:05:22.554159804 +0000 UTC m=+2789.767322920 I0817 11:05:22.555913 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capi-kubeadm-control-plane-system/capi-kubeadm-control-plane-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capi-kubeadm-control-plane-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:22.574627 1 trigger_controller.go:215] "Certificate must be re-issued" logger="cert-manager.controller" key="capo-system/capo-serving-cert" reason="DoesNotExist" message="Issuing certificate as Secret does not exist" I0817 11:05:22.574659 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Issuing" to 2026-08-17 11:05:22.574651095 +0000 UTC m=+2789.787814211 I0817 11:05:22.574734 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-17 11:05:22.574714566 +0000 UTC m=+2789.787877692 I0817 11:05:22.757544 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:22.757727 1 conditions.go:203] Setting lastTransitionTime for Certificate "capo-serving-cert" condition "Ready" to 2026-08-17 11:05:22.757717973 +0000 UTC m=+2789.970881109 I0817 11:05:22.965406 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:23.122615 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Approved" to 2026-08-17 11:05:23.122605797 +0000 UTC m=+2790.335768903 I0817 11:05:23.234082 1 conditions.go:263] Setting lastTransitionTime for CertificateRequest "capo-serving-cert-1" condition "Ready" to 2026-08-17 11:05:23.234071153 +0000 UTC m=+2790.447234269 I0817 11:05:23.663586 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:05:23.663573307 +0000 UTC m=+2790.876736453 I0817 11:05:23.810622 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:23.811199 1 conditions.go:192] Found status change for Certificate "capo-serving-cert" condition "Ready": "False" -> "True"; setting lastTransitionTime to 2026-08-17 11:05:23.811191977 +0000 UTC m=+2791.024355083 I0817 11:05:24.069965 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again" I0817 11:05:24.106279 1 controller.go:157] "re-queuing item due to optimistic locking on resource" logger="cert-manager.controller" key="capo-system/capo-serving-cert" error="Operation cannot be fulfilled on certificates.cert-manager.io \"capo-serving-cert\": the object has been modified; please apply your changes to the latest version and try again"